Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File:                     zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier:          UjTkdPfGSLLeNHkDoo6mQ6Vi9u+arnrfR6Y36507MAU=
Subject key identifier:   E1:30:A6:F8:4F:FC:3A:EF:04:79:8F:4C:EA:D8:9B:68:81:2F:48:B1
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer:       /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial:       019F0E1B3989013341AFAB37892F7DFFB48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number:          1987
Signing time:             Sun 28 Jun 2026 12:01:32 +0000
Manifest this update:     Sun 28 Jun 2026 12:01:32 +0000
Manifest next update:     Mon 29 Jun 2026 12:01:32 +0000
Files and hashes:         1: PHWKar5TU6h_lZjEkMKqfIp601A.roa (hash: Aeqrve+PhkZPn8LtUxmzS3olY+bvpZRjJnDsa2PZ14U=)
                          2: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: qSKBr8iH8bet6q981W6mXAN82sespYzbXwyleBO9tjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0e:1b:39:89:01:33:41:af:ab:37:89:2f:7d:ff:b4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
        Validity
            Not Before: Jun 28 12:01:32 2026 GMT
            Not After : Jun 29 12:01:32 2026 GMT
        Subject: CN=e130a6f84ffc3aef04798f4cead89b68812f48b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:e9:ba:3e:d1:80:97:0b:cf:1a:0c:a1:05:
                    52:e6:68:60:9d:2f:4a:ae:b6:50:2f:55:d2:5b:67:
                    e5:6e:9d:8d:c4:76:a9:c0:b7:43:6a:af:49:a1:43:
                    60:92:88:da:c0:65:6b:59:95:40:92:61:59:6e:ff:
                    fd:c7:2b:90:45:6e:08:bb:22:fb:16:86:07:7a:c8:
                    89:2e:ed:6b:9f:79:62:f6:78:78:fe:af:61:62:1d:
                    e2:f5:41:2e:78:68:63:a8:86:a8:22:49:4e:46:66:
                    12:0e:5c:21:af:96:c6:82:d7:b0:aa:da:b7:f5:c2:
                    db:1e:f4:9c:f6:22:74:dc:35:93:d5:3b:a2:bf:99:
                    90:3e:2b:4e:4a:6b:99:76:93:08:5b:9d:b8:ed:58:
                    c2:18:46:06:3a:b5:30:56:d2:eb:fe:e6:95:bc:db:
                    5b:17:37:53:7a:0b:ac:58:5c:0f:3e:68:a7:4d:b0:
                    22:04:57:21:8b:a9:18:7c:82:04:f2:fc:c8:02:20:
                    68:7d:6d:f5:83:b0:0f:70:ae:f6:79:f0:7f:41:d9:
                    4b:bb:08:03:0d:31:b9:6b:d3:d9:11:fe:07:75:eb:
                    41:bc:98:ad:f0:cc:6f:cc:9a:cc:2c:d3:fb:6c:81:
                    d1:70:cf:8d:5d:6c:8a:21:05:38:c1:73:67:47:11:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:30:A6:F8:4F:FC:3A:EF:04:79:8F:4C:EA:D8:9B:68:81:2F:48:B1
            X509v3 Authority Key Identifier:
                keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a4:97:27:19:ee:3d:f7:0b:d2:f5:9b:39:02:c6:19:9b:58:
         a5:f3:6e:e8:3d:2b:bc:25:bf:39:f2:a8:8d:b6:65:67:85:d9:
         14:bd:2a:39:98:c0:b1:f0:01:6f:0f:57:bb:9c:0d:f5:af:a2:
         62:d4:d3:97:42:c1:00:5a:be:0f:0e:43:22:33:1e:a5:77:b1:
         70:71:62:ab:56:9c:ab:38:f4:01:d9:ed:6a:57:66:e5:ee:79:
         61:79:1f:0c:9e:7f:92:b0:d9:90:58:0d:96:7b:ab:ec:2e:3c:
         36:79:53:05:87:45:fa:2e:59:01:78:e3:94:52:be:4e:f9:6e:
         32:cd:12:7b:27:20:a6:77:f2:98:90:7c:ec:79:6a:91:96:6c:
         b7:5f:66:5d:0a:72:ec:61:a2:55:59:9c:45:49:eb:3f:92:45:
         32:e8:15:f2:e4:5b:40:e1:f8:ef:ae:16:a8:0a:fa:17:21:9b:
         03:5a:e5:0e:d4:a7:6f:66:6a:81:6e:5c:4d:fa:f6:9f:32:f2:
         89:e3:a9:ee:ef:cf:7b:2b:d8:22:5e:43:75:8a:df:5e:bd:ee:
         42:43:e9:4f:4f:8f:89:3a:e7:b6:2b:06:96:3f:e8:e2:1a:7d:
         3e:f0:b1:c8:59:41:cb:b4:ba:9f:b7:37:7e:7d:eb:bb:9b:70:
         5f:28:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 16:23:25 2026 by rpki-client