Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File:                     zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier:          k1QfdoLZLg0eOz2dTV1K3TFq/ep7VeLWnAplIKL5Sdw=
Subject key identifier:   73:99:67:96:F0:DB:9C:AE:2A:5A:12:29:1E:CB:09:16:79:41:8F:8D
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer:       /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial:       019EB80F668D851F976A4EA5BFC4D5C8D476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number:          08FC
Signing time:             Thu 11 Jun 2026 19:01:17 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:17 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:17 +0000
Files and hashes:         1: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: 4BxY7JUh13AQpKCn1HBMsBTG8wzERiUI0FPGncXVhyc=)
                          2: zyPqIwgvyXC9lIUoG61mB6n09UU.roa (hash: vO04NStXDDqi7y92fry/H4qNWdoUZgsfcjDUmEnQqDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:66:8d:85:1f:97:6a:4e:a5:bf:c4:d5:c8:d4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
        Validity
            Not Before: Jun 11 19:01:17 2026 GMT
            Not After : Jun 12 19:01:17 2026 GMT
        Subject: CN=73996796f0db9cae2a5a12291ecb091679418f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:5b:f5:aa:00:0d:60:98:cf:7c:35:ea:74:
                    01:13:66:6e:e7:ce:d5:14:c0:88:9b:b3:c3:15:35:
                    e3:4f:7a:ac:4c:39:67:0b:3c:6e:79:20:5a:b9:8e:
                    a1:35:18:29:f0:bf:d0:7b:37:d8:62:a0:ca:7c:16:
                    6a:d0:40:97:89:50:38:40:09:2a:1e:34:f3:24:53:
                    d3:c3:70:07:70:4d:0b:e1:15:ea:f3:4a:e0:ff:5e:
                    73:56:79:f1:9c:f1:63:d2:b4:22:12:0c:e6:56:05:
                    30:72:b0:2f:d0:e2:9a:24:a4:ea:9d:bf:91:52:26:
                    f2:37:f4:59:fc:6b:b4:79:12:0a:9b:25:29:b3:13:
                    fc:72:da:67:e3:4a:ee:0f:ae:36:6d:ef:1a:d2:06:
                    97:10:1c:0c:0d:69:d9:2d:83:de:f2:ec:6e:78:0d:
                    19:b7:69:a2:43:79:e8:69:ca:8d:49:0b:d2:f8:9f:
                    42:43:4d:77:52:a3:ae:ba:58:ba:f7:62:e5:93:64:
                    6a:d4:3d:d1:64:41:4a:ec:1c:e3:96:e7:d2:cc:e8:
                    52:f6:21:3e:7b:00:2a:f9:88:d2:04:45:e8:84:a8:
                    23:0e:cc:b5:9d:ef:1f:ce:71:6c:40:b6:0c:71:ac:
                    93:68:61:d6:e9:d6:2e:d8:33:aa:8d:a9:91:ba:6d:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:99:67:96:F0:DB:9C:AE:2A:5A:12:29:1E:CB:09:16:79:41:8F:8D
            X509v3 Authority Key Identifier:
                keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:bd:9e:e4:60:57:62:e0:90:bf:4f:c8:b4:f9:d6:2d:41:
         e4:d6:86:87:bc:5c:16:b9:1b:e1:43:67:af:ea:8a:0c:07:82:
         fe:b2:0b:ca:40:65:c5:b2:b3:e0:51:53:3f:e7:3c:c6:da:18:
         ba:02:55:27:43:a3:79:b1:67:a6:5d:12:b8:a7:3b:72:8f:2f:
         c1:98:2f:2e:47:9c:6e:e2:84:26:93:92:a0:86:e9:56:6a:2b:
         ed:66:f4:75:8d:f3:ad:2c:e5:e1:53:1a:88:ff:21:8e:7c:02:
         43:0e:57:96:4f:22:00:d1:e7:79:7b:27:1a:b3:66:03:d6:92:
         b5:af:a5:b6:5e:1b:db:99:71:30:3c:8d:7d:84:e8:0e:86:8a:
         ce:05:5a:25:54:96:8e:df:e4:8e:94:02:32:61:40:2f:46:b0:
         95:7a:d0:60:d1:89:f3:93:c5:63:c9:f1:2d:52:d8:c3:92:71:
         cd:51:0c:e5:76:f3:69:93:98:81:d5:48:8d:74:c0:5a:a1:ef:
         b4:82:c0:18:b4:30:c6:63:5e:29:b6:98:e4:33:2a:e8:e3:be:
         83:e0:ba:3e:d5:7a:ad:6e:08:58:ac:d8:e3:79:0f:87:e0:03:
         11:7d:34:6d:ef:fc:63:82:8c:f0:40:fd:cc:57:5b:ea:d1:88:
         9c:d6:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:16:16 2026 by rpki-client