Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File:                     e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier:          Qzw0jKuLuJfQzm6xvWtapi2/nLtsGm/yz7aRPxMM4SE=
Subject key identifier:   1D:00:47:6F:83:99:C8:67:F0:E0:61:8F:D4:5C:E0:09:A5:D4:49:51
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer:       /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial:       019F1189FD091CC78CA8CE19440BB5CC145B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number:          0D57
Signing time:             Mon 29 Jun 2026 04:01:23 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:23 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:23 +0000
Files and hashes:         1: 1-2vR9D5EuHiUZ8YUPiWZdd3LlOc.roa (hash: UyaZQo5wMw6T5Iq4+XMbThUI1LZMa4RGhlfpw/fbh4w=)
                          2: Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa (hash: X7ptSGD8hMEh9qW7Py0+45xWZLrj3NoOhUjyiTrtyQc=)
                          3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: 9JEgykDyE/c/QiFxKMjZm3vI5tUCkhF9ErXuFvRcPVE=)
                          4: ytUrE1yikUozgHVrWde_TAyxalY.asa (hash: cd7uv24NUxcddeM4R6jn2GTZOxo6970ut0T+FVbZ/XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:89:fd:09:1c:c7:8c:a8:ce:19:44:0b:b5:cc:14:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
        Validity
            Not Before: Jun 29 04:01:23 2026 GMT
            Not After : Jun 30 04:01:23 2026 GMT
        Subject: CN=1d00476f8399c867f0e0618fd45ce009a5d44951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:e5:ae:80:f7:0d:49:fa:b8:39:74:5a:fb:
                    45:4b:db:2a:d1:d4:11:c4:91:63:96:d1:1f:4d:00:
                    d9:d3:06:a7:59:ed:79:cc:82:d9:79:85:7c:a5:d0:
                    6a:49:8c:27:39:34:3a:ea:df:98:5c:02:89:e1:5b:
                    e5:01:e7:76:08:17:22:14:01:c0:e1:d9:59:0f:16:
                    48:b1:08:22:ca:aa:26:a9:15:4a:e2:42:f6:c5:a0:
                    79:6e:1d:d8:b7:ae:84:58:36:0c:85:f3:44:28:99:
                    cc:39:14:d8:e9:35:5c:4f:be:56:e2:22:68:4c:db:
                    85:d9:2b:42:5a:f0:a7:4e:a7:b0:f6:e2:73:ba:7a:
                    3f:9c:35:b5:ac:1f:f1:00:ae:e5:70:e3:a5:98:70:
                    a5:f4:d2:94:97:f4:7f:bd:58:d3:4e:fe:a8:70:d3:
                    fe:43:89:1a:03:cd:bd:38:cd:b8:9d:46:35:57:5c:
                    fc:26:88:5c:70:b5:0c:30:a5:6f:ef:c4:f4:15:4d:
                    cb:41:06:0f:78:55:73:68:0c:97:54:4a:61:32:22:
                    ce:2e:57:97:59:20:77:1e:29:40:1f:9a:a0:29:87:
                    dd:34:f7:bc:72:2a:78:6e:c7:74:67:77:50:fb:fc:
                    ed:0c:36:dd:84:b5:b0:f6:fe:74:4b:f1:65:0a:80:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:00:47:6F:83:99:C8:67:F0:E0:61:8F:D4:5C:E0:09:A5:D4:49:51
            X509v3 Authority Key Identifier:
                keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:dd:d4:31:f5:c9:ae:ab:33:34:70:51:d8:4f:fa:1a:80:
         93:d0:1d:32:97:fa:b5:c0:74:85:46:4f:f5:5c:56:be:4f:80:
         c9:60:88:aa:9f:85:6d:dc:90:af:49:f7:d4:4b:ec:5a:6f:e6:
         33:7f:f9:1c:15:02:76:0c:48:ad:d6:6a:f0:17:d3:c1:5e:73:
         6a:aa:68:1f:b8:7e:8b:0c:58:b2:32:0b:1c:24:fb:9c:98:e1:
         34:21:33:47:e7:5d:3f:bb:9e:75:e3:2f:64:8e:34:e9:3a:00:
         db:43:cc:2f:0c:4f:59:81:df:ac:fd:d0:4c:a2:8b:82:a4:2a:
         57:32:04:47:89:21:5d:5d:e2:23:05:6b:cf:cd:39:61:37:da:
         d6:a8:73:2d:98:49:b3:4c:cf:23:70:9b:36:5b:03:1c:89:dc:
         25:d6:9a:b6:15:80:1b:fa:3e:05:63:0c:59:7f:ae:e6:00:69:
         fa:a4:b2:8f:d3:b9:ac:33:d9:f6:1a:41:3d:49:3d:9e:2a:a0:
         53:d1:ab:c4:fb:6d:f7:9c:93:a0:91:7b:4a:09:dc:d8:1e:c6:
         8a:0b:41:f4:79:10:90:ba:96:23:09:98:e9:ff:70:e9:1d:db:
         c1:1a:1a:cf:54:ea:aa:df:6a:f9:ab:39:b1:02:18:65:28:f3:
         0f:66:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:19 2026 by rpki-client