Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft
File:                     z9C0uuE0JweyZgv8_HTpmghS5J8.mft (raw, json)
Hash identifier:          lmlGrUBw+PDfzcsU62G/Gcn+w2ThQVCXSRYVUcvQ6IM=
Subject key identifier:   9B:F1:5E:5C:EE:CF:6F:FE:22:E6:9D:35:D3:C0:99:C5:12:55:FB:BA
Authority key identifier: CF:D0:B4:BA:E1:34:27:07:B2:66:0B:FC:FC:74:E9:9A:08:52:E4:9F
Certificate issuer:       /CN=cfd0b4bae1342707b2660bfcfc74e99a0852e49f
Certificate serial:       019EB6C51796C5E212D926050F8175456AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft
Manifest number:          0A
Signing time:             Thu 11 Jun 2026 13:00:30 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:30 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:30 +0000
Files and hashes:         1: z9C0uuE0JweyZgv8_HTpmghS5J8.crl (hash: /CCOyboi+ANNrtHCdonmlmvF/4bbpPU/9LxkA/WicHg=)
                          2: zyN-ZVjyBRof3RZPTAuiK23Dij4.asa (hash: CcKHk8N+y7xcd6YwUq0NHCEOSb2kKqihjTrjg5DotXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:17:96:c5:e2:12:d9:26:05:0f:81:75:45:6a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd0b4bae1342707b2660bfcfc74e99a0852e49f
        Validity
            Not Before: Jun 11 13:00:30 2026 GMT
            Not After : Jun 12 13:00:30 2026 GMT
        Subject: CN=9bf15e5ceecf6ffe22e69d35d3c099c51255fbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:96:dd:9a:9b:81:63:12:58:88:b6:e0:42:
                    56:88:96:ff:ed:9a:15:26:02:8d:eb:c3:46:f4:18:
                    a7:9e:5f:40:ff:23:20:37:3c:34:f6:39:95:aa:55:
                    cc:cf:03:0d:24:ad:97:49:d2:45:28:b9:d0:20:e9:
                    44:9a:3b:31:d5:98:2b:ae:64:e3:23:4e:ed:43:c8:
                    29:4d:a5:69:32:f4:d4:53:4f:f8:82:58:e6:ad:14:
                    f8:33:ef:58:bd:d2:e2:70:0e:17:e0:4c:f1:55:54:
                    64:33:35:3e:82:64:86:ab:97:5e:77:e6:7f:e9:3f:
                    ef:cd:88:df:c1:63:5e:3d:37:d5:d1:99:2e:07:18:
                    9b:23:ce:13:94:93:b5:12:07:dc:b8:36:7d:5c:76:
                    cf:f3:2e:0f:c0:51:f1:b6:af:e8:4b:4b:77:36:5c:
                    a2:fd:01:5c:04:17:eb:ae:4d:e1:21:0f:3d:4b:91:
                    6d:fe:7a:4a:c7:2f:58:46:b9:38:9b:eb:0c:05:8f:
                    55:c8:3d:dc:d2:68:30:dc:a9:14:55:ef:9c:df:a7:
                    80:1b:c2:c1:bc:9a:cd:a0:f6:88:fc:cc:8d:a5:ad:
                    be:b2:96:d5:9e:1e:c0:61:d4:7e:40:64:4a:66:5e:
                    3c:90:9f:f2:b3:49:d5:69:ec:39:88:20:e3:f4:4a:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F1:5E:5C:EE:CF:6F:FE:22:E6:9D:35:D3:C0:99:C5:12:55:FB:BA
            X509v3 Authority Key Identifier:
                keyid:CF:D0:B4:BA:E1:34:27:07:B2:66:0B:FC:FC:74:E9:9A:08:52:E4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:58:85:57:5a:c9:bc:5b:77:db:d4:3c:29:86:ef:a1:29:43:
         b4:3a:23:68:92:26:6d:33:c4:93:f9:4b:84:63:7b:08:0c:8c:
         d9:84:18:bd:95:48:d0:8a:fb:e9:41:5f:19:de:48:f2:48:f7:
         2d:53:bf:81:a7:8f:3b:67:b5:55:7c:d0:e2:9e:55:a3:89:f1:
         8e:11:ad:94:40:54:50:b4:6e:3f:bb:ab:a0:37:87:77:85:1d:
         e0:eb:1a:10:c7:dc:ae:d6:9d:f6:0c:61:13:48:a9:95:fc:cb:
         da:71:a1:cb:88:6f:79:eb:df:27:2a:50:6f:5e:df:89:c9:f1:
         12:d4:e2:aa:b0:bc:24:9e:1f:c0:0e:fc:48:48:7b:b7:61:3a:
         19:23:24:92:c3:39:fb:ed:61:70:d2:3a:82:a1:50:9c:50:20:
         56:87:6a:3d:ae:08:e6:24:cf:81:ac:00:a3:65:bf:87:c8:a6:
         1a:8a:05:35:f6:7b:b8:bf:96:d0:de:3f:76:fb:63:96:9f:ad:
         5d:3f:50:af:ea:f5:a0:62:c0:cc:b6:92:9f:02:d1:9c:95:b3:
         a7:9e:dd:89:bf:cc:48:f5:15:6e:41:1c:23:c9:ea:0b:8c:ef:
         00:55:69:73:59:38:ff:63:19:36:4d:1a:96:f1:f3:ad:bb:88:
         9c:47:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:32:21 2026 by rpki-client