Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File:                     Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier:          pZfKasqhfMVdayX/a3iJRZCtTLNtb2NzOlA3dD5lMdI=
Subject key identifier:   0C:56:6B:0F:17:05:86:0B:90:EB:BE:A5:12:62:84:9A:EF:FD:3C:14
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer:       /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial:       019F19B1F7338C15E023295749320AF883FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number:          0467
Signing time:             Tue 30 Jun 2026 18:02:01 +0000
Manifest this update:     Tue 30 Jun 2026 18:02:01 +0000
Manifest next update:     Wed 01 Jul 2026 18:02:01 +0000
Files and hashes:         1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
                          2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: 5hw5HZNeU/rHLVDXJsF6aCKAxQL1I2Lxxu4ioB/8ebo=)
                          3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
                          4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:f7:33:8c:15:e0:23:29:57:49:32:0a:f8:83:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
        Validity
            Not Before: Jun 30 18:02:01 2026 GMT
            Not After : Jul  1 18:02:01 2026 GMT
        Subject: CN=0c566b0f1705860b90ebbea51262849aeffd3c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:7b:d3:96:f7:08:18:4a:94:d8:22:48:e2:
                    34:bd:ca:fb:3f:0e:fb:ad:5f:e5:18:c6:cf:ed:ed:
                    bd:bf:15:f1:09:19:74:07:48:52:ae:12:98:65:f5:
                    7b:dd:72:52:05:8c:58:26:f9:a7:d4:4c:41:84:0b:
                    7e:06:1a:ec:64:28:49:99:a1:24:89:22:39:fa:a1:
                    21:b8:3f:02:1d:5e:d7:73:52:1c:60:3d:2b:78:c7:
                    ba:b6:7d:a6:88:b4:c9:c5:fe:0f:32:f4:d3:77:58:
                    8a:bc:ad:4e:c5:a9:84:3c:f6:d1:6d:cf:36:40:ce:
                    a0:f1:9c:b0:9a:69:2d:8b:8d:6c:b5:7c:2e:f9:d2:
                    76:70:ed:46:d8:bc:e7:66:8f:19:ad:51:c0:a2:f5:
                    08:10:0d:ad:46:8d:3b:03:64:06:2a:37:d5:78:18:
                    15:24:83:5c:fb:74:b9:f7:b2:89:80:d2:8c:56:45:
                    44:8b:c8:c2:f5:31:10:38:72:e8:b0:f5:65:07:63:
                    0f:b0:c1:3f:fe:be:ef:d3:7e:f3:3d:0b:ff:39:f6:
                    99:fb:61:21:2d:53:94:a6:bb:84:43:7c:2c:14:c0:
                    43:5b:b2:62:70:a2:42:e6:a6:ee:f3:c0:f6:5c:3f:
                    1c:04:99:46:49:07:8c:ca:68:86:55:6c:7a:72:74:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:56:6B:0F:17:05:86:0B:90:EB:BE:A5:12:62:84:9A:EF:FD:3C:14
            X509v3 Authority Key Identifier:
                keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:32:0b:93:20:c9:68:c9:82:e0:73:3a:20:79:07:71:f2:30:
         8b:0c:5f:0a:87:50:37:1d:33:fb:9c:96:09:42:d6:b8:80:92:
         05:39:1e:19:18:23:25:f4:6b:c1:02:52:9a:4b:7a:2b:fd:20:
         54:34:6f:4d:93:5a:07:c1:d1:79:f2:f4:bb:84:c5:1a:1e:23:
         f2:f7:bf:8f:45:d1:cb:db:16:3a:74:fc:36:3c:ba:92:6e:d4:
         38:2a:23:bf:c5:46:d9:4b:03:71:b4:2a:d9:da:30:2b:32:5a:
         a6:ee:e0:7b:e4:e2:9e:7d:94:1a:18:07:b0:25:30:45:75:3b:
         c0:d9:de:cf:1e:36:b6:b2:7e:9d:b2:fe:d1:e2:2d:a3:39:c1:
         bd:6c:1e:7a:57:6e:5b:30:4c:1d:7b:59:e6:92:c4:2c:64:97:
         53:e2:c1:83:ac:b0:9b:27:33:13:c9:10:c9:2f:71:03:c8:4c:
         42:b1:26:18:b4:5a:39:fc:6e:8b:22:50:43:6d:fa:ee:79:e8:
         b0:5a:dc:9c:b2:1d:d1:1e:a5:72:30:de:ed:b5:8b:f9:89:25:
         c7:cb:c9:97:cc:f7:f9:b8:4e:8c:6c:47:ff:13:6f:8d:ed:db:
         3c:44:ca:e2:c6:3a:20:7f:70:36:09:c4:3c:dc:b9:00:f0:1b:
         34:c3:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:11 2026 by rpki-client