Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File:                     0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier:          S5s8TD+cTQAayyIJimj49uE7M6Wo80rh7uj4jmYbY84=
Subject key identifier:   77:79:CC:69:F7:72:4F:E3:82:FE:4D:AE:9C:EB:34:E6:BB:F2:18:12
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer:       /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial:       019EB9582DDC0FF57E61CEF4CA8DB8803D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number:          04B9
Signing time:             Fri 12 Jun 2026 01:00:24 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:24 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:24 +0000
Files and hashes:         1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: F+QL4jc9UUHOJQp4OuMlGqdabGFzY4d+RN5nQQRMkt8=)
                          2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:2d:dc:0f:f5:7e:61:ce:f4:ca:8d:b8:80:3d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
        Validity
            Not Before: Jun 12 01:00:24 2026 GMT
            Not After : Jun 13 01:00:24 2026 GMT
        Subject: CN=7779cc69f7724fe382fe4dae9ceb34e6bbf21812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:9c:cb:9f:87:df:21:cc:69:e2:fa:42:a9:
                    08:a4:20:ef:93:35:08:07:94:4d:f0:70:d6:d9:38:
                    0f:cb:a4:96:9a:62:55:7b:fe:ae:de:61:76:b0:99:
                    bf:16:93:9d:b8:fd:34:44:a3:5a:8f:58:4a:bd:f9:
                    a0:44:7c:65:e1:f8:e5:ec:f5:98:fc:e1:d9:51:ba:
                    ca:13:d3:6c:b0:2e:3a:c4:19:50:be:a3:ac:05:ee:
                    5c:27:7c:23:fc:e8:9b:16:ec:43:de:fe:5b:e4:fe:
                    68:b1:0c:01:f6:fb:82:f8:0f:57:ee:9c:c0:27:89:
                    a7:46:f3:47:84:eb:29:a3:ca:b4:6d:13:9d:5d:d3:
                    ed:dd:66:48:84:03:06:e6:00:6d:66:c2:c8:a4:2c:
                    22:df:be:37:fc:26:4e:83:02:5c:e1:50:92:d4:34:
                    29:91:f1:59:ba:12:84:bd:eb:50:3e:44:e2:5c:d3:
                    d4:1e:e4:30:a9:90:3d:da:eb:ed:4b:c8:1b:57:7b:
                    d4:a0:d7:f7:d1:52:d6:04:83:0d:7c:e8:b6:dd:e7:
                    18:d6:7d:ca:55:78:5a:12:0e:28:fd:54:da:7e:61:
                    21:d5:b9:f4:ad:2d:6d:d7:78:74:44:78:4a:d1:1d:
                    ee:43:23:87:c9:a8:d1:a5:91:80:8d:56:72:34:dd:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:CC:69:F7:72:4F:E3:82:FE:4D:AE:9C:EB:34:E6:BB:F2:18:12
            X509v3 Authority Key Identifier:
                keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:6e:63:35:33:ce:aa:a8:a7:b9:d7:f8:5c:de:44:82:69:
         ca:7d:d8:24:01:95:ee:56:44:a8:55:c9:7f:30:4a:64:c4:56:
         bd:a5:87:8c:74:e0:33:65:6a:64:a1:3c:06:ad:3f:d9:d5:37:
         aa:ce:3f:01:a9:80:60:fc:d6:69:dd:24:c9:f9:7e:a7:87:0a:
         e5:e3:77:5f:9b:c6:0f:ed:46:71:5f:75:65:7d:7b:e8:cc:c0:
         b8:83:63:fd:98:42:e4:2e:bd:95:67:41:2d:bb:63:8f:e7:62:
         ab:89:5c:17:a8:a3:b1:7a:a9:6c:0d:d7:01:8c:25:72:76:bc:
         03:14:48:aa:2d:09:e1:99:9d:1a:3c:44:d3:0e:16:9f:2e:13:
         08:0c:de:70:b6:3d:b3:51:6b:32:1d:1c:be:a8:63:2e:4c:31:
         55:b1:67:31:36:ae:a2:9f:45:8f:60:30:a8:1c:ae:44:0f:cb:
         88:2f:f7:98:26:9b:91:13:11:05:d2:b0:46:f6:54:84:37:15:
         83:06:42:75:55:ec:45:f5:c3:fa:55:fc:91:4f:a5:6f:2f:a0:
         67:41:7b:b3:32:43:0c:9f:46:5d:57:3c:8e:ea:79:58:2b:bd:
         ad:8d:45:51:ee:1a:90:b0:af:ad:b7:82:12:cf:3b:62:8f:7d:
         33:0b:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:06 2026 by rpki-client