Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File:                     1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier:          jdYkt2y+uFS/B7FXmoeLPoneuFIsCDjA7j00we7YieE=
Subject key identifier:   83:F1:77:93:86:09:2E:ED:2A:E0:B3:68:7D:30:70:65:BF:7F:1D:CD
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer:       /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial:       019F18D6C00386A7CF0CD8EED5DD160687C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 14:02:34 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:34 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:34 +0000
Files and hashes:         1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: VcI223AVbk2TfxhO3YIg5cvJOkZizOMG8ORMW5n3CwA=)
                          2: IRMSZQsigbDIutOQzlfxAZWWDXw.roa (hash: RtIyl8mWzqrshICWaykO84DdzD/8XhcZyCvNHfIfJZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:c0:03:86:a7:cf:0c:d8:ee:d5:dd:16:06:87:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
        Validity
            Not Before: Jun 30 14:02:34 2026 GMT
            Not After : Jul  1 14:02:34 2026 GMT
        Subject: CN=83f1779386092eed2ae0b3687d307065bf7f1dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:cd:1c:da:d8:63:2a:5e:37:f7:7c:77:8d:
                    2f:1f:ab:25:27:cd:aa:36:6f:5e:2d:32:d6:8b:6d:
                    41:dd:18:bb:c1:81:68:52:6e:e7:a2:1d:84:7c:63:
                    50:65:ba:75:8d:dc:8a:07:17:ff:5f:65:40:db:cd:
                    32:34:f3:c8:c0:4d:06:78:f5:54:88:dc:7a:78:1f:
                    bf:69:9e:f2:63:32:ee:0f:cb:49:16:11:a3:f9:b2:
                    39:83:c9:ef:17:13:f2:70:69:8e:9d:f9:07:a6:fe:
                    84:52:04:af:3d:d6:8d:80:b6:c8:47:40:06:de:e6:
                    8f:54:db:47:91:1d:3d:12:21:7c:b6:99:e7:96:57:
                    d4:c0:59:9e:0e:70:27:88:b1:02:55:ea:14:5a:b1:
                    a5:2f:72:05:89:80:ff:95:6b:6d:ce:37:28:02:74:
                    44:4b:e0:ab:7e:1d:83:b1:95:ca:eb:8c:25:1b:36:
                    0e:27:0b:a8:e3:a1:cc:be:51:be:f4:81:78:1e:b6:
                    30:67:99:e9:c5:cc:49:98:87:e0:a7:81:66:d1:1a:
                    3a:32:22:7a:41:f1:55:3c:58:d1:21:d5:c6:65:dc:
                    cd:83:13:e9:c1:5d:45:be:63:bb:a1:41:c6:75:90:
                    6a:cb:ba:a7:09:64:6c:d0:1c:bb:59:b7:3b:60:58:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F1:77:93:86:09:2E:ED:2A:E0:B3:68:7D:30:70:65:BF:7F:1D:CD
            X509v3 Authority Key Identifier:
                keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:ad:2e:1b:fe:2a:d3:13:42:8a:b2:67:f3:84:50:73:b8:
         ec:1f:3e:11:46:6f:12:18:25:2f:80:2b:a5:b1:24:72:15:fb:
         1c:e9:6f:96:74:ea:bb:6c:fe:da:3f:36:51:ac:f7:1f:e5:01:
         e5:aa:8a:f7:fe:a4:07:fb:a3:3a:23:fd:41:fb:b8:bd:64:4e:
         bd:c1:16:45:c1:d7:87:e6:5e:48:39:09:92:aa:11:6a:dc:d7:
         23:37:41:49:38:10:fe:2a:22:4f:29:35:6e:2f:09:7c:e2:4d:
         3d:0f:2e:3d:3e:b6:bc:87:2d:91:e0:a3:9c:1e:cb:04:c3:6f:
         ad:86:92:61:a9:19:1b:85:20:bf:b4:84:19:ed:59:68:91:a0:
         16:47:51:58:55:8c:0b:0f:bc:57:59:f5:14:d1:7f:44:68:f5:
         b5:cf:3a:8e:a5:92:34:b1:ca:ea:c0:d8:10:68:7a:78:05:d9:
         ac:fb:21:3c:40:72:97:98:29:3f:06:24:62:3b:b3:ef:62:c4:
         b8:47:70:2a:3d:26:62:11:d9:25:85:53:77:be:d4:5c:e1:55:
         15:7f:c9:4c:15:63:d3:f1:08:29:da:0b:ba:f3:6e:b7:a4:8d:
         6e:e9:ea:45:62:ee:ef:7d:90:60:30:b4:98:24:59:7f:59:93:
         e1:b4:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:04 2026 by rpki-client