Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          WEro3uw0PZMIKd5CNl5Mazzt07i2ahbsRA6QhRRgb/8=
Subject key identifier:   51:EE:EF:11:81:72:CF:D3:BB:0F:6C:FC:46:B5:68:B3:9C:52:AE:62
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       019EB8EAA0A9359B313BAB72E93142D6585E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          18E9
Signing time:             Thu 11 Jun 2026 23:00:44 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:44 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:44 +0000
Files and hashes:         1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
                          2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: qZ13QeUynLHoK2ZNIcVpQZMNzZrFBDd5ekXRrFEe+Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:a0:a9:35:9b:31:3b:ab:72:e9:31:42:d6:58:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Jun 11 23:00:44 2026 GMT
            Not After : Jun 12 23:00:44 2026 GMT
        Subject: CN=51eeef118172cfd3bb0f6cfc46b568b39c52ae62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:cd:d4:58:2e:fb:3c:82:11:f3:6b:4e:24:
                    e7:d3:6c:28:69:47:29:8a:fb:80:f5:13:e4:1b:f3:
                    1f:cd:fe:00:a1:1e:1c:22:e1:00:b5:26:3c:49:46:
                    10:c8:3c:4f:7d:1b:3d:97:ed:8e:c5:ae:1f:39:92:
                    d6:95:92:c2:4b:8e:06:2c:da:60:10:ef:37:c4:8b:
                    4b:39:e5:a4:79:6a:ea:7b:81:c0:12:25:67:78:6c:
                    73:61:3b:cf:85:e1:06:d4:89:fe:7f:02:eb:c0:a3:
                    68:f2:e2:6d:7e:4e:ed:96:24:79:e1:d6:b2:07:90:
                    99:4f:30:04:0e:e7:24:92:3a:0e:78:65:c5:dd:5d:
                    fa:9f:b9:3b:e0:42:01:44:86:f7:1f:09:f6:10:92:
                    25:01:43:5c:03:12:fe:94:44:fe:de:b3:b5:ba:4a:
                    1f:3c:46:5c:32:6f:75:a9:24:b5:d9:00:db:2a:a2:
                    ae:19:c5:ef:91:bb:4a:cb:c1:87:34:c0:c9:e2:2b:
                    2b:0f:62:e9:b0:70:73:77:01:38:e4:ad:3c:90:32:
                    d2:b9:98:4f:f0:4f:53:13:4e:3a:fd:b1:b1:dd:ad:
                    c1:bc:be:3b:79:df:d3:ab:de:7a:b6:fd:cd:dc:4c:
                    53:37:e0:5a:1a:54:12:31:55:73:1e:93:d1:7b:3f:
                    d4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:EF:11:81:72:CF:D3:BB:0F:6C:FC:46:B5:68:B3:9C:52:AE:62
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:e7:f1:ce:78:47:05:fc:18:f6:d1:40:b7:2f:e6:74:7f:
         3a:ad:7f:05:02:eb:ba:06:a2:12:fc:a4:14:e9:b2:47:d2:0a:
         8f:8c:d1:74:5a:95:4a:01:4a:4c:bc:24:1c:52:c3:e0:e7:08:
         de:19:8c:56:0b:2c:59:6f:5d:c8:73:25:f4:40:3c:61:12:31:
         41:3b:f5:df:d2:7f:e0:3e:4c:4f:75:3f:2e:ac:aa:2f:71:a1:
         0c:ee:62:eb:7a:be:31:3f:06:19:24:13:af:29:63:a2:05:89:
         8e:ff:9b:a7:4a:bf:fd:dd:39:c9:81:49:70:cd:bd:fa:3a:2a:
         88:77:c7:4b:b6:f2:08:75:bd:36:65:a6:34:3e:47:3b:93:0a:
         73:ac:32:81:72:2f:7c:8b:ec:29:fd:4c:0e:ab:33:db:56:51:
         26:90:ed:8e:78:db:44:7e:2c:fd:dd:39:ec:e6:49:f8:cf:a4:
         cf:f3:e2:7c:04:ba:d8:49:82:90:ad:7c:d0:5c:64:a7:52:cd:
         8f:d3:0f:13:7b:47:58:c3:65:77:8e:ac:a3:0f:05:db:46:02:
         37:b2:be:4b:e4:a5:e9:c5:82:fa:39:1b:5d:6c:7c:ff:1d:93:
         34:76:1d:82:a1:93:58:c8:b6:d1:36:de:55:fa:f7:92:2f:e1:
         db:8e:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:23 2026 by rpki-client