Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          ZiN+zhmcRQ9YRQY1nBpagJWCP6LeVDDVqorZde8M/2Q=
Subject key identifier:   12:C7:8C:83:4B:FE:8E:68:A5:CF:F2:E2:19:14:7E:8D:F8:A4:72:B5
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019F1AFB27F56ED929D3A5F623420D79BFD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          1660
Signing time:             Wed 01 Jul 2026 00:01:35 +0000
Manifest this update:     Wed 01 Jul 2026 00:01:35 +0000
Manifest next update:     Thu 02 Jul 2026 00:01:35 +0000
Files and hashes:         1: HiiPQJYwHAaSYAVm8uTze8vCE9o.roa (hash: 2nziwQn2BDX70j1YJrz3ReJWO/lfYuKvlW5ZyhVZirs=)
                          2: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          3: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          5: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (hash: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=)
                          6: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: vXF4Jj7FtQO/+PH6lj9nTTqvA2enfBXZfJyt2sl4lQk=)
                          7: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fb:27:f5:6e:d9:29:d3:a5:f6:23:42:0d:79:bf:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jul  1 00:01:35 2026 GMT
            Not After : Jul  2 00:01:35 2026 GMT
        Subject: CN=12c78c834bfe8e68a5cff2e219147e8df8a472b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:01:d4:2e:dd:b0:a7:7e:74:27:60:0c:2d:
                    7c:10:5f:2c:e8:a3:e9:3a:24:b7:6a:20:79:03:87:
                    43:fd:30:35:06:20:28:18:64:5a:4d:a3:39:51:32:
                    f0:b7:9f:6c:70:71:21:78:8d:ce:6f:61:77:58:0d:
                    83:5a:23:3b:81:e3:25:c9:04:0f:5c:da:8b:58:bb:
                    ca:e5:d4:7c:5f:04:9b:19:46:f9:14:48:09:ca:f8:
                    fc:b5:da:87:b3:1a:f6:57:a9:b9:b8:f8:12:4a:51:
                    b8:e4:7a:b1:c0:a4:ee:86:8c:8a:79:02:f1:16:ce:
                    37:d5:2a:c2:7f:d3:01:2f:03:d8:52:20:1b:f1:56:
                    e9:c4:90:ce:60:96:1a:2f:92:e9:10:74:d8:07:e1:
                    f1:55:f0:fd:bf:42:df:36:50:ab:5b:48:07:a4:41:
                    41:58:1c:90:8f:2d:48:bb:17:fa:a8:2f:aa:93:73:
                    c7:0c:1d:7b:8b:ed:c1:2b:18:52:6c:03:c5:a9:1b:
                    22:0c:72:02:38:80:3f:50:3b:ab:bf:72:69:74:6c:
                    04:29:9e:b7:e0:ff:47:b9:7f:49:cd:8f:1a:1e:6e:
                    83:37:63:5d:b9:c1:7a:6a:6b:cb:a4:92:5c:dd:76:
                    41:43:31:08:b5:b8:f7:c7:c8:4a:97:fe:5d:62:ae:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C7:8C:83:4B:FE:8E:68:A5:CF:F2:E2:19:14:7E:8D:F8:A4:72:B5
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:34:5d:6d:80:b9:98:92:52:c8:9f:64:7e:20:6b:5d:76:69:
         ed:d9:ad:33:c6:c9:7e:79:89:36:92:d5:57:cd:f6:ce:3c:44:
         01:d6:72:91:e2:60:34:9f:ed:2e:5d:67:f7:51:d0:04:72:4c:
         ff:db:26:b9:96:84:c6:54:fe:9e:43:b6:95:b3:d9:37:ab:ee:
         28:92:1d:5f:d2:c8:e4:64:57:d6:f3:04:98:3f:91:bc:34:13:
         78:08:23:2e:f6:3f:5d:83:33:d3:dd:7b:35:72:fc:4a:a9:1f:
         05:df:a5:72:f5:0a:f3:fd:41:98:9e:65:ee:8f:c0:99:ca:b1:
         b9:cf:a5:aa:50:15:f2:cd:89:5b:68:36:43:b9:21:5a:2a:c2:
         61:e0:39:1d:03:4f:28:62:42:a7:5d:19:1a:c3:29:4d:41:de:
         8c:cf:59:11:42:a0:04:27:da:de:0f:71:06:6d:eb:bc:8b:a6:
         e8:5a:eb:c1:00:c4:8c:0d:2b:60:b6:2b:17:8e:46:fc:a2:b0:
         11:52:5c:4c:cf:37:06:10:99:f1:d6:25:dd:41:58:04:e2:ec:
         30:de:a9:24:0b:a3:64:10:21:91:f8:f2:30:b2:56:6b:36:dc:
         6f:68:b0:c9:62:14:e2:e0:43:7b:de:f5:6e:90:01:d4:e7:ef:
         bf:aa:53:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:35:53 2026 by rpki-client