Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File:                     NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier:          FKZhjtVLIuYRfo16GKlddtCGL760yvGCY/DB3yF++8I=
Subject key identifier:   28:33:F4:C8:81:E8:09:ED:0C:AC:95:2F:81:5A:DE:C6:C0:1B:1A:F0
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer:       /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial:       019F11535BAA4F76B0A2344B648E6A4DC80C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number:          10B6
Signing time:             Mon 29 Jun 2026 03:01:43 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:43 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:43 +0000
Files and hashes:         1: L1KLoii7mllBm2dQe2-Gj8PsyDI.roa (hash: zs3GHCL4mut8DK7aF4W8FvASTk6ZHfaiz6+KBdL52cY=)
                          2: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=)
                          3: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: pd1JNwE9hujNxWcUXaoQw/EPg4hilBw0tLGP7H4VKBA=)
                          4: TO6nqQhnOsZjFu2as_fLfCF9jiU.asa (hash: AzlXqDoRzTdGdaGKF/7T/k6tmAW/64eypKY9s/31aeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:53:5b:aa:4f:76:b0:a2:34:4b:64:8e:6a:4d:c8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
        Validity
            Not Before: Jun 29 03:01:43 2026 GMT
            Not After : Jun 30 03:01:43 2026 GMT
        Subject: CN=2833f4c881e809ed0cac952f815adec6c01b1af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:11:ea:78:3a:7e:78:25:ec:e9:f4:ff:9e:
                    a2:41:8c:79:1a:b5:f8:f6:92:5e:af:5b:bd:a5:af:
                    1a:2b:af:a2:13:de:ad:4f:11:5e:fb:cb:b7:fd:62:
                    4b:de:fc:8d:c5:65:fb:37:4a:ce:60:88:df:3f:b2:
                    03:34:c2:2d:6e:0b:dc:e8:ba:de:d4:1f:cf:17:8a:
                    24:e7:3c:e9:df:cf:57:76:26:2e:fd:5c:48:e4:3c:
                    88:3e:1f:42:95:72:88:e9:77:aa:75:c6:6a:d6:24:
                    b7:7e:d6:ba:62:c2:a1:f9:64:d8:59:6d:5e:a6:8f:
                    64:94:e4:2d:b1:5a:1f:bb:2d:23:c5:54:cd:6d:a1:
                    22:79:6e:93:af:ad:69:ee:57:7b:d1:bd:1b:68:e0:
                    f3:72:7f:ee:5f:e6:19:e5:38:d4:6f:a3:06:de:2e:
                    4f:58:1f:73:76:33:e0:6a:fb:bc:a0:d6:2b:c9:e9:
                    2c:17:c9:63:79:e7:0c:e5:50:bb:4d:33:33:7b:9f:
                    ed:b7:2b:f9:c6:92:f0:81:fb:f8:f4:b1:96:5c:f7:
                    a8:12:36:9e:14:78:00:e7:21:e2:c2:ff:e3:de:44:
                    38:33:12:4c:6f:90:eb:ce:a1:d0:10:9e:8c:73:05:
                    1c:23:f2:97:7f:65:98:58:1e:ce:03:d0:7c:4e:b6:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:33:F4:C8:81:E8:09:ED:0C:AC:95:2F:81:5A:DE:C6:C0:1B:1A:F0
            X509v3 Authority Key Identifier:
                keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:8b:dd:34:f0:7a:d7:30:8f:b4:77:07:1c:52:83:25:e3:
         92:3b:f9:24:0b:17:ac:bc:c6:39:d7:9c:4e:c8:7d:2a:be:50:
         df:b9:82:08:6c:f1:a1:8c:b9:eb:37:8e:29:2a:0a:4b:55:aa:
         03:58:f8:cb:9a:66:84:f5:44:fa:44:ed:f0:75:bf:22:31:24:
         4b:ac:a1:4c:9e:fc:0f:32:fa:23:37:bd:7b:f8:29:00:07:8c:
         ed:af:6e:38:c7:65:57:62:7d:5a:cb:29:9b:e0:aa:f6:52:b8:
         78:c0:8f:5b:9e:a0:5b:1c:6e:81:72:d0:b9:d9:70:6a:73:16:
         8a:a2:41:3b:5d:a8:2a:7a:86:4c:af:35:6d:eb:8e:ea:c9:50:
         52:81:2f:49:1c:d0:bf:6a:51:e9:6a:e1:17:5c:6b:dd:02:e3:
         45:52:a2:c4:94:4f:a4:72:6b:61:0b:ed:5d:6c:4e:69:aa:9e:
         d9:3f:6e:3a:56:df:e0:b4:e5:ae:30:eb:7d:fc:c8:d0:86:01:
         c5:78:f0:e7:fa:8b:4b:38:b7:5e:ac:e9:36:ec:6a:ef:2d:7d:
         db:c2:ba:bf:b2:91:7f:96:36:7c:34:b7:d7:e0:08:21:13:12:
         21:53:88:91:2d:d5:00:77:28:5d:f4:00:4c:74:6d:f5:f7:3b:
         e6:8f:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:47 2026 by rpki-client