Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File:                     mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier:          lVkBdNR1EFrsl9TxS3I42fTWos3BgaFtJwMc9ko97Rw=
Subject key identifier:   2E:27:B5:60:7D:96:0B:2B:20:5A:AB:CD:4E:09:9F:27:8A:8C:36:20
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer:       /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial:       019F19B20BDB815A443FB605B5F92B7A6685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number:          017B
Signing time:             Tue 30 Jun 2026 18:02:06 +0000
Manifest this update:     Tue 30 Jun 2026 18:02:06 +0000
Manifest next update:     Wed 01 Jul 2026 18:02:06 +0000
Files and hashes:         1: kpshd_nqvOSLpdq8n2Xp9TiBzzY.roa (hash: gHB/NPpss7TTnWxPCb4UR0vpBAt4lH1CE9UBGyO8VuM=)
                          2: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: VaOwIO0hfBByeoH1lp63dJWLdyYYJCzVv9VzVfI55SU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 18:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b2:0b:db:81:5a:44:3f:b6:05:b5:f9:2b:7a:66:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
        Validity
            Not Before: Jun 30 18:02:06 2026 GMT
            Not After : Jul  1 18:02:06 2026 GMT
        Subject: CN=2e27b5607d960b2b205aabcd4e099f278a8c3620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:11:ae:fd:fb:fe:bd:c2:19:45:9f:a4:db:fc:
                    09:52:ab:99:72:52:5b:b9:bf:3f:78:fc:c6:1d:64:
                    39:1e:6a:97:cf:ea:0e:9b:07:60:cc:6a:e7:c9:8d:
                    04:80:5b:d0:6c:4e:74:32:bb:46:b4:33:82:51:9c:
                    84:38:a2:d0:b9:32:00:b3:2b:d0:95:55:a2:98:14:
                    11:d1:82:f6:e4:5b:a3:8c:1b:21:6e:99:43:c0:b6:
                    90:a0:70:b7:d5:94:c2:fa:87:4b:7e:93:b4:10:54:
                    c2:e8:ac:2f:13:60:96:c0:6d:93:b5:37:1a:29:94:
                    bd:78:0d:cf:d6:97:d4:d7:b6:a6:ad:db:43:2d:64:
                    5f:7a:e8:06:8c:36:54:59:dc:29:d8:61:92:ef:39:
                    e5:bf:38:26:18:c2:3f:3d:b6:43:28:3f:49:c9:e6:
                    61:01:54:6e:10:40:1f:d4:4e:9c:8a:09:bb:36:21:
                    b7:90:4d:a9:88:94:ba:52:8d:f9:58:44:e0:1e:52:
                    2b:18:5a:15:81:f5:ff:7b:bb:f6:b1:ba:a0:d4:3e:
                    53:b7:d1:e0:13:1e:5b:cd:fc:cc:66:ac:1c:d9:e1:
                    32:7c:38:47:21:e2:de:52:ec:0a:4b:dc:99:cf:79:
                    78:b5:9b:64:9b:07:b4:26:79:4d:7e:fa:ef:28:2c:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:27:B5:60:7D:96:0B:2B:20:5A:AB:CD:4E:09:9F:27:8A:8C:36:20
            X509v3 Authority Key Identifier:
                keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:05:c4:20:b6:70:39:fa:3e:54:92:74:26:24:41:8b:c3:
         72:4a:7d:0e:4b:93:cf:93:9a:1f:b3:19:a8:f7:3b:2e:a0:97:
         20:78:94:43:26:9d:24:3c:12:18:82:02:85:33:3d:75:2a:85:
         2a:a4:6e:e0:dd:a0:8d:53:62:0b:fd:22:3d:1d:33:6e:fe:93:
         14:e6:18:4a:2d:85:35:db:d5:37:29:a7:25:68:49:15:db:d0:
         a1:f1:40:f7:60:af:28:05:2c:04:ef:ff:0f:62:5c:af:55:54:
         df:17:b2:95:7f:f8:94:07:ef:10:0b:d7:7a:41:1e:a8:cd:c1:
         d4:66:34:5c:f3:dc:64:f1:11:d5:39:4e:21:06:3d:b3:81:19:
         71:0e:fa:91:6e:cf:15:f8:e9:dd:b6:c5:8d:5a:fa:4c:6b:49:
         66:66:ea:77:a3:26:89:5d:4b:35:0f:e6:2f:96:3b:4c:4a:3b:
         de:54:99:e1:d8:59:be:bc:00:d4:a2:be:c2:b7:13:fd:99:62:
         fa:44:0a:7b:8c:05:73:cc:59:fb:e1:6d:5f:b1:4f:aa:47:43:
         e0:4f:2e:24:8b:d0:19:55:1e:15:b4:50:83:85:a4:f7:69:60:
         a9:09:79:4f:bf:7c:41:4d:5d:d6:ae:5f:9a:8a:da:8b:8f:33:
         55:90:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:34 2026 by rpki-client