Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File:                     mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier:          mcMV1U3nMra/DMq0ynenGbp/jHG/+n1wBtkIdvYDFw8=
Subject key identifier:   4F:54:95:E1:BC:62:39:8B:A5:5A:7F:DA:99:59:F3:9E:9D:15:B1:59
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer:       /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial:       019EAF0BD745FB906DB4055EBF26521534E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number:          1968
Signing time:             Wed 10 Jun 2026 01:00:49 +0000
Manifest this update:     Wed 10 Jun 2026 01:00:49 +0000
Manifest next update:     Thu 11 Jun 2026 01:00:49 +0000
Files and hashes:         1: I4TuqjOm1C2zDBl84QYwRusdbW4.roa (hash: 6Cy0hcq0lmTjssRip5hhqeI88aZGCGL9orwx2vFNpm0=)
                          2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: tfZTg24w+2jhXkpRZTRkaCjxCy+mPDfcrxfxpZu4auk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:af:0b:d7:45:fb:90:6d:b4:05:5e:bf:26:52:15:34:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
        Validity
            Not Before: Jun 10 01:00:49 2026 GMT
            Not After : Jun 11 01:00:49 2026 GMT
        Subject: CN=4f5495e1bc62398ba55a7fda9959f39e9d15b159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:ae:11:45:f1:6a:dc:6e:95:9f:cc:20:8b:
                    ac:04:59:5a:f6:ef:f4:55:82:30:16:66:6c:c8:86:
                    71:e1:c4:4c:97:86:75:83:f6:11:7c:3b:88:47:a3:
                    b2:c5:eb:02:e9:9d:2b:d7:a3:34:b6:b1:11:22:d7:
                    37:40:c4:ed:4e:cd:6b:2e:1b:ce:ff:1d:da:85:d9:
                    ef:fd:40:4b:b9:39:8b:c1:b5:eb:be:d5:b8:e3:c6:
                    77:ea:b3:f4:7e:8c:f2:3c:0d:52:61:c8:eb:59:72:
                    35:3a:47:aa:dd:33:06:90:be:24:49:f6:2f:8e:d1:
                    e5:10:92:62:03:e1:69:d5:91:78:1b:1d:af:c5:a4:
                    1b:7a:d1:9d:9d:b5:0f:47:79:bf:20:50:d8:2d:25:
                    fe:e4:e4:41:b2:1e:9b:fb:c6:fe:1b:39:d1:08:55:
                    5f:62:f2:68:c1:9b:fb:37:24:42:98:13:f8:20:26:
                    0b:20:39:88:89:fb:b1:06:21:34:63:ed:aa:57:68:
                    e8:6e:b0:56:9e:6a:ca:ba:16:e6:1a:ca:a9:2e:4e:
                    11:ad:a4:61:cb:e6:4e:78:55:c9:06:3d:2f:14:7e:
                    94:cb:bc:89:13:07:95:d6:3d:87:34:8a:69:36:46:
                    24:eb:63:b9:5a:5c:f1:0b:66:fa:b3:f6:87:a8:99:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:54:95:E1:BC:62:39:8B:A5:5A:7F:DA:99:59:F3:9E:9D:15:B1:59
            X509v3 Authority Key Identifier:
                keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4c:96:26:ee:3f:ce:75:d2:4c:e7:bb:b7:d8:35:ff:a8:fb:
         2a:1b:2b:cc:b4:72:30:0a:db:26:02:10:01:29:d1:a9:dc:bd:
         24:eb:2f:58:0a:34:d7:07:36:af:fa:6e:e9:b9:d4:ed:c5:8d:
         27:89:72:82:d3:85:ff:17:99:e1:39:ec:a4:77:94:b9:41:b0:
         4a:bf:9c:82:13:62:11:aa:0d:8e:56:84:13:fa:9a:01:60:fb:
         3c:1a:c7:db:f1:27:3d:99:3d:9a:b7:7a:6c:4a:90:77:6a:74:
         8c:23:6e:e2:68:57:2b:8d:69:89:11:25:19:87:83:ec:1e:fe:
         63:b5:ad:08:19:0e:52:44:e0:b5:21:1d:bf:17:16:9a:ce:78:
         b8:a3:f6:df:73:09:a7:0e:57:b5:20:e5:d4:f1:49:6f:62:e4:
         bf:eb:e8:e1:70:53:9b:54:fd:06:0b:da:ce:d6:8e:a2:bb:96:
         f3:dd:04:d6:5e:a8:b8:cc:a1:3f:48:22:08:54:30:d9:a5:98:
         d4:00:a4:ff:3e:12:d7:e1:3e:37:19:44:b7:d8:4c:30:72:85:
         81:cc:ac:90:c7:bc:8e:ac:a9:fe:31:5a:e2:5e:6e:7a:49:6f:
         71:cb:8f:24:d5:a3:13:17:f4:5c:89:b3:81:6c:1e:61:4a:ec:
         2b:67:83:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:57:38 2026 by rpki-client