Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File:                     CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier:          h+4PO2LTfjyWHsSyciz+nX96++E+m+/uvcgS8KaNsWM=
Subject key identifier:   31:EF:93:DD:2C:7C:83:97:83:DA:7C:7F:DE:85:C2:46:1C:8C:22:C1
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer:       /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial:       019EB9C65FAD1CD039CA731282BFF49248C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number:          0B82
Signing time:             Fri 12 Jun 2026 03:00:45 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:45 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:45 +0000
Files and hashes:         1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: d8VlmK/24F6w30qterI2axi4fECypr50br39omdMjVY=)
                          2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
                          3: ZZAGyODBQuhSTq1KG9XN62QS3MQ.roa (hash: NKGmXLYVBB2xSYaGxp7Ky80sTerHdcg/u7ExH6ngk0E=)
                          4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:5f:ad:1c:d0:39:ca:73:12:82:bf:f4:92:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
        Validity
            Not Before: Jun 12 03:00:45 2026 GMT
            Not After : Jun 13 03:00:45 2026 GMT
        Subject: CN=31ef93dd2c7c839783da7c7fde85c2461c8c22c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:a7:5b:15:ae:c3:e9:7b:68:ea:16:8a:88:
                    14:21:fb:ad:3b:4d:32:a9:95:9a:4a:6e:72:11:5d:
                    08:d6:3a:9e:50:0a:da:cd:dd:42:23:6e:f1:74:09:
                    f3:6f:be:79:1e:74:ed:e6:fd:4d:6f:07:99:79:6d:
                    8e:04:d2:b1:cb:0d:8c:91:33:c6:a3:80:d4:2c:37:
                    3f:33:1e:da:a2:2b:b5:4e:58:2d:28:70:de:94:c0:
                    f7:07:ac:f9:0b:42:9d:d5:e0:3b:24:73:d0:87:da:
                    64:a4:75:d2:98:dc:88:8a:66:dc:3e:ed:09:a4:b0:
                    d4:24:6a:6d:0e:a8:da:1b:1b:f5:3c:c2:c8:1e:0c:
                    6a:16:20:18:37:88:1d:d0:df:a8:78:7d:ab:a8:4b:
                    1c:81:dd:6e:4a:f5:de:b6:da:f0:dc:a4:90:8b:76:
                    25:31:48:ac:dc:94:d9:03:37:ac:d9:4a:57:a8:ab:
                    3f:6f:c0:30:63:26:9b:77:81:66:f4:fc:92:ff:6e:
                    a0:4f:f8:81:5b:f6:ea:7e:0f:08:6e:a8:27:ea:06:
                    72:c1:8c:27:bc:a4:9f:6f:f9:c3:5d:42:ff:67:be:
                    ba:7b:81:2a:a6:59:38:68:51:e2:b8:7a:fa:b6:73:
                    23:d0:e0:4c:a6:1a:f7:f0:a2:90:25:ba:13:f9:b4:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:93:DD:2C:7C:83:97:83:DA:7C:7F:DE:85:C2:46:1C:8C:22:C1
            X509v3 Authority Key Identifier:
                keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:f9:d7:e4:35:3d:13:16:17:a4:21:2d:60:e6:d1:09:95:
         a4:c3:8e:04:cb:5c:0e:6f:b2:c2:f8:24:6a:08:58:0c:e5:9d:
         3e:6e:a9:4a:dd:14:5b:0b:34:6c:cd:08:eb:a5:ee:3e:07:95:
         35:e2:67:7e:ef:ec:55:b8:7f:f4:2d:32:7a:4d:9b:5c:95:91:
         88:42:d5:0d:3f:68:71:92:e3:92:55:6d:8e:75:c1:f2:17:39:
         0b:00:cb:c3:ac:97:cd:cb:58:ca:89:f8:26:c9:89:77:2e:3b:
         83:53:97:fc:58:77:99:b2:9e:81:f6:4c:90:f8:bc:ea:29:91:
         40:90:2e:16:1d:76:2b:84:2b:91:1a:0e:c8:2c:5a:9b:c9:cc:
         41:42:11:d4:5b:a6:68:3a:26:ee:45:d2:b9:b0:d1:89:7a:8d:
         3c:89:c7:01:94:83:a1:d8:99:29:23:d0:d2:99:e2:49:24:88:
         00:e6:36:f6:13:eb:49:4d:44:70:29:9a:38:c6:f7:d7:e0:5c:
         eb:7a:4b:f7:18:00:12:8b:77:51:4e:94:98:75:65:70:0a:89:
         d3:11:a0:3f:c6:ed:bf:8b:f1:d2:eb:35:0f:74:0b:40:1a:b0:
         26:da:9a:ff:4d:df:65:bf:dd:d9:9e:e8:2c:cc:ae:c0:42:38:
         15:b3:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:48:54 2026 by rpki-client