Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File:                     1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier:          IDN8XcqqY46NvQnHUgKSvpN9UUbjj60QQ4DaWOOwDaw=
Subject key identifier:   1F:3C:7F:DC:A3:C6:0B:EE:95:0C:38:C7:3B:1E:59:6F:53:AC:04:74
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       019E9ADFB1A8B264D30726822F8A24E8FD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number:          1949
Signing time:             Sat 06 Jun 2026 03:00:11 +0000
Manifest this update:     Sat 06 Jun 2026 03:00:11 +0000
Manifest next update:     Sun 07 Jun 2026 03:00:11 +0000
Files and hashes:         1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: 5ESQPzpm+vybOiDur16EjYxB5clhOJdnt9SUMfhks8k=)
                          2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
                          3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
                          4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:df:b1:a8:b2:64:d3:07:26:82:2f:8a:24:e8:fd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: Jun  6 03:00:11 2026 GMT
            Not After : Jun  7 03:00:11 2026 GMT
        Subject: CN=1f3c7fdca3c60bee950c38c73b1e596f53ac0474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:96:eb:15:97:53:f6:19:fa:fe:c9:17:26:
                    32:c0:1f:17:73:62:48:f3:c2:c2:24:e2:99:7c:54:
                    25:e1:90:a9:e2:29:0b:d4:7e:e9:1b:8e:da:9c:cb:
                    36:25:73:67:4b:cb:a0:21:83:65:31:52:42:e5:8c:
                    46:80:d0:0f:90:2d:97:46:14:8d:58:19:ce:b3:da:
                    ad:61:fb:24:5a:30:ba:f4:cf:7d:2f:91:94:90:4a:
                    ee:dc:23:f8:1e:37:ed:ba:e0:e7:d1:ef:76:6f:f5:
                    c2:e5:91:55:d7:81:87:b0:f9:09:1b:91:53:1d:be:
                    9e:78:a8:31:62:7f:24:5e:04:ab:89:28:b0:8f:de:
                    41:59:7f:dc:4f:26:81:ad:9a:fe:39:22:40:55:6c:
                    7b:95:a9:96:25:fe:e7:2d:97:7b:36:4b:d0:48:39:
                    f3:0f:b4:57:eb:46:e4:50:64:a1:65:22:d5:89:c6:
                    a2:06:ea:e5:00:e7:95:7e:94:f2:a3:9a:55:2a:df:
                    b2:c4:89:fe:43:64:16:af:5f:50:fc:cd:c7:40:2f:
                    bd:ff:d5:4a:09:07:43:00:1d:6e:a5:45:cf:8a:ee:
                    f4:67:69:48:60:53:2f:8f:6a:c7:55:31:a0:d7:e2:
                    84:f9:f8:34:13:92:5c:a6:56:75:a0:c6:fc:00:53:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:7F:DC:A3:C6:0B:EE:95:0C:38:C7:3B:1E:59:6F:53:AC:04:74
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:d5:f0:2c:f0:b4:ed:db:e1:14:88:59:db:b0:ba:c4:66:
         90:f7:af:1e:0d:c7:df:f8:4e:38:35:47:cb:d4:8a:04:8b:7c:
         1b:51:99:cd:3d:df:58:fc:93:a1:19:39:95:08:b7:0f:59:b9:
         d6:71:d7:f4:94:df:d2:ea:5f:56:90:92:6b:b7:c8:97:45:69:
         70:fe:43:d1:fc:b3:6e:61:d7:47:e6:e7:24:83:5b:c7:69:c1:
         64:d2:82:7e:09:ee:64:8d:7c:d3:11:bc:27:3e:b6:95:5b:e7:
         f6:95:6e:1b:f2:be:86:c0:54:6d:97:a0:9c:29:1c:4f:eb:88:
         4d:22:36:42:7e:33:e0:13:bc:3d:57:58:47:e9:05:6f:c0:e8:
         87:73:3a:87:de:01:3c:97:1e:66:57:eb:80:49:b2:75:93:90:
         aa:b2:de:84:85:3d:e6:1e:be:1d:14:fd:f7:05:54:19:35:85:
         4c:65:24:6a:43:5b:bf:64:0b:db:72:20:11:35:47:e7:7d:3b:
         36:10:b2:15:50:fa:3a:df:6b:4c:5a:d6:d6:8b:78:40:8d:7c:
         22:c0:f0:dd:88:fa:18:98:80:47:98:15:69:01:c9:89:ba:51:
         89:31:49:c1:3c:26:72:8a:35:e7:24:56:4b:7f:17:7e:46:5b:
         1e:19:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:57:52 2026 by rpki-client