Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File:                     zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier:          +jvkLYj7YN13ecMAFY8BcwOMntlkGzJhpvWQrg2JNB8=
Subject key identifier:   A7:81:C7:4F:FC:1E:D0:C5:02:C1:C0:99:9F:07:B3:56:37:9C:31:E2
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer:       /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial:       019EE668524924EF3C24F4061234037B35ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number:          07F9
Signing time:             Sat 20 Jun 2026 19:00:56 +0000
Manifest this update:     Sat 20 Jun 2026 19:00:56 +0000
Manifest next update:     Sun 21 Jun 2026 19:00:56 +0000
Files and hashes:         1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
                          2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
                          3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: GsiGr01KyEXMxTZEHPNzLZPRb+mef8SP9pgJAfn+UIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e6:68:52:49:24:ef:3c:24:f4:06:12:34:03:7b:35:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
        Validity
            Not Before: Jun 20 19:00:56 2026 GMT
            Not After : Jun 21 19:00:56 2026 GMT
        Subject: CN=a781c74ffc1ed0c502c1c0999f07b356379c31e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:cd:48:d2:08:fe:cb:c8:85:fd:1d:b9:75:
                    5a:bd:8b:50:b2:c3:d1:01:ac:09:7f:b5:f1:8b:40:
                    e2:50:2e:5d:b9:e3:a6:76:a9:7f:a1:6d:35:ab:77:
                    91:93:df:cc:40:1a:70:5d:da:1d:62:f9:6a:0b:a0:
                    79:b0:8c:13:90:76:c7:7d:b6:82:37:65:94:da:d1:
                    f1:61:98:50:e0:4d:ea:7e:50:26:4f:0a:a9:a1:9a:
                    3a:c1:68:d4:85:df:8d:99:78:99:af:92:69:31:f2:
                    e1:10:13:13:ad:86:3b:7d:f2:f7:e9:2f:5e:6d:87:
                    28:5c:38:fd:fa:71:46:0e:bd:a7:e5:db:13:e8:1d:
                    0f:82:54:fd:12:5d:85:d0:5b:88:07:db:21:ed:c2:
                    c8:ad:e8:38:b2:f4:69:24:27:56:4c:62:84:8b:06:
                    7d:5b:42:45:4f:60:33:3f:31:a3:aa:c1:43:7a:7d:
                    f9:ae:b1:b2:d5:59:ca:dd:c6:50:42:c7:f1:a8:04:
                    b0:6b:89:82:cf:6b:ad:6a:a3:ea:f9:aa:c8:fb:5f:
                    2b:e3:c2:1e:fe:8b:8a:df:c0:b4:2f:cc:d9:8d:ad:
                    70:cf:e9:7f:98:02:43:e0:9a:03:25:df:88:87:92:
                    c2:ac:b7:76:4c:c9:1a:34:9b:b8:89:4c:f5:e8:7d:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:81:C7:4F:FC:1E:D0:C5:02:C1:C0:99:9F:07:B3:56:37:9C:31:E2
            X509v3 Authority Key Identifier:
                keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:55:5f:28:11:00:4e:66:86:b8:2b:27:72:12:65:09:9f:
         0f:14:fb:8f:0c:da:43:e7:89:cd:59:32:3c:a0:fe:df:f3:99:
         38:be:41:12:5c:8a:bc:5a:bb:c6:7b:36:dd:18:61:7f:0a:8a:
         5f:84:33:63:5d:5c:96:07:de:7d:05:42:ae:79:fe:8c:cf:bd:
         ae:b3:85:59:eb:1a:a8:84:f4:63:a2:84:cf:ed:81:20:45:16:
         57:38:b8:14:0b:19:8c:d0:ea:d6:0d:62:f1:7d:f0:49:56:50:
         8c:c7:74:71:42:72:e3:87:8d:b8:33:4a:82:76:60:c9:70:bf:
         92:c4:30:72:87:2f:f9:ac:1f:d0:7e:a2:d6:b1:8d:5d:cc:bb:
         27:6c:d3:a3:8b:b2:59:1c:6b:9a:04:4a:f7:3c:39:d3:a4:1d:
         87:0b:83:15:2e:8a:73:df:04:6f:98:d6:65:07:3f:56:99:65:
         50:f2:cd:e4:3d:85:bf:73:7d:86:99:9d:1e:4e:02:56:e2:48:
         ea:0e:bb:1c:ea:26:b2:f8:24:28:9a:de:48:a7:05:07:85:54:
         77:61:f4:46:43:6a:ab:2d:a0:51:f4:e7:15:5f:33:94:97:d9:
         ea:d9:49:3d:32:72:d4:67:79:98:14:cd:e1:95:ec:36:ee:fe:
         b8:df:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:05:02 2026 by rpki-client