Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          286pR62i4y6n/MiOYhZzSrMpqge4GLTmcbQbF6IyFUo=
Subject key identifier:   92:B4:06:0D:EE:99:6C:27:26:25:63:E3:BE:D0:5E:E4:43:AA:81:CE
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       019F197A67382EA73955F9EC5E8C3EB5BEDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          1989
Signing time:             Tue 30 Jun 2026 17:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:19 +0000
Files and hashes:         1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
                          2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
                          3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
                          4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: nBW2iai8FnWq+J/ZIDu1+moq4WRwo9DXlvwZ3l3MypY=)
                          6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
                          7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:67:38:2e:a7:39:55:f9:ec:5e:8c:3e:b5:be:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Jun 30 17:01:19 2026 GMT
            Not After : Jul  1 17:01:19 2026 GMT
        Subject: CN=92b4060dee996c27262563e3bed05ee443aa81ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:2d:aa:2b:59:55:35:a2:0d:f0:eb:f2:9e:
                    4b:8f:d8:33:61:a9:db:ab:8b:9c:c5:16:64:ff:90:
                    cb:f3:23:98:7d:b9:89:a6:a9:60:10:0e:ff:ec:29:
                    6f:58:08:b5:39:2e:8a:a5:6e:ef:e6:de:0c:dc:70:
                    7e:e8:80:d6:78:a2:46:1c:15:3a:9b:d7:3c:3d:96:
                    a8:9e:76:57:8e:49:eb:ea:f7:d1:8e:e3:73:e2:22:
                    fb:ed:93:a7:ee:58:a0:2b:64:c0:06:61:bc:e6:59:
                    52:b3:fb:7f:54:98:f1:ec:29:e7:d7:b9:5d:c1:d7:
                    36:f8:27:87:fc:9d:19:6c:6b:d6:8b:ff:c4:e8:9a:
                    ee:49:b5:2f:cd:9e:93:56:3e:4c:0f:77:7b:0d:7b:
                    df:58:28:0f:25:70:e8:1f:c4:06:ca:d7:0d:24:92:
                    bc:72:a8:a6:db:d6:d2:90:ec:4d:dc:e6:98:3c:e2:
                    67:91:36:c7:1a:54:f0:62:a0:e8:ec:c0:d9:0d:ce:
                    86:7a:fe:c5:14:6f:bb:bc:90:55:76:9d:eb:a8:55:
                    4a:42:d6:cd:54:a3:ab:64:ea:84:01:f8:ec:ce:4c:
                    b3:20:e8:fc:df:e6:6d:5d:1b:b8:9a:a9:0a:5e:b9:
                    a5:c6:c1:78:f5:9f:e9:78:f1:b3:69:9c:4d:19:d7:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:06:0D:EE:99:6C:27:26:25:63:E3:BE:D0:5E:E4:43:AA:81:CE
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:31:d5:e8:6b:9a:7f:92:25:f8:3c:f4:fa:e5:48:eb:d7:
         17:1f:5c:55:38:f7:d6:12:ba:f5:a8:56:b8:9d:10:93:97:72:
         68:44:88:7a:c8:71:2b:b1:19:f4:6a:55:1a:0c:dc:2a:f2:2c:
         8c:a2:c3:e9:c0:26:74:b9:6c:5d:9d:e6:a4:bf:6c:7a:85:a0:
         ae:70:79:4f:1a:af:2f:0c:72:6c:cd:0b:90:08:91:d2:78:4c:
         a9:59:60:01:f9:aa:fc:40:f3:96:d8:d3:ac:5f:62:f6:6e:d9:
         c5:aa:17:e3:5b:6e:d4:a3:2a:33:e7:0a:64:11:56:4d:21:21:
         76:fd:9f:39:48:3b:22:a6:b6:cd:02:18:c7:7d:24:42:a0:7a:
         f9:7f:9b:22:b1:18:08:47:3b:2b:ee:bc:58:f0:d5:81:09:23:
         53:f1:3f:34:ce:59:43:f2:58:5f:59:c3:f8:8b:6c:dc:bc:ba:
         cc:90:f1:2e:21:e1:28:8f:24:91:d5:dd:c4:fa:92:d7:60:04:
         19:a0:ae:89:7b:8c:4c:11:15:2d:61:8d:8f:eb:9d:a0:9b:b7:
         b7:e4:c3:7e:f0:fa:32:7f:72:12:2a:5b:41:4a:5a:10:c8:8b:
         08:81:bf:ff:84:6e:5f:e3:52:04:15:3e:b7:07:a8:c3:d4:f9:
         47:38:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:40 2026 by rpki-client