Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File:                     cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier:          HDlpt0R21mLUmpw6fdIQz9i/eqht2jebRQd2v/J9Bc8=
Subject key identifier:   FB:0A:EB:4F:E8:F6:8E:5D:24:49:A6:3C:2F:6A:8B:19:B5:81:BD:B9
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer:       /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial:       019EB9FD720EF364CCA52DB0DB1B42DEDE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number:          1979
Signing time:             Fri 12 Jun 2026 04:00:55 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:55 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:55 +0000
Files and hashes:         1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
                          2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
                          3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: ASG2djAMm+uw4hllJyqI9dCiEztphawJ0fHbVClujQc=)
                          4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:72:0e:f3:64:cc:a5:2d:b0:db:1b:42:de:de:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
        Validity
            Not Before: Jun 12 04:00:55 2026 GMT
            Not After : Jun 13 04:00:55 2026 GMT
        Subject: CN=fb0aeb4fe8f68e5d2449a63c2f6a8b19b581bdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:19:c5:4c:e1:6d:99:c0:87:19:b8:cb:80:
                    05:31:8e:17:49:e1:94:77:31:2b:33:cc:b5:6e:0e:
                    4c:da:4d:2f:6a:fb:a6:75:26:3d:e0:ab:3d:12:9e:
                    c8:12:40:c4:14:c5:de:98:e3:3c:e3:5a:2f:54:94:
                    2d:7d:c7:17:a4:6c:a0:19:b2:35:a5:a1:f9:0f:62:
                    67:cd:bf:99:43:f6:5f:2b:72:d9:f2:a0:eb:b2:6e:
                    c8:ff:10:61:02:46:92:c1:9b:95:3f:9d:77:1e:7a:
                    ab:f0:94:9b:1d:e8:d5:ad:3b:c8:45:e8:16:66:63:
                    35:1d:89:d5:a4:3a:67:e2:d6:2e:f8:81:e9:9b:e4:
                    39:b0:f5:f9:10:05:47:09:83:0f:7f:17:29:c5:1b:
                    60:13:3e:35:d2:eb:55:a4:77:87:78:e2:ee:13:6d:
                    98:ae:bc:df:11:09:e6:44:3d:57:d2:99:83:dc:50:
                    3c:97:91:6d:f5:a5:04:9c:f1:d0:b6:53:16:5a:77:
                    87:e3:c1:4e:b3:b2:42:e9:a8:b6:76:56:a9:cc:d3:
                    36:fe:c4:70:01:f5:ae:bc:ad:d3:41:47:dc:31:9f:
                    b2:63:af:c5:4a:d4:77:0a:12:33:d6:e6:d0:f2:e5:
                    27:f0:80:51:0b:d6:9a:29:1b:8e:e8:39:d9:df:94:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0A:EB:4F:E8:F6:8E:5D:24:49:A6:3C:2F:6A:8B:19:B5:81:BD:B9
            X509v3 Authority Key Identifier:
                keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:69:8e:3f:a4:1c:ed:ac:38:eb:9b:4d:a3:06:29:0e:80:dd:
         1b:97:f6:b3:d1:9d:4a:7d:25:f0:6e:2a:30:fa:62:c9:01:76:
         47:87:81:08:02:79:b0:e3:2c:bf:6e:55:d4:1a:82:32:ed:84:
         c1:73:76:b6:a7:e5:97:7b:02:51:a2:a5:81:94:24:9c:64:11:
         de:dd:cf:9f:8c:cf:1f:b8:23:9d:3a:ad:f2:63:5b:2b:58:6a:
         d4:58:62:3a:26:8b:85:dd:4c:b7:c7:22:c2:68:0e:88:79:c6:
         6f:37:0f:f0:e2:b2:03:d9:08:21:52:1c:b1:13:ba:77:a2:42:
         88:08:bd:70:f4:6b:b9:d2:3f:b6:47:38:eb:7f:6e:d4:44:55:
         e3:1a:4f:e2:4e:9a:aa:fa:7a:de:01:37:b9:3f:a1:c8:38:17:
         45:be:ee:42:d0:0b:81:91:cb:da:af:d4:fe:a4:8a:10:1d:4e:
         c7:e7:dc:df:e3:1e:8e:ee:c7:cc:1f:e4:a3:bc:22:10:18:17:
         1a:88:fd:87:10:d2:fe:be:c5:15:8d:fc:ff:7a:19:da:bc:95:
         a0:cb:8d:d3:8b:89:db:94:d1:d0:5c:26:de:2f:c3:29:47:47:
         2f:ca:14:72:0e:4d:92:83:0a:ac:85:24:db:61:d2:0f:ec:ad:
         ec:15:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:47 2026 by rpki-client