Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File:                     Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier:          Gjju0ufdWBND56XgrHEVmdTg0D8SxzdBUknsjFXFg0I=
Subject key identifier:   A2:81:3E:8D:53:5E:70:61:55:22:B5:6F:B3:B9:1A:2C:D6:BC:C9:E2
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer:       /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial:       019EE7E925A834F881DA12AF70972BBC809A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number:          1513
Signing time:             Sun 21 Jun 2026 02:01:16 +0000
Manifest this update:     Sun 21 Jun 2026 02:01:16 +0000
Manifest next update:     Mon 22 Jun 2026 02:01:16 +0000
Files and hashes:         1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: deTZBVgux/W5zz2oybPXvhwvGk2VRhY9MRhaFXQ7oWU=)
                          2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:e9:25:a8:34:f8:81:da:12:af:70:97:2b:bc:80:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
        Validity
            Not Before: Jun 21 02:01:16 2026 GMT
            Not After : Jun 22 02:01:16 2026 GMT
        Subject: CN=a2813e8d535e70615522b56fb3b91a2cd6bcc9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:21:c4:f7:e4:ef:f5:79:12:7b:48:1d:c5:
                    2d:95:ea:c1:d8:c3:86:51:92:62:22:92:f3:e0:dd:
                    3e:25:57:24:1a:e1:6a:2e:5e:c8:69:e0:c0:c3:fb:
                    f0:ec:6d:bf:14:bc:05:c6:18:57:3d:25:00:8b:bc:
                    f1:b0:04:c1:d0:fd:e2:9f:3d:00:42:8d:49:67:e4:
                    27:48:43:17:39:cf:32:7e:57:ac:a6:46:05:52:d2:
                    34:d5:36:35:3a:78:73:68:40:ad:ef:76:90:40:a4:
                    41:f0:2b:d3:a9:ed:e7:7b:42:a9:df:8c:bb:3f:ff:
                    3f:e5:04:52:7e:d4:c2:48:86:8f:89:1e:d0:29:fa:
                    8b:50:a7:e4:6f:fd:d1:d6:2e:2c:e6:33:93:77:5f:
                    a6:ed:9b:ab:cb:93:b0:4e:ea:ca:35:7d:86:d5:d2:
                    de:fa:73:59:86:ed:b4:4b:51:4e:53:79:59:2b:0e:
                    d3:61:33:59:99:52:27:79:7b:71:07:ab:91:af:a6:
                    00:9b:35:e3:14:8e:1e:65:59:3c:11:fa:bc:6c:c7:
                    6c:b7:62:fd:88:fb:89:c5:59:95:b9:8f:29:09:7d:
                    fe:f5:cd:09:68:3b:6a:c7:83:02:4b:e7:8b:13:2b:
                    3a:78:be:c0:d6:f5:09:fd:85:3f:48:ce:1a:e1:f3:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:81:3E:8D:53:5E:70:61:55:22:B5:6F:B3:B9:1A:2C:D6:BC:C9:E2
            X509v3 Authority Key Identifier:
                keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:eb:78:46:d1:db:07:01:ca:cc:7b:58:36:62:ea:01:b8:
         1d:20:ae:df:36:be:ad:ef:3d:c8:42:ed:06:40:e6:07:8f:99:
         fd:c7:dd:f4:54:ed:ba:60:30:f5:11:a1:48:da:b1:a1:e9:17:
         ae:f8:67:83:f9:6e:00:be:f2:a3:19:0f:54:f6:91:c5:22:00:
         b8:a9:1c:fe:98:6a:71:15:7a:69:ec:1e:ae:30:1d:b7:23:a8:
         36:71:31:da:cf:d4:86:8e:c7:d5:e1:fe:46:58:c4:42:ab:08:
         f2:26:30:19:d1:96:26:22:a0:45:c0:95:00:4d:8a:4b:63:ba:
         31:a2:d4:99:64:b3:e1:3b:db:f7:1a:00:6f:c0:6a:87:5c:06:
         a7:74:68:4b:a3:53:a6:dd:fe:f6:1f:00:5e:22:18:fb:11:a7:
         67:f0:6f:85:48:a4:1d:ff:d4:b6:ca:57:7b:48:4d:4a:ba:7b:
         e6:02:7f:b1:98:7c:d0:97:df:80:a7:95:62:20:e5:4a:55:70:
         71:7e:d2:bd:bf:36:0a:2c:15:0f:87:88:94:b7:3f:86:4b:56:
         08:65:b4:ae:cb:83:df:78:f4:90:34:56:4b:70:62:28:a3:aa:
         a2:c3:68:31:be:72:cd:1b:54:9e:fd:c4:82:cb:da:4b:d8:74:
         a4:05:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:26:31 2026 by rpki-client