Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File:                     ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier:          tfgjDFL2gg9cpenSQpyrHlt/NO5Q7S3LDYOajxC7x1M=
Subject key identifier:   73:CB:AA:33:0A:B6:0C:22:3E:DD:BB:4E:BB:76:98:3D:2D:F4:26:E6
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer:       /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial:       019EC1802C86B9D2F6CDF332F66963F85CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number:          14A4
Signing time:             Sat 13 Jun 2026 15:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 15:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 15:01:03 +0000
Files and hashes:         1: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: JWHgn2z/7g/kZnR+sUEjoRul9P5VA3ElRoKycQ1mqG4=)
                          2: o7BHBJoJ92UXLEcmbm_Nc1cTWuw.roa (hash: XRczo1xuWahblaw0qNPhWupN00zQLko2wywtz+3Wfrg=)
                          3: zwEN9uXJIcPFmn7KPc1-IXqrqo8.roa (hash: sU2LF6J4RVpFiTvBB34Yw73TFiEWHXzXbqHGVVrF5jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:2c:86:b9:d2:f6:cd:f3:32:f6:69:63:f8:5c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
        Validity
            Not Before: Jun 13 15:01:03 2026 GMT
            Not After : Jun 14 15:01:03 2026 GMT
        Subject: CN=73cbaa330ab60c223eddbb4ebb76983d2df426e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:16:d1:3a:9a:ad:f3:72:19:23:17:cd:a2:
                    3d:1d:4d:09:79:1f:1a:b2:97:fd:01:c8:5e:29:d9:
                    e6:41:8e:93:95:b6:11:ba:31:90:af:d3:6c:2c:7a:
                    bb:1d:ff:84:8f:c6:fa:26:8d:70:10:46:4a:06:1d:
                    b5:b4:e2:a1:f7:16:7a:ea:40:b9:b4:e9:80:bf:a2:
                    2f:b1:5a:11:32:29:b8:9a:d8:60:34:12:6a:f5:b3:
                    53:6d:21:23:19:c5:64:3b:10:0f:22:29:7d:a7:44:
                    4c:83:da:3b:cb:04:5e:2a:0e:a8:ce:ab:50:ae:4f:
                    9e:ef:39:ab:9c:6a:73:79:28:5d:3f:27:28:5e:7b:
                    c3:55:ff:26:c6:dd:51:8c:db:3a:04:4a:06:f5:76:
                    3c:58:07:e5:20:0d:c3:ee:b8:92:29:e3:da:be:6c:
                    92:ee:31:6a:76:32:8a:05:6f:26:44:75:b7:0c:6d:
                    c3:14:61:30:9b:de:78:0e:44:8d:d3:05:4a:4f:4b:
                    60:bf:71:0d:ff:b0:f5:ee:77:43:02:4f:70:90:7d:
                    af:cc:78:b7:3a:77:fc:89:41:d5:c5:70:26:ba:1e:
                    c4:f2:d6:55:8d:01:bb:17:84:0f:cc:f0:5e:96:93:
                    01:09:3c:d8:28:94:bd:b7:9d:8e:ba:ff:4f:44:97:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CB:AA:33:0A:B6:0C:22:3E:DD:BB:4E:BB:76:98:3D:2D:F4:26:E6
            X509v3 Authority Key Identifier:
                keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:91:16:b4:64:57:12:25:45:32:40:9a:49:d1:ff:9e:5b:
         d1:b7:2d:1b:78:d9:e4:87:75:4a:a9:a3:b6:f6:c1:f4:15:9b:
         b1:32:48:72:72:d0:3f:0a:28:4b:3d:68:c1:cb:7e:84:ea:ed:
         eb:f7:f4:a3:3d:bc:96:1c:3a:6b:ea:b6:78:53:91:90:43:a9:
         9a:56:2c:c8:51:32:a8:84:75:89:72:f6:6a:eb:c1:af:09:3e:
         77:f1:d3:69:87:49:1b:5b:f8:0b:64:cc:40:cf:7b:4a:83:7c:
         4f:a3:a5:10:45:05:7e:c0:28:ff:77:06:84:f3:63:82:86:10:
         73:9a:10:26:da:d8:33:8f:5f:3c:a1:91:64:e9:ab:83:15:d8:
         a8:78:2c:61:ac:d1:e1:77:97:be:36:03:61:95:cf:e3:fb:3e:
         f0:76:f6:81:82:11:d5:fc:df:7c:84:20:8b:7f:6f:fe:f9:bb:
         52:a1:15:47:11:77:ba:17:38:80:20:f8:b4:f4:2d:ba:db:bb:
         94:88:1e:65:42:58:93:5b:f5:18:7e:8f:9b:61:e6:6c:d9:36:
         93:da:51:ef:23:36:14:f6:18:be:ce:80:14:01:6b:f7:33:17:
         49:cc:35:c1:1b:dc:ef:56:6c:dc:91:1b:e5:20:62:14:67:19:
         1d:5f:7e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgCyGudL2zfMy9mlj+FyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk
OTFjNmYwHhcNMjYwNjEzMTUwMTAzWhcNMjYwNjE0MTUwMTAzWjAzMTEwLwYDVQQD
Eyg3M2NiYWEzMzBhYjYwYzIyM2VkZGJiNGViYjc2OTgzZDJkZjQyNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop4W0TqarfNyGSMXzaI9HU0JeR8a
spf9AcheKdnmQY6TlbYRujGQr9NsLHq7Hf+Ej8b6Jo1wEEZKBh21tOKh9xZ66kC5
tOmAv6IvsVoRMim4mthgNBJq9bNTbSEjGcVkOxAPIil9p0RMg9o7ywReKg6ozqtQ
rk+e7zmrnGpzeShdPycoXnvDVf8mxt1RjNs6BEoG9XY8WAflIA3D7riSKePavmyS
7jFqdjKKBW8mRHW3DG3DFGEwm954DkSN0wVKT0tgv3EN/7D17ndDAk9wkH2vzHi3
Onf8iUHVxXAmuh7E8tZVjQG7F4QPzPBelpMBCTzYKJS9t52Ouv9PRJdHZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPLqjMKtgwiPt27Trt2mD0t9CbmMB8GA1UdIwQY
MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt
ZWY2YmQyNmEwMzA1LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1
LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY+RFrRk
VxIlRTJAmknR/55b0bctG3jZ5Id1SqmjtvbB9BWbsTJIcnLQPwooSz1owct+hOrt
6/f0oz28lhw6a+q2eFORkEOpmlYsyFEyqIR1iXL2auvBrwk+d/HTaYdJG1v4C2TM
QM97SoN8T6OlEEUFfsAo/3cGhPNjgoYQc5oQJtrYM49fPKGRZOmrgxXYqHgsYazR
4XeXvjYDYZXP4/s+8Hb2gYIR1fzffIQgi39v/vm7UqEVRxF3uhc4gCD4tPQtutu7
lIgeZUJYk1v1GH6Pm2HmbNk2k9pR7yM2FPYYvs6AFAFr9zMXScw1wRvc71Zs3JEb
5SBiFGcZHV9+4A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:56 2026 by rpki-client