Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          0r72y0uUqkL/dvesxcCLb1ZZNBKcBX1ze/MewlnTqyk=
Subject key identifier:   50:28:BD:C6:80:06:0E:8E:A9:44:B2:7A:AC:8E:28:E2:55:F1:D9:63
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       019EC06E1C9AA637ABB8A003835070CECAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          114F
Signing time:             Sat 13 Jun 2026 10:01:42 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:42 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:42 +0000
Files and hashes:         1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=)
                          2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=)
                          3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=)
                          4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: wRy3z5o+VP2L61OY+0lqrO+cwGLoGpcdLPS099dNdjw=)
                          5: wK1thNBNOi3cJ4C_cLUUCpyCeDg.roa (hash: SYmUDWSPEMPAWWeOzzPct/i4L2oBAFG5xQ9Zk5i1914=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:1c:9a:a6:37:ab:b8:a0:03:83:50:70:ce:ca:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Jun 13 10:01:42 2026 GMT
            Not After : Jun 14 10:01:42 2026 GMT
        Subject: CN=5028bdc680060e8ea944b27aac8e28e255f1d963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a1:61:2d:f0:16:ec:ea:2f:fa:6d:7e:15:df:
                    5f:3b:1a:14:5c:d4:18:84:ec:28:f5:9f:d2:2e:e5:
                    08:3d:55:52:66:a2:df:4b:eb:92:1a:ff:67:02:9a:
                    63:30:49:48:67:bf:87:58:1d:d5:cb:3e:aa:54:bb:
                    4b:60:17:66:75:ac:95:b2:ed:3f:4b:c9:28:bf:7d:
                    37:f8:e7:e6:3a:d2:03:82:60:5e:cf:f1:92:02:11:
                    d4:d5:52:43:dd:d7:e8:37:61:ac:69:33:ec:22:87:
                    0b:b9:79:72:d1:ab:b0:dc:dc:85:4e:25:2c:ea:4b:
                    f7:52:74:2d:b5:c0:6f:c3:2d:a9:3b:25:af:e4:a4:
                    d5:3a:55:6c:3c:7a:0b:e9:98:5d:60:1d:4e:b7:d1:
                    5d:39:c8:91:c8:91:b0:0d:54:ea:52:9a:70:2b:e1:
                    cf:38:ed:5d:5b:2d:ea:db:af:01:0a:dc:15:a6:cc:
                    ed:80:e9:87:40:1c:22:24:46:31:4e:46:6d:b6:e3:
                    73:47:fb:76:70:57:bc:48:38:6e:9b:ef:0a:d6:57:
                    e3:53:69:d3:65:dd:e7:63:f2:b5:db:ea:e6:fd:97:
                    b5:50:f1:80:85:fa:53:05:bf:0f:06:0c:01:c7:7a:
                    6d:24:b4:a3:07:d8:d2:b4:03:63:09:5e:3e:6f:64:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:28:BD:C6:80:06:0E:8E:A9:44:B2:7A:AC:8E:28:E2:55:F1:D9:63
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4e:db:14:e4:82:49:c4:63:b3:06:55:bb:44:5e:a2:7a:87:
         fc:3c:91:33:1c:d6:8b:53:90:7c:0e:59:60:4d:33:67:ae:6e:
         9d:d9:66:e9:6f:21:9c:f4:1c:29:99:31:ed:b1:82:83:ab:12:
         66:54:42:b8:cb:65:50:0d:f8:9d:e8:47:ab:da:ca:7b:86:47:
         bf:62:ab:bb:66:da:90:df:93:96:c7:be:02:28:96:29:67:9e:
         52:de:dd:3b:d1:e7:0b:1d:d2:8d:a1:77:b7:16:a3:29:37:3a:
         14:9f:b4:25:08:72:2d:59:ba:da:63:d7:68:7a:fe:bb:4c:1e:
         be:68:45:70:68:ee:db:b4:cc:07:07:b6:e6:0b:d9:a7:a3:af:
         72:ad:aa:9b:a6:d2:c7:27:33:08:27:bc:a9:c2:21:eb:3a:51:
         ca:5a:dc:94:09:f9:a7:08:40:20:89:2d:7e:dc:d6:f8:1e:2f:
         bd:06:d9:f2:3a:a6:b2:ed:aa:ef:4b:3d:57:81:bb:95:a7:0f:
         d5:2a:c2:32:58:cb:8c:01:5f:12:50:fc:0c:86:6b:6e:1d:e0:
         84:e0:08:9d:f5:a8:59:27:cb:76:cf:0f:94:73:7c:29:20:e0:
         33:b9:13:37:a7:c9:f9:eb:b7:bf:14:c5:db:e0:72:e7:62:9f:
         58:b2:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:11:48 2026 by rpki-client