Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File:                     Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier:          SUBTSiP9o4r6XaeJeNdc7mCfRiz2v7YgONf2xdW9/CA=
Subject key identifier:   06:32:A3:27:98:E1:ED:E7:BF:78:8E:25:83:58:FE:CC:CC:3D:7B:9F
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer:       /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial:       019ED5754E187E2DFF4F6E4C9D84712B4983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number:          1966
Signing time:             Wed 17 Jun 2026 12:01:35 +0000
Manifest this update:     Wed 17 Jun 2026 12:01:35 +0000
Manifest next update:     Thu 18 Jun 2026 12:01:35 +0000
Files and hashes:         1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
                          2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: sBXmC1S66chunzHPlXoSlPiMpfT6PvIVqbjxh56kmcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:75:4e:18:7e:2d:ff:4f:6e:4c:9d:84:71:2b:49:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
        Validity
            Not Before: Jun 17 12:01:35 2026 GMT
            Not After : Jun 18 12:01:35 2026 GMT
        Subject: CN=0632a32798e1ede7bf788e258358fecccc3d7b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:c8:69:87:45:88:a9:7b:9d:a4:54:76:fe:
                    55:b1:48:a5:1c:0f:a0:b4:d0:1c:59:d0:5d:c0:be:
                    83:7b:76:d2:10:16:86:9f:f4:14:ec:ad:3e:f9:e7:
                    94:10:a8:4f:6a:14:a7:e6:25:89:f9:20:bf:ed:59:
                    c6:98:e2:cf:6a:eb:15:34:15:d8:1a:dc:47:29:7f:
                    9b:e9:0a:fa:b9:68:ee:0b:4b:73:78:a1:d8:02:25:
                    47:97:d5:80:8b:4a:91:62:79:83:80:72:92:e1:66:
                    41:b0:36:75:bc:a2:d9:5e:1c:c0:00:01:98:28:88:
                    15:08:05:d9:de:13:82:b6:0d:27:05:be:a7:95:5e:
                    90:3a:92:73:15:58:35:6c:91:8b:6c:75:95:67:e3:
                    61:eb:94:b3:9f:98:ac:68:9a:3d:de:1c:19:17:d8:
                    2e:da:92:63:a6:d0:39:57:6a:8d:34:84:53:75:db:
                    48:99:b3:05:f4:dc:93:72:03:de:d7:9c:f6:2c:67:
                    d4:34:31:12:d8:fb:f3:1c:dd:01:cd:06:a2:21:90:
                    94:ec:33:b9:1b:e8:6d:2e:99:0c:04:b3:7b:84:ab:
                    3d:37:65:c8:2b:82:86:0f:5c:23:c4:c6:f1:cd:03:
                    68:e7:79:12:7d:b0:20:23:4a:3b:d1:12:41:fe:bf:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:32:A3:27:98:E1:ED:E7:BF:78:8E:25:83:58:FE:CC:CC:3D:7B:9F
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:50:17:0c:99:69:1a:d2:dd:06:8f:35:b0:25:ad:9d:2b:34:
         03:c2:f1:29:c7:2b:2c:a4:4f:5e:59:80:b9:7a:e0:bc:d7:91:
         47:d0:40:79:53:41:c5:43:59:38:8e:cf:d8:16:1c:37:79:0d:
         f4:7c:dc:a7:4d:35:97:39:b0:05:1d:26:4b:f6:af:53:83:27:
         66:ae:24:cd:45:0b:46:77:a3:d1:f6:23:a7:14:0d:cb:68:6c:
         91:89:1c:5e:87:c8:9b:8b:6b:30:e9:8c:16:3f:17:81:0a:ad:
         4f:bf:27:09:bc:93:a4:15:2d:53:5d:2a:06:a3:31:14:f4:48:
         5e:54:da:9b:58:b1:e7:43:89:6f:62:9b:6b:30:c4:11:30:75:
         62:b9:a0:66:0d:48:86:23:75:60:46:22:4c:80:da:85:2b:bb:
         3f:af:14:fa:cb:03:d4:b2:23:34:58:55:4a:b9:e1:be:a5:dc:
         2b:a5:25:8e:85:84:73:bf:38:97:e4:5b:e9:24:53:e9:ea:73:
         f2:49:52:b3:47:fb:b4:ba:06:ff:4c:9b:42:db:8c:8a:c6:93:
         aa:33:8d:39:84:de:f4:b0:64:99:8a:46:cc:bc:dc:d2:f2:8c:
         1d:81:10:ba:22:39:fc:11:cd:9e:d1:55:f8:b7:c5:b7:18:30:
         e0:99:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:11:02 2026 by rpki-client