Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File:                     Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier:          swQDA6qYzkkkloYXWKT8tXTpyuIaklX2gWEo1+3cmTA=
Subject key identifier:   91:92:D0:E6:29:D9:36:6E:5D:46:32:80:22:30:84:6C:B3:F5:52:C1
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer:       /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial:       019EC0A3AA6D72FC277CCDF52FD32C303A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 11:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:11 +0000
Files and hashes:         1: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (hash: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI=)
                          2: Z2S57soliueMTVEyGovf75orajw.crl (hash: 4djsWAO0pbxhRWfU7mA2nnTpNFBRU6SY1woxO2XJjvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:aa:6d:72:fc:27:7c:cd:f5:2f:d3:2c:30:3a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
        Validity
            Not Before: Jun 13 11:00:11 2026 GMT
            Not After : Jun 14 11:00:11 2026 GMT
        Subject: CN=9192d0e629d9366e5d4632802230846cb3f552c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:30:42:78:fd:c7:02:90:c9:f2:c8:3f:45:
                    0b:dd:38:81:43:61:22:91:a8:2e:f6:db:2b:e6:e9:
                    90:ee:09:6f:6f:b3:d1:24:7d:a5:68:f0:d1:c3:53:
                    d9:1e:1b:c3:3c:6a:b3:b4:1b:0c:53:d7:76:84:a9:
                    87:23:fa:1b:16:73:64:20:ba:e3:56:4a:1e:7c:f9:
                    f2:c0:2c:ba:4d:13:b3:32:c9:f2:5c:d4:c5:79:35:
                    3f:3f:b5:c3:c8:c0:4f:f3:20:76:8e:91:1d:44:ed:
                    c5:c1:51:b4:7e:e4:e3:9a:76:c2:bd:5c:8d:9e:94:
                    8e:be:a8:e3:06:6b:a0:3c:87:7a:8b:3b:d0:73:77:
                    02:8f:bd:e8:0c:9e:55:c2:f6:b2:13:1c:e6:fc:55:
                    56:9d:91:16:7a:c0:40:da:f6:70:b0:19:ac:fc:36:
                    3a:53:9b:7c:b1:d1:09:ef:d8:e6:bb:29:72:8d:d8:
                    82:83:8b:0a:11:dc:7f:6e:ad:d7:59:55:9b:64:b7:
                    19:4e:2a:65:22:a4:7e:75:ad:06:83:37:a5:d5:e5:
                    72:b7:6c:56:b2:cd:62:5c:b4:0a:05:bd:62:82:e7:
                    05:e2:3b:35:41:9f:61:d8:e2:c0:2e:1b:5b:cb:4e:
                    43:8a:bc:b9:11:8c:fe:86:41:6e:b6:9e:5a:7c:49:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:D0:E6:29:D9:36:6E:5D:46:32:80:22:30:84:6C:B3:F5:52:C1
            X509v3 Authority Key Identifier:
                keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:df:db:6d:92:5d:19:67:a6:a8:3d:a5:15:29:62:e2:e2:
         cb:ba:74:32:03:0b:c3:c2:6f:ad:06:fb:8a:0c:18:cd:03:26:
         03:29:5c:8f:ff:a7:01:9c:ea:69:f8:db:49:f0:f0:41:04:05:
         90:d4:7b:16:f0:e2:1d:37:9d:13:db:ac:cf:95:67:3f:c1:19:
         81:88:dc:4d:f4:9e:c8:6f:cd:42:d7:2d:60:91:ab:b6:8b:09:
         f5:38:e7:05:cf:19:0f:f3:7d:9e:73:35:fa:83:90:45:96:45:
         b9:c9:28:63:f8:51:16:cb:0c:ed:3f:0c:b8:9b:62:dc:f5:65:
         82:19:8f:4c:7a:50:e5:50:c4:dd:48:de:e0:30:86:07:45:68:
         6a:c9:b6:07:a8:21:b4:cd:28:e6:39:b0:67:b4:cf:91:48:1f:
         82:b4:34:18:7e:a2:83:ad:1d:4c:22:4d:48:63:bc:e5:c9:c5:
         19:20:de:6c:bd:40:14:e7:ef:52:e4:4a:05:28:c9:ec:23:64:
         ab:f1:19:62:ec:a8:e4:b4:68:3c:e8:fc:29:23:1f:ec:48:59:
         13:52:9d:94:28:1a:d9:16:26:86:d0:38:1e:45:9d:34:d9:03:
         f6:b8:f9:4f:49:59:fe:9d:f6:7a:9c:81:ea:f5:d0:0a:8f:25:
         25:34:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:01 2026 by rpki-client