Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File:                     ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier:          YRuYoBYFLfrWXIzLcNM47gAZZfIJ3Kig+SdjeeBSE8I=
Subject key identifier:   6B:C5:EE:99:D0:3B:4E:38:BF:D4:A6:AC:01:55:97:05:0A:DE:4B:24
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer:       /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial:       019EC0A3D09E14D096167CBD4D06DE5A310E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number:          0D44
Signing time:             Sat 13 Jun 2026 11:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:21 +0000
Files and hashes:         1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
                          2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: 0sARgXL4AxyQ/r4Lh/yQQuuv6xYANJ1LG/RFjTDnr74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:d0:9e:14:d0:96:16:7c:bd:4d:06:de:5a:31:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
        Validity
            Not Before: Jun 13 11:00:21 2026 GMT
            Not After : Jun 14 11:00:21 2026 GMT
        Subject: CN=6bc5ee99d03b4e38bfd4a6ac015597050ade4b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:c0:4c:85:ee:51:e5:bd:d9:7d:c0:cd:e6:
                    18:47:1b:85:4a:ad:08:c6:ef:a3:67:df:b9:f1:f5:
                    c1:e4:2d:a2:00:42:3a:13:c1:ba:9b:ba:7f:dc:b6:
                    54:80:8a:be:ee:63:49:de:f5:8b:6f:37:fd:ad:76:
                    ab:08:2d:33:36:60:ff:df:a8:5f:87:06:4e:ab:1a:
                    e5:0c:c8:20:eb:3b:8e:8e:47:61:5b:6c:2f:5c:8c:
                    d8:55:09:72:99:1e:27:03:5a:55:7d:84:7d:45:fb:
                    02:11:87:28:96:e3:ef:81:3e:bb:ad:85:2a:b7:76:
                    60:53:8d:c9:02:95:06:ed:aa:14:4c:07:7c:ab:f7:
                    99:54:45:e4:46:1c:34:fd:4d:cb:7a:06:c9:69:55:
                    8d:04:c1:02:1f:e7:93:e5:25:59:ab:a8:80:b2:9b:
                    11:b7:da:4d:e2:e0:09:be:48:15:8c:93:01:4c:64:
                    de:6e:61:1d:48:f7:7b:37:6a:d4:36:31:3c:d0:a3:
                    12:e4:a0:bd:5e:84:f3:4a:4e:e7:a9:25:c1:28:da:
                    93:60:ef:42:ec:f1:00:e9:e2:f5:a0:87:15:80:f0:
                    68:7c:77:e5:22:a0:36:3d:1a:18:1c:db:e8:24:c7:
                    08:e0:e6:49:46:61:65:45:30:d3:0b:2a:a1:19:af:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:EE:99:D0:3B:4E:38:BF:D4:A6:AC:01:55:97:05:0A:DE:4B:24
            X509v3 Authority Key Identifier:
                keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:17:ba:58:36:32:9c:0c:4e:78:cb:92:12:30:a8:8d:40:
         d5:af:ec:86:14:d2:3b:94:73:9a:cb:ff:9a:26:76:67:e6:69:
         ec:85:91:40:0c:dc:73:e0:f2:b2:87:c4:d7:d5:f1:97:06:0f:
         61:1b:0a:14:a1:56:d8:e7:d6:04:d1:b6:e4:60:94:0d:26:e4:
         cf:a8:d9:7b:4c:5b:2f:09:5e:40:34:ed:e4:b6:38:71:6a:53:
         aa:4b:e6:ac:d8:60:fc:c8:38:1f:2e:a5:1b:02:b2:bd:17:94:
         ab:f1:61:1a:d3:75:23:f8:b7:9d:31:07:05:e5:7f:d4:cb:2d:
         fe:74:ad:26:fb:20:df:69:a6:46:f6:b5:cc:4d:40:e2:a2:e7:
         95:f5:f8:d9:d2:d5:4f:30:64:24:41:b2:bb:b4:57:92:40:25:
         53:b6:f0:d0:86:3b:b6:ba:79:bb:b8:18:02:bc:47:4f:ae:04:
         b7:68:46:2a:64:57:4f:18:eb:2d:b2:6a:ee:6e:fa:9c:b0:c5:
         a3:38:9a:1e:49:1e:75:f8:4a:01:09:2a:46:40:58:72:1b:fe:
         43:c8:8e:53:74:8b:91:34:70:0b:2e:1a:32:15:18:02:76:df:
         48:cd:b2:2c:c5:ca:0c:41:38:a3:5f:48:7a:00:58:0c:84:8a:
         46:0f:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:45 2026 by rpki-client