Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File:                     ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier:          0rgWJoXHVd8SrkCrP3O6GMMRXQhvJuOlSBA6uEWHfBM=
Subject key identifier:   EE:35:BF:60:29:11:C1:61:C2:5D:78:24:FA:0E:46:BD:AC:4F:14:D3
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer:       /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial:       019EC2C91FE6B2ED2DACA128004764BDCDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number:          09E6
Signing time:             Sat 13 Jun 2026 21:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:21 +0000
Files and hashes:         1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
                          2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: adqa+pAMMiQEcz5nIvc5vfR8HocHgJKxOgCqNRB/j7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:1f:e6:b2:ed:2d:ac:a1:28:00:47:64:bd:cd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
        Validity
            Not Before: Jun 13 21:00:21 2026 GMT
            Not After : Jun 14 21:00:21 2026 GMT
        Subject: CN=ee35bf602911c161c25d7824fa0e46bdac4f14d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:97:a6:b0:1a:b5:d6:3d:9c:72:dc:51:54:
                    4e:f7:ea:04:52:7c:4e:bf:1a:83:26:cb:b4:3d:15:
                    fa:dd:73:e7:d0:28:45:71:19:09:38:33:f3:25:4a:
                    28:25:32:e2:9a:ca:2c:db:6f:33:dc:f9:6c:4b:93:
                    0b:f1:5b:32:66:3e:ef:e0:3f:2d:aa:e0:33:cf:78:
                    d6:a7:45:6e:96:83:a6:d5:e5:92:4b:f9:6c:e5:e5:
                    b9:2a:29:33:0a:88:b1:3d:ec:40:2a:ec:2d:1e:ae:
                    8d:fe:9c:c5:4b:89:5f:2e:dc:de:a9:a0:87:df:f5:
                    a5:40:cf:7e:f5:06:8e:25:df:17:bc:14:8a:8a:2f:
                    89:1c:fb:e8:fc:b7:a4:51:96:f2:de:4d:74:4f:c9:
                    57:99:f5:ed:61:2f:02:f5:f2:64:f2:5f:d9:09:5f:
                    b7:59:26:20:d7:cf:45:df:ae:79:9c:72:81:f9:c5:
                    23:8a:a9:91:63:8b:56:55:7b:95:40:f4:b1:28:69:
                    2c:7d:52:2f:37:31:32:29:e5:7f:fa:c7:ef:c3:c9:
                    c8:dd:60:ad:fa:1c:b1:33:55:08:73:1c:c2:93:74:
                    d0:96:82:54:9c:99:b8:c1:47:1d:cd:12:81:45:88:
                    a1:59:ce:8e:9c:82:7a:b4:36:17:dc:9f:0f:e0:9e:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:BF:60:29:11:C1:61:C2:5D:78:24:FA:0E:46:BD:AC:4F:14:D3
            X509v3 Authority Key Identifier:
                keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:1c:ae:77:50:81:03:fd:cb:66:33:af:a5:c1:3d:da:5f:53:
         f7:9c:2d:27:53:7b:ca:3c:8b:de:c6:1a:58:79:3d:cd:14:c2:
         06:46:42:f1:df:c5:84:d6:cf:01:ec:19:31:83:96:1b:13:fe:
         97:96:37:d0:5f:8a:c4:cb:d0:4b:35:a2:a1:d1:ec:27:c6:cd:
         aa:3d:79:a2:2c:09:c4:75:b4:bb:c7:df:c5:67:22:89:dd:2f:
         57:b4:9e:98:5c:21:98:05:04:45:92:be:16:f6:f4:f5:39:3b:
         f0:84:68:55:9a:6c:ca:18:3b:f9:3f:2d:64:d8:f5:14:c3:08:
         39:07:f6:72:9f:62:1c:f3:40:e7:4c:19:98:18:ae:49:c9:79:
         ea:ee:f0:1f:8c:84:16:5a:74:f1:ed:2b:f9:27:f5:b2:ee:93:
         ed:7a:2d:9d:33:84:80:d7:14:3c:8a:08:48:6c:3d:27:af:93:
         a9:63:6f:ce:b8:16:6d:39:3a:6c:8c:97:5f:8a:d3:83:d7:e5:
         c7:71:9f:d8:68:d9:77:8d:90:1f:51:ec:72:2e:5c:d7:f1:e8:
         1a:d9:85:9a:1e:23:82:4e:18:78:64:bc:c8:7a:d2:ee:ed:1e:
         3f:8a:34:6b:93:52:e4:64:d4:47:d8:e3:ed:7f:b1:29:3c:48:
         30:b8:af:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:37 2026 by rpki-client