Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File:                     Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier:          SKIWjgKlfqTR6LZ0W0JgnsHvRs3L3QHm7K1NnfXXtDw=
Subject key identifier:   DE:0C:5F:03:E4:9F:7D:6A:48:26:2E:D0:4A:39:3F:76:B8:9B:2E:C4
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer:       /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial:       019EC148B8699DF74C58AE5A1CC3F486A7BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number:          07BA
Signing time:             Sat 13 Jun 2026 14:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:28 +0000
Files and hashes:         1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
                          2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
                          3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: H6VQ9sAw0trxU8g5XV2sXlJEt19zhStxrVZTK2V4Ntg=)
                          4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:b8:69:9d:f7:4c:58:ae:5a:1c:c3:f4:86:a7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
        Validity
            Not Before: Jun 13 14:00:28 2026 GMT
            Not After : Jun 14 14:00:28 2026 GMT
        Subject: CN=de0c5f03e49f7d6a48262ed04a393f76b89b2ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:a7:4d:39:0d:35:cb:fe:95:1f:68:3d:76:
                    c7:6f:67:53:62:50:b7:63:38:4e:9b:60:d5:3d:e2:
                    8b:b4:a7:9d:5c:bd:d6:b6:49:c7:72:b6:8a:76:cd:
                    40:6c:50:2a:dd:46:45:b2:cb:d1:c4:76:bb:58:cf:
                    93:37:50:e4:e0:e9:4e:6a:ae:1d:c3:b6:d6:e5:8d:
                    35:cb:60:27:5d:fa:64:52:ba:7a:e4:07:9c:81:25:
                    bb:be:a9:77:51:2b:e6:48:57:9d:1b:34:41:1c:91:
                    e5:7f:6c:61:60:62:7e:cd:ab:95:68:46:76:73:11:
                    27:26:4f:e3:55:5d:53:9b:70:4d:6b:5d:54:af:0f:
                    1b:c3:98:12:07:f9:83:c7:a2:32:2d:bc:64:a5:63:
                    6f:59:83:6a:2f:9f:c1:96:96:f7:7b:9a:17:15:51:
                    1e:a3:68:bd:b9:71:89:49:98:09:9d:cf:f1:b0:28:
                    30:8d:f4:53:48:dc:54:90:ec:1d:9d:d5:f9:0d:c5:
                    15:b2:ff:4b:b6:b8:ac:4e:f9:aa:73:0d:10:6d:a4:
                    10:77:77:f2:c5:00:c1:a8:06:4c:2a:13:7b:a7:5f:
                    a9:07:1f:91:19:96:5c:6d:49:a4:c0:df:c8:02:61:
                    11:1b:f5:f1:8b:60:d9:a6:d3:ae:f8:c5:fa:6b:36:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0C:5F:03:E4:9F:7D:6A:48:26:2E:D0:4A:39:3F:76:B8:9B:2E:C4
            X509v3 Authority Key Identifier:
                keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:fd:7e:9f:62:ce:ab:2d:75:a1:d3:c9:10:77:78:bb:b5:c2:
         87:d2:b3:ec:fd:59:ab:57:d3:67:c0:12:bd:3a:4e:85:54:a4:
         73:dd:2d:d6:2e:7e:b0:e9:48:97:5e:62:dc:0e:08:4b:14:b1:
         f1:96:e2:0a:2c:33:c0:fc:4a:f5:2c:6f:6c:50:7a:e1:39:57:
         ea:54:cf:48:a5:3c:06:84:8f:45:f7:b2:11:d8:dd:4d:3e:e9:
         28:61:03:27:1e:62:01:25:09:eb:19:ae:8e:50:c2:af:62:38:
         8a:7a:11:1e:ef:2a:19:08:98:cb:b7:93:cf:29:68:71:db:13:
         c3:76:b1:63:9d:ba:6c:bc:93:ed:7f:90:47:2d:48:93:9e:f8:
         e4:1a:b9:6c:4b:77:f8:f0:63:d9:63:ff:b5:9d:45:b1:0f:f5:
         4b:13:41:97:22:72:1e:65:4c:c8:7b:2f:ec:4e:db:49:b9:1b:
         45:1f:e1:fe:0a:10:08:86:48:b9:59:81:c0:a0:9f:78:20:68:
         9c:81:5f:56:31:a3:0f:c0:8e:82:9d:03:00:a6:f5:22:8d:69:
         c2:5b:76:85:07:bc:40:d0:63:ae:8e:43:1f:ac:4f:a1:34:ba:
         97:b7:86:63:7a:72:16:cd:90:2b:e1:3e:40:05:49:ff:e1:3a:
         ac:c6:b7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:09:13 2026 by rpki-client