Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File:                     Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier:          +a0JrZ3kqVOfHqaU4f3MT3D1XnLSlD7vVKdtyJ3Kzco=
Subject key identifier:   DF:B6:22:88:F1:B2:44:B1:50:DB:B6:06:0C:78:96:96:66:2B:D3:29
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer:       /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial:       019EC337122E95603BFD523883E0313F997C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number:          07BB
Signing time:             Sat 13 Jun 2026 23:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:26 +0000
Files and hashes:         1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
                          2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
                          3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: g9njUXXLXf5zVMgWsuA0KjkO4oe2Rbf64pA0mHil6ro=)
                          4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:12:2e:95:60:3b:fd:52:38:83:e0:31:3f:99:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
        Validity
            Not Before: Jun 13 23:00:26 2026 GMT
            Not After : Jun 14 23:00:26 2026 GMT
        Subject: CN=dfb62288f1b244b150dbb6060c789696662bd329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:ed:0d:61:8c:c1:7a:08:18:da:5f:05:cf:
                    75:9a:6e:85:5f:0c:cd:86:7f:5b:b8:f9:cd:f6:3b:
                    4d:9d:82:4f:23:61:9a:d8:dd:a4:00:bc:2e:e1:ca:
                    bf:dc:b7:e5:f0:95:2c:30:e1:20:a4:ae:d1:3f:c3:
                    85:8d:ed:97:39:44:93:4c:23:65:02:70:72:76:ca:
                    7c:8a:be:e2:46:60:6d:79:cf:43:62:f7:3b:d8:2f:
                    0a:bc:cc:e3:32:e8:e8:5e:58:e6:61:5f:d4:78:f1:
                    9c:0a:24:a2:05:db:5f:d5:28:f2:f5:05:a5:d6:56:
                    5e:10:73:62:7f:92:9e:e9:5b:9e:0f:f8:9e:e3:ab:
                    3e:5e:2f:8a:ef:e2:e3:43:40:62:93:f6:82:07:f7:
                    56:5c:b6:06:c1:86:df:27:ca:bf:02:32:22:1e:42:
                    28:f5:1f:54:4d:1a:17:9c:0b:b1:48:16:20:9f:94:
                    3c:63:48:71:86:62:87:4d:8d:dc:82:2b:dd:b8:10:
                    c9:62:41:4d:6a:5b:9b:86:0f:db:fd:99:2a:25:1f:
                    5e:64:75:55:50:90:2c:bc:21:af:a5:69:fb:89:8b:
                    c4:98:ee:89:29:44:17:cd:66:7b:76:da:1a:8f:be:
                    60:5c:3c:73:bc:7a:0a:ab:8f:e2:79:ae:4e:a8:eb:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:22:88:F1:B2:44:B1:50:DB:B6:06:0C:78:96:96:66:2B:D3:29
            X509v3 Authority Key Identifier:
                keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:56:30:97:28:9e:46:29:2a:bd:e3:ca:c4:72:48:ff:90:
         32:51:6d:bf:23:35:93:b8:b6:4e:47:c7:7a:65:83:d1:aa:25:
         28:3d:10:9e:ca:cd:21:8e:f1:cc:cd:26:18:67:da:74:6c:f8:
         0b:31:a2:95:73:82:06:5c:43:c3:dd:9c:c3:de:af:91:54:8c:
         89:1a:73:bc:bd:36:54:2e:f9:49:dc:64:49:34:34:32:bc:51:
         c9:1c:ed:d2:ef:71:b6:9d:c2:58:fa:97:82:bf:c4:9a:75:88:
         71:10:04:78:af:e7:d3:78:5e:4c:06:99:22:ae:e0:86:e6:1d:
         28:b2:d7:95:28:6d:eb:c8:f0:37:2c:6c:9c:2c:bf:94:c1:f0:
         70:f0:10:8c:48:c3:b8:56:f2:d3:60:1b:42:3f:08:b2:7f:b3:
         4f:83:5c:9c:b3:31:f4:17:06:8d:ba:88:59:9f:d9:8b:5d:7e:
         0e:46:1f:4d:8c:60:03:f2:9e:ca:4e:f2:36:13:62:86:a6:59:
         41:2a:2d:fc:38:a0:68:a2:02:ec:8b:88:66:16:d0:82:8d:2d:
         59:f5:26:50:f9:11:77:e1:70:5b:d1:9f:ba:e7:a2:c9:44:5c:
         2e:a0:10:9a:82:29:57:70:18:03:43:00:a7:d7:3d:b9:69:df:
         b0:c2:c1:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DNxIulWA7/VI4g+AxP5l8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh
NmFiOGQwHhcNMjYwNjEzMjMwMDI2WhcNMjYwNjE0MjMwMDI2WjAzMTEwLwYDVQQD
EyhkZmI2MjI4OGYxYjI0NGIxNTBkYmI2MDYwYzc4OTY5NjY2MmJkMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzivtDWGMwXoIGNpfBc91mm6FXwzN
hn9buPnN9jtNnYJPI2Ga2N2kALwu4cq/3Lfl8JUsMOEgpK7RP8OFje2XOUSTTCNl
AnBydsp8ir7iRmBtec9DYvc72C8KvMzjMujoXljmYV/UePGcCiSiBdtf1Sjy9QWl
1lZeEHNif5Ke6VueD/ie46s+Xi+K7+LjQ0Bik/aCB/dWXLYGwYbfJ8q/AjIiHkIo
9R9UTRoXnAuxSBYgn5Q8Y0hxhmKHTY3cgivduBDJYkFNalubhg/b/ZkqJR9eZHVV
UJAsvCGvpWn7iYvEmO6JKUQXzWZ7dtoaj75gXDxzvHoKq4/iea5OqOsrXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+2IojxskSxUNu2Bgx4lpZmK9MpMB8GA1UdIwQY
MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt
MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz
LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPA1WMJco
nkYpKr3jysRySP+QMlFtvyM1k7i2TkfHemWD0aolKD0QnsrNIY7xzM0mGGfadGz4
CzGilXOCBlxDw92cw96vkVSMiRpzvL02VC75SdxkSTQ0MrxRyRzt0u9xtp3CWPqX
gr/EmnWIcRAEeK/n03heTAaZIq7ghuYdKLLXlSht68jwNyxsnCy/lMHwcPAQjEjD
uFby02AbQj8Isn+zT4NcnLMx9BcGjbqIWZ/Zi11+DkYfTYxgA/Keyk7yNhNihqZZ
QSot/DigaKIC7IuIZhbQgo0tWfUmUPkRd+FwW9GfuueiyURcLqAQmoIpV3AYA0MA
p9c9uWnfsMLBHA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:16:30 2026 by rpki-client