Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File:                     zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier:          kX6tVfsPJsU6wRc7I5V0nInY1dEUw7mKO6yKJ1ppFCM=
Subject key identifier:   63:2B:8B:E2:98:33:9F:3A:9A:E1:B7:9E:F1:7E:87:9A:DA:A5:AE:D6
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer:       /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial:       019EC1EE132AD020920BB090B8B0A6FD033A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number:          0250
Signing time:             Sat 13 Jun 2026 17:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:05 +0000
Files and hashes:         1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
                          2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
                          3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: EPI/NJSxXtOYoaAO1ewGkkuksOHgHDD28rIR9kRGYVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:13:2a:d0:20:92:0b:b0:90:b8:b0:a6:fd:03:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
        Validity
            Not Before: Jun 13 17:01:05 2026 GMT
            Not After : Jun 14 17:01:05 2026 GMT
        Subject: CN=632b8be298339f3a9ae1b79ef17e879adaa5aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:5b:5a:e7:a0:7f:d8:1a:9d:29:58:68:57:
                    a4:4e:0c:66:a2:d1:13:b0:21:9f:b1:60:4b:1e:12:
                    e9:08:92:73:17:2a:60:2e:0d:b3:7e:5d:86:c6:f9:
                    20:be:2c:bc:6d:be:89:f9:ed:8b:93:fb:ab:1c:45:
                    35:a8:6d:0f:37:48:3d:66:fc:2c:a1:30:e9:60:96:
                    3d:ed:9c:8a:ac:f4:20:a7:92:96:e3:a6:49:a1:aa:
                    4b:8b:4b:30:35:0c:83:21:f8:30:0b:67:dc:a6:96:
                    c0:c6:f1:f8:77:a5:c6:d7:f4:0e:59:d8:f7:8e:34:
                    95:d6:16:0f:bb:2e:f3:bb:13:50:4b:a6:75:87:e2:
                    99:87:18:6b:eb:37:66:33:34:97:94:38:2f:49:02:
                    a2:eb:a6:5d:90:17:1c:37:82:b7:18:94:17:d2:2b:
                    0c:31:43:aa:c2:51:f6:73:ea:cc:95:1b:f5:ab:c7:
                    c9:09:8a:86:c2:61:a7:01:2d:0a:59:3c:45:9a:1a:
                    ca:47:63:ef:93:44:ea:53:1b:49:a7:4b:85:21:4d:
                    a8:93:9e:4b:d0:4a:ba:bc:60:52:38:0d:7e:32:05:
                    94:4d:a5:35:d3:8f:0d:bf:26:19:2e:f9:21:6b:71:
                    61:04:b9:15:f4:e1:be:8a:f9:06:2d:b5:af:ab:12:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:8B:E2:98:33:9F:3A:9A:E1:B7:9E:F1:7E:87:9A:DA:A5:AE:D6
            X509v3 Authority Key Identifier:
                keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:cf:e0:09:52:1b:0b:07:2a:01:7a:71:34:6b:af:2d:b4:d4:
         8d:d1:62:92:4f:c4:bc:d4:2c:52:27:5e:ee:15:82:54:35:b9:
         13:06:da:c1:b4:ea:55:b7:8f:3d:f1:75:69:20:ad:92:8b:48:
         dc:41:b4:87:26:ce:3f:c7:c7:a0:70:37:90:a4:ff:95:20:4a:
         01:00:07:f5:25:70:14:12:51:3b:76:d6:84:65:5f:b0:e4:3c:
         98:35:9f:cb:94:0a:0d:cd:dd:a2:3d:9f:ea:a1:6d:0a:09:bd:
         ea:8c:ee:1c:58:8e:45:1d:ef:39:37:0e:50:6f:ed:93:5c:e3:
         4a:fb:68:1d:11:34:95:e1:b2:fa:79:aa:88:bb:d1:b1:d3:76:
         dc:35:bd:51:79:4f:ca:6d:df:ac:6c:5b:f9:c7:08:13:53:42:
         9a:0c:67:7e:74:63:20:d9:ae:cf:36:e1:a0:7c:e9:ba:7c:da:
         29:da:2f:2b:2a:13:24:cd:59:a8:9b:6e:d3:4c:8b:fa:62:d4:
         92:3a:8f:7b:48:fe:b0:5b:37:80:c5:37:c9:b4:da:c5:84:94:
         83:96:b1:fa:b9:51:18:d0:a4:ab:86:b9:da:59:7e:02:f6:a5:
         e8:f8:c9:03:9a:0a:3b:a5:1f:f5:62:21:ca:23:3c:5f:4b:f5:
         cc:ec:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:35 2026 by rpki-client