Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File:                     zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier:          f8KuHw3qLUyzju/jvOGka+fBdxen7+gPX/BuOhG343k=
Subject key identifier:   09:D2:15:EB:52:7F:40:20:8A:B6:DD:AE:E0:5B:CC:BD:7A:13:3B:C2
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer:       /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial:       019EBFFF29E01549AB035D5E22D325483173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number:          024F
Signing time:             Sat 13 Jun 2026 08:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:31 +0000
Files and hashes:         1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
                          2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
                          3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: gzb6tlxMZEQ7z4yVY/2Raoni+2TEttUt39N2feM8xR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:29:e0:15:49:ab:03:5d:5e:22:d3:25:48:31:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
        Validity
            Not Before: Jun 13 08:00:31 2026 GMT
            Not After : Jun 14 08:00:31 2026 GMT
        Subject: CN=09d215eb527f40208ab6ddaee05bccbd7a133bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:af:82:18:75:1f:7c:3a:7a:4f:59:d2:44:
                    6f:60:e3:c8:dc:95:ca:69:07:82:97:ac:ec:16:80:
                    ed:9b:9a:e4:08:26:3e:b4:19:9f:af:5c:e8:4e:3d:
                    b1:1c:a5:82:09:11:58:42:50:b9:95:41:93:c5:b7:
                    24:ed:97:d1:24:9a:13:94:ec:3f:a9:5f:d1:74:c4:
                    a7:66:eb:82:73:d2:15:6c:31:8a:ba:92:15:63:df:
                    39:06:68:71:84:11:7e:83:9b:b9:ba:b4:1f:86:53:
                    77:5c:70:20:d1:40:10:95:7a:13:28:c4:a6:11:7f:
                    19:76:57:83:bc:e4:32:72:96:1a:fe:e9:be:cd:7b:
                    7f:d2:40:94:4a:eb:9f:33:ce:51:fe:a7:77:c4:e8:
                    bc:48:47:50:3b:08:ab:e7:3c:87:a5:52:c6:00:09:
                    ce:2f:1e:05:2d:49:91:e4:5c:b5:c9:74:04:b7:a0:
                    89:70:c4:f9:7f:cd:89:58:87:09:e0:f0:c9:26:5c:
                    f6:87:ea:f9:61:14:e8:49:e8:8d:b7:de:d4:74:29:
                    d1:87:be:a6:01:0e:1f:da:b0:4d:e9:8b:03:4c:6f:
                    88:12:2c:81:41:cb:67:8a:61:49:1f:73:ed:b9:8e:
                    51:46:e8:cf:f6:b7:b9:81:d6:b0:6a:78:64:a7:60:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D2:15:EB:52:7F:40:20:8A:B6:DD:AE:E0:5B:CC:BD:7A:13:3B:C2
            X509v3 Authority Key Identifier:
                keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:30:6a:65:2b:87:95:18:8b:ce:a6:0a:7f:0a:5a:f5:96:d1:
         8c:e6:38:a8:ac:d1:e8:2d:a1:82:b6:c0:79:50:f3:69:55:4f:
         89:4f:90:4c:9f:b8:65:e1:1f:37:27:18:de:fa:7f:09:d1:46:
         0b:26:84:4d:bc:e7:de:9c:d5:88:7e:aa:ed:03:a1:4f:02:89:
         1c:35:ba:f3:4a:f9:c7:ce:e0:6d:bd:90:e1:60:16:89:eb:df:
         3a:27:45:66:a5:5f:ac:e6:11:29:34:44:65:32:bb:62:8e:bb:
         03:bb:5b:05:3c:99:4f:0a:ea:ac:a4:5b:8f:5f:ad:fb:1f:c0:
         f3:62:0e:ae:8e:67:28:94:10:c6:ac:d5:54:78:50:1a:7c:82:
         0a:4d:7e:d5:de:52:df:e2:59:9d:7b:77:87:02:dc:dc:b8:1a:
         a3:19:f8:71:ae:20:53:bd:ac:53:0d:24:0f:06:cb:90:2f:cc:
         1a:7a:88:27:2b:dc:19:dd:9f:9a:db:6d:91:e4:b2:02:f0:b9:
         f5:56:88:25:52:b5:85:87:2a:60:6e:74:5c:e5:84:a6:e5:fc:
         0f:2c:7b:54:f5:c8:6d:a3:ed:46:30:3b:8b:92:7f:cc:bc:74:
         d7:2a:84:86:1a:bc:d8:92:a6:a1:04:8a:9f:85:06:b6:86:29:
         48:ba:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:40 2026 by rpki-client