Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          ymK7GcjgvbYvouLtuh3vXqKFg9qpqp0hmbJMuaW04aU=
Subject key identifier:   15:47:4D:A4:49:66:14:07:60:E1:AC:B4:2C:26:2F:03:28:79:69:2F
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       019EBF5B11100215848302686397BDB53DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          09A1
Signing time:             Sat 13 Jun 2026 05:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:16 +0000
Files and hashes:         1: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (hash: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k=)
                          2: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (hash: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q=)
                          3: aFesnPDh7CxN2CqxODqrdmrSUuk.roa (hash: x5ilgl/10IUgJ6jnlwharE+K/9xapRQ9JBmeLGM6YOI=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: DXOv/o5r8KhAUr6HD7OWPxQu3Cq6UDlSFvkn7GZeAho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:11:10:02:15:84:83:02:68:63:97:bd:b5:3d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Jun 13 05:01:16 2026 GMT
            Not After : Jun 14 05:01:16 2026 GMT
        Subject: CN=15474da44966140760e1acb42c262f032879692f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9f:6f:1d:83:e4:9a:1a:90:f0:ef:08:df:0c:
                    06:0b:1d:34:d6:64:50:fa:01:6e:5c:2e:2b:82:c7:
                    5d:d4:94:90:ae:73:66:b5:49:68:31:88:60:69:68:
                    d5:4f:ae:e7:eb:fa:3c:e0:fe:aa:29:22:17:dc:db:
                    0d:c2:97:6f:ca:5a:f7:b2:f4:c0:2a:aa:19:b2:e8:
                    7e:47:66:86:25:3b:1f:4d:f6:3b:43:4c:61:48:bb:
                    c6:f2:18:fd:aa:f7:95:50:4d:57:1d:f9:fe:2a:50:
                    40:99:21:6c:1a:9b:99:92:e6:db:6d:17:b6:3b:01:
                    3b:bb:c7:06:8b:ba:76:bb:63:02:99:27:3e:0e:45:
                    43:5f:a4:f5:28:b5:e6:8b:55:9c:c5:8d:b5:13:81:
                    c0:6b:92:57:cf:c8:ef:40:9f:54:58:9a:a7:c2:7d:
                    77:06:24:57:4c:ec:d1:7b:35:67:7f:5b:c5:b7:4a:
                    85:44:3e:d1:00:f7:12:b5:9a:1f:c8:14:f4:e4:ab:
                    c0:22:23:1b:9d:b1:d5:29:d0:72:49:32:0a:2b:31:
                    87:4f:e5:a6:78:f4:fe:c2:51:24:04:59:ed:af:96:
                    d4:18:05:03:f1:4e:93:af:7f:30:69:c7:16:5f:2c:
                    9b:5b:31:b0:71:3f:99:9c:c6:44:f6:6c:75:b1:5a:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:47:4D:A4:49:66:14:07:60:E1:AC:B4:2C:26:2F:03:28:79:69:2F
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:60:97:17:87:82:20:25:58:14:24:40:94:0a:e8:d3:78:
         c6:6b:ae:9a:2c:87:4b:3a:72:8f:2a:8b:9f:16:fe:34:16:a4:
         13:42:2a:ca:d9:0e:6c:23:2e:b2:38:ec:30:bb:31:3f:96:62:
         d8:01:0e:95:60:f2:14:76:b3:31:64:c0:82:9b:38:05:a5:1c:
         6b:6d:dc:2b:ac:a1:a2:9b:ab:f2:fe:20:4a:f9:b9:84:fb:b8:
         54:9a:72:e3:93:c2:df:ed:13:5b:4b:0b:41:ab:40:e9:63:51:
         a3:d3:75:0d:73:f6:cd:15:ca:bf:f5:be:b0:4f:4e:ed:5d:2a:
         df:21:c1:32:7f:fe:51:52:e0:76:62:51:17:2e:86:8e:bf:78:
         2a:c7:e3:d8:d8:bb:0f:08:1a:94:a4:c8:22:55:14:dc:37:86:
         e3:3f:1b:e7:27:da:1d:17:3d:ec:76:7b:22:ee:b3:79:40:ec:
         88:f8:bf:96:30:5b:23:be:0e:12:54:02:b9:8b:89:81:01:52:
         54:47:72:39:5d:e9:a4:ca:f8:42:55:f8:f8:ec:e2:ec:98:52:
         f8:6d:fc:77:ec:af:97:da:b9:27:2d:44:2c:d0:97:3c:93:b5:
         03:a3:c3:c3:6b:f5:17:84:dc:2e:c2:b9:db:e9:99:60:67:bb:
         eb:d2:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:24 2026 by rpki-client