Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File:                     ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier:          HYrjokIixI9xAskq1tN6AP1uhXEG+MSBX2tPm4l+0ag=
Subject key identifier:   8D:04:AA:09:26:65:DA:EE:26:2D:6F:30:B1:CD:42:C6:FF:FD:8A:00
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer:       /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial:       019ED4D04D62951E570DC23CDA19DFE39B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number:          1548
Signing time:             Wed 17 Jun 2026 09:01:21 +0000
Manifest this update:     Wed 17 Jun 2026 09:01:21 +0000
Manifest next update:     Thu 18 Jun 2026 09:01:21 +0000
Files and hashes:         1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: wpMcll6L8GEceiYBMqBN4fL+nS+HitOV7vCahkNvUYs=)
                          2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:d0:4d:62:95:1e:57:0d:c2:3c:da:19:df:e3:9b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
        Validity
            Not Before: Jun 17 09:01:21 2026 GMT
            Not After : Jun 18 09:01:21 2026 GMT
        Subject: CN=8d04aa092665daee262d6f30b1cd42c6fffd8a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:93:9a:31:b5:9d:e3:d3:b0:ad:29:16:c5:
                    06:71:f9:2e:88:4c:75:dc:8a:d7:16:ce:c1:41:17:
                    3f:cd:76:ce:c3:0c:73:aa:61:69:a7:09:c7:20:93:
                    68:d2:3f:9b:13:0b:b1:f1:f8:1b:b3:b7:d2:25:bc:
                    9e:1a:18:2e:63:91:7f:5b:22:4b:b2:b9:bf:70:cc:
                    42:59:d6:d9:f1:5c:c8:aa:2c:e0:09:6b:f6:1f:cd:
                    68:2c:5e:a6:a2:98:de:7d:2b:86:40:47:ab:ed:56:
                    da:13:ef:62:05:30:6d:e0:fe:0b:cf:2d:a8:d4:31:
                    a1:bd:74:2d:6a:f3:6f:07:ae:5f:a7:fb:b5:14:96:
                    56:03:0f:b4:c6:92:ea:25:83:ed:08:e5:93:6b:fe:
                    a9:40:80:3f:9b:58:27:d1:94:6c:b8:bb:b4:4c:2f:
                    cf:8f:01:ee:a1:74:c2:5d:70:9e:d1:a7:b3:0f:4b:
                    88:c5:9d:d6:c2:44:31:8c:e3:78:fe:a7:e9:22:d4:
                    6a:cf:59:a8:10:33:43:37:4a:d7:c0:bf:4e:41:3a:
                    0f:8e:8c:1b:b2:ab:8a:98:cd:65:db:6f:58:c7:d3:
                    cd:d7:42:f9:d2:fc:94:c4:a1:00:04:60:fc:5e:f7:
                    1d:cc:9e:2e:3c:8d:63:1d:1e:db:54:e4:8a:e7:6f:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:04:AA:09:26:65:DA:EE:26:2D:6F:30:B1:CD:42:C6:FF:FD:8A:00
            X509v3 Authority Key Identifier:
                keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:df:17:52:aa:69:01:b0:2d:9c:dd:51:2b:2a:3f:cb:cf:33:
         23:fb:b9:75:db:54:a8:d4:4f:75:71:63:d1:f3:6d:8f:bc:75:
         44:3b:19:12:67:30:4d:22:e1:00:c4:e1:1a:e4:7e:c4:09:4b:
         65:72:08:91:c1:a7:d1:88:5d:f9:4e:cc:58:60:e2:7e:36:3b:
         e9:2d:60:15:3d:ac:c2:19:2d:07:73:f0:cf:c0:c1:92:d4:98:
         c5:e2:65:23:ef:b5:7f:ee:90:c2:34:e2:bc:cc:df:ec:61:fe:
         7c:59:ac:eb:1a:fc:26:49:e8:40:cc:54:1e:6a:8d:08:93:78:
         96:68:30:25:16:32:6f:a6:49:26:4d:57:e2:d9:68:ed:e3:be:
         e8:5f:0b:de:02:b0:0b:43:32:f0:1d:07:fd:75:83:1d:29:48:
         f5:ee:8c:16:93:12:81:cf:f8:6a:35:84:04:d2:10:a4:62:6a:
         e1:30:d2:06:d9:74:ff:a8:69:39:1f:49:c9:c6:25:33:59:d3:
         f5:d9:e8:56:34:1a:d9:73:09:62:37:4c:eb:04:8e:ff:47:63:
         d2:a2:ac:51:2c:40:ed:c3:e3:a4:98:ba:58:3e:52:bc:2d:4c:
         20:a5:67:83:af:a8:3c:41:dd:cc:5c:b5:29:d9:12:72:db:30:
         09:93:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:11:17 2026 by rpki-client