Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File:                     zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier:          fEwOm5jpdW33xsa+PrdNCr6hccD9Ue3LqWxPs7X1N5c=
Subject key identifier:   98:08:A9:91:99:7B:25:5B:DE:22:71:C2:0A:94:1F:63:ED:D6:75:95
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer:       /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial:       019EC41324739F1A23CAAB98D854969016BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number:          141D
Signing time:             Sun 14 Jun 2026 03:00:49 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:49 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:49 +0000
Files and hashes:         1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
                          2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: HOKCJA6QPGqgWQb+h/I/Rzpm8gvcxQDL4yP1YnVkgDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:24:73:9f:1a:23:ca:ab:98:d8:54:96:90:16:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
        Validity
            Not Before: Jun 14 03:00:49 2026 GMT
            Not After : Jun 15 03:00:49 2026 GMT
        Subject: CN=9808a991997b255bde2271c20a941f63edd67595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:e2:90:85:7e:7d:86:d1:93:7d:8f:5b:9c:
                    4a:22:d3:69:c1:b0:0d:0a:77:ea:47:d1:b7:d2:55:
                    10:53:8b:e5:a1:28:08:90:2e:33:bd:da:e5:e7:7d:
                    08:6f:21:02:d4:26:62:4d:06:3d:d5:94:d0:a5:2f:
                    b0:ab:ce:08:17:2e:3d:62:87:29:c4:d5:bd:5a:d2:
                    c3:26:c9:9a:d8:5b:8a:fd:0a:18:07:f2:7d:60:9d:
                    f2:d4:46:15:08:46:2d:13:73:39:4f:27:69:30:8f:
                    80:ce:d3:5a:21:ea:2e:42:81:f5:2e:d6:e0:05:c9:
                    47:d1:14:c1:3c:74:c4:53:b5:02:33:fb:38:8a:3c:
                    4d:7c:f7:a1:38:8a:d3:79:8a:1b:5f:91:2e:22:1a:
                    3f:37:98:39:36:c0:3f:87:9e:20:e9:7e:87:94:87:
                    03:da:c8:f1:b9:7e:9a:82:c3:b6:e4:64:5d:bd:e5:
                    82:79:b6:82:e1:c5:db:ea:fe:22:ea:9c:4a:28:2f:
                    23:3d:8d:7e:e9:5a:31:59:98:8e:36:2e:87:7c:78:
                    3c:1d:0f:4a:1b:3d:bb:9d:10:e7:7e:6e:02:a1:13:
                    9f:61:03:8e:ee:ee:57:c2:17:3f:ed:cf:f6:e3:76:
                    a1:3f:0e:83:31:d6:96:5f:c9:f1:65:c5:bb:fb:5c:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:08:A9:91:99:7B:25:5B:DE:22:71:C2:0A:94:1F:63:ED:D6:75:95
            X509v3 Authority Key Identifier:
                keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:4a:f6:f4:01:89:31:bd:72:e1:de:5a:d3:b8:7d:7e:c4:
         26:c1:86:d7:50:d6:9f:3e:2a:83:2f:d7:36:5f:ae:a9:b6:52:
         23:98:bf:96:b6:84:ed:4c:4b:76:24:26:35:e4:ac:41:f4:ed:
         87:c3:5f:df:ed:1e:eb:ee:6f:44:97:af:92:20:8c:d3:ec:85:
         59:a6:a8:40:8f:8e:d7:77:01:28:87:b4:1e:4f:96:cb:e8:cb:
         80:70:bd:e4:f8:1a:fb:1c:49:41:b2:2f:8b:80:2e:d7:1e:f5:
         15:b4:ca:99:ca:d7:83:8b:67:d9:ac:d7:09:cf:28:72:f2:5a:
         67:9b:b5:c8:18:a4:1a:c6:e7:7a:5d:b5:61:a1:e7:72:5b:44:
         ad:32:b7:8e:5f:7c:15:1e:6b:9b:a1:44:4a:da:19:ff:41:a5:
         14:af:68:1d:ea:66:31:e3:d4:6a:85:d5:fa:df:26:1f:b4:f6:
         09:cc:04:c1:e3:70:a6:88:ef:46:92:27:c0:f9:02:93:26:ed:
         c5:16:2e:d3:df:b0:bc:66:42:9e:f1:20:92:f0:ec:a0:71:85:
         5a:48:8a:77:60:18:f2:62:f6:9c:e4:ce:71:cd:39:af:3d:f2:
         f5:f8:11:24:f9:f9:a3:2f:ef:15:9c:a3:1b:91:77:73:94:84:
         99:21:e9:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EEyRznxojyquY2FSWkBa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl
ZDIxMzgwHhcNMjYwNjE0MDMwMDQ5WhcNMjYwNjE1MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg5ODA4YTk5MTk5N2IyNTViZGUyMjcxYzIwYTk0MWY2M2VkZDY3NTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufHikIV+fYbRk32PW5xKItNpwbAN
CnfqR9G30lUQU4vloSgIkC4zvdrl530IbyEC1CZiTQY91ZTQpS+wq84IFy49Yocp
xNW9WtLDJsma2FuK/QoYB/J9YJ3y1EYVCEYtE3M5TydpMI+AztNaIeouQoH1Ltbg
BclH0RTBPHTEU7UCM/s4ijxNfPehOIrTeYobX5EuIho/N5g5NsA/h54g6X6HlIcD
2sjxuX6agsO25GRdveWCebaC4cXb6v4i6pxKKC8jPY1+6VoxWZiONi6HfHg8HQ9K
Gz27nRDnfm4CoROfYQOO7u5Xwhc/7c/243ahPw6DMdaWX8nxZcW7+1wpCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgIqZGZeyVb3iJxwgqUH2Pt1nWVMB8GA1UdIwQY
MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt
ZjM0NjNmYzcyY2I1LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1
LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTdK9vQB
iTG9cuHeWtO4fX7EJsGG11DWnz4qgy/XNl+uqbZSI5i/lraE7UxLdiQmNeSsQfTt
h8Nf3+0e6+5vRJevkiCM0+yFWaaoQI+O13cBKIe0Hk+Wy+jLgHC95Pga+xxJQbIv
i4Au1x71FbTKmcrXg4tn2azXCc8ocvJaZ5u1yBikGsbnel21YaHncltErTK3jl98
FR5rm6FEStoZ/0GlFK9oHepmMePUaoXV+t8mH7T2CcwEweNwpojvRpInwPkCkybt
xRYu09+wvGZCnvEgkvDsoHGFWkiKd2AY8mL2nOTOcc05rz3y9fgRJPn5oy/vFZyj
G5F3c5SEmSHpwQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:54 2026 by rpki-client