Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File:                     zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier:          l+dU3j6MwFvxYIh7InaM9o9eXPtHC9uMb5B2IXW+5Bs=
Subject key identifier:   A8:5B:87:56:B5:85:C4:70:E6:89:D6:A3:E6:86:62:3E:AF:70:C4:9C
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer:       /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial:       019EC111EE713BC581AFCA3D0EB26077A630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 13:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:38 +0000
Files and hashes:         1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
                          2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: nHMnz7iOOtukuvEQaQuyO9JhMO7+H0OwXSbn+Qc+CwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:ee:71:3b:c5:81:af:ca:3d:0e:b2:60:77:a6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
        Validity
            Not Before: Jun 13 13:00:38 2026 GMT
            Not After : Jun 14 13:00:38 2026 GMT
        Subject: CN=a85b8756b585c470e689d6a3e686623eaf70c49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:9f:4d:1f:6b:a4:90:06:dc:41:a0:b9:20:
                    02:8b:11:e9:9b:1c:80:34:8b:93:2c:66:60:05:52:
                    bc:d9:69:77:94:54:c1:c7:db:51:c2:b1:3c:56:e4:
                    68:8c:8b:c5:42:ba:c4:cf:b7:1b:19:6e:37:f7:29:
                    aa:ca:c1:45:ac:01:d3:8d:f6:23:af:78:4e:b0:a4:
                    c9:5a:0c:9b:a8:44:de:3e:33:49:bc:97:7b:27:e8:
                    b5:25:ff:32:79:b5:0f:3e:ef:da:33:93:24:6f:c1:
                    4e:22:81:ff:a6:d3:bb:30:b0:1e:60:df:a8:41:f0:
                    8a:1e:fa:8e:3b:ff:62:2b:bd:dc:50:25:5f:85:38:
                    c7:09:fa:ef:16:f0:37:bc:ed:15:76:b6:4b:25:45:
                    be:2a:6d:ab:f6:08:14:99:22:ca:31:52:9e:c1:d9:
                    79:b8:4e:56:03:56:25:6f:6a:97:ff:41:36:2e:fb:
                    01:10:3c:06:12:5d:e6:08:99:1f:01:11:4b:f1:92:
                    25:3a:fe:58:cc:07:c4:a5:7f:95:91:33:78:13:0b:
                    9f:2c:49:a4:1f:f7:e7:14:9a:c0:5e:93:85:b9:62:
                    6d:fe:98:14:1f:2f:a5:02:59:f6:d4:ef:c1:d1:7c:
                    4b:06:c8:93:10:e8:f2:09:74:37:00:b0:91:94:4a:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5B:87:56:B5:85:C4:70:E6:89:D6:A3:E6:86:62:3E:AF:70:C4:9C
            X509v3 Authority Key Identifier:
                keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:67:4f:8c:6f:ec:0d:d5:57:43:67:a4:d2:c7:c8:1b:ee:
         ef:04:1b:68:11:4c:d4:28:6f:3b:57:0e:70:07:4d:ff:e9:df:
         f7:14:c0:6d:df:dc:0a:38:ad:ef:ca:3a:70:17:fc:3e:42:29:
         85:9e:ee:8d:88:0d:be:2f:e1:ab:fa:62:0b:70:e8:e4:0c:df:
         ea:d1:39:0c:37:9d:22:7e:b1:27:ef:ba:d3:bc:e0:62:ea:76:
         20:8f:ef:51:0e:e0:aa:b9:9c:6d:b2:d2:fe:32:e7:57:f1:6b:
         28:68:b4:88:d3:66:c1:25:bb:3d:34:7d:5b:1e:5d:da:cd:c2:
         66:ab:d0:9f:83:f0:c0:e7:18:a5:94:84:14:92:77:cb:8f:a2:
         fb:aa:be:5e:64:8e:0e:1f:d1:6e:3a:6d:da:f1:e3:97:98:9d:
         0d:8e:fd:50:d3:a4:47:fa:ed:db:33:36:cd:4c:ea:29:1d:8d:
         cb:c4:19:2f:8b:41:bf:94:6c:bc:15:f8:70:bb:02:fc:4d:d6:
         b5:7c:75:ca:b1:19:cc:51:7c:fb:ac:73:49:8d:f2:f7:2b:ab:
         e4:9b:69:f8:c0:8c:78:1e:cc:67:8c:37:b5:39:e2:39:16:24:
         82:5d:64:82:37:eb:4c:73:8f:44:06:d1:06:c7:0f:50:96:c0:
         a0:8e:e7:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEe5xO8WBr8o9DrJgd6YwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk
OWJlMDUwHhcNMjYwNjEzMTMwMDM4WhcNMjYwNjE0MTMwMDM4WjAzMTEwLwYDVQQD
EyhhODViODc1NmI1ODVjNDcwZTY4OWQ2YTNlNjg2NjIzZWFmNzBjNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA536fTR9rpJAG3EGguSACixHpmxyA
NIuTLGZgBVK82Wl3lFTBx9tRwrE8VuRojIvFQrrEz7cbGW439ymqysFFrAHTjfYj
r3hOsKTJWgybqETePjNJvJd7J+i1Jf8yebUPPu/aM5Mkb8FOIoH/ptO7MLAeYN+o
QfCKHvqOO/9iK73cUCVfhTjHCfrvFvA3vO0VdrZLJUW+Km2r9ggUmSLKMVKewdl5
uE5WA1Ylb2qX/0E2LvsBEDwGEl3mCJkfARFL8ZIlOv5YzAfEpX+VkTN4EwufLEmk
H/fnFJrAXpOFuWJt/pgUHy+lAln21O/B0XxLBsiTEOjyCXQ3ALCRlEo1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhbh1a1hcRw5onWo+aGYj6vcMScMB8GA1UdIwQY
MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt
N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2
LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagVnT4xv
7A3VV0NnpNLHyBvu7wQbaBFM1ChvO1cOcAdN/+nf9xTAbd/cCjit78o6cBf8PkIp
hZ7ujYgNvi/hq/piC3Do5Azf6tE5DDedIn6xJ++607zgYup2II/vUQ7gqrmcbbLS
/jLnV/FrKGi0iNNmwSW7PTR9Wx5d2s3CZqvQn4PwwOcYpZSEFJJ3y4+i+6q+XmSO
Dh/Rbjpt2vHjl5idDY79UNOkR/rt2zM2zUzqKR2Ny8QZL4tBv5RsvBX4cLsC/E3W
tXx1yrEZzFF8+6xzSY3y9yur5Jtp+MCMeB7MZ4w3tTniORYkgl1kgjfrTHOPRAbR
BscPUJbAoI7n1A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:34 2026 by rpki-client