Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          bHgk/RHeg4qcZ/13QjBnG8+JX+AZwxmCjBWSekZXfVs=
Subject key identifier:   09:A3:D0:F9:98:41:D9:2E:05:4F:17:7D:6D:DE:69:5B:C3:9E:7A:5B
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       019EC17F67C7BB96186F35A8EAF4A0CA9041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 15:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:12 +0000
Files and hashes:         1: Jn62z3mXSy1gXL7OU0u8UHUvETk.roa (hash: kRvtxB45lBHtSWkwsN/FFj92E84r6pWGnn92gwu5MRk=)
                          2: ZZTFmfbdMQ6snkjprGV8Heyn37E.roa (hash: lKKyBMRX1vPM6siDs8lqYfEIzSGcaMWz+LcZio2IfVk=)
                          3: ni888ovsC-BTLPerI4QeQ0fgZFE.roa (hash: 7VDMLDKY6Y0XMf/x1rrlPpTjJxlLSO2U8m99nvv5wFc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: AVNXtMnZBPtqC+2ggfDqFpM8ZdR4ZYVn8P7nR1g8eO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:67:c7:bb:96:18:6f:35:a8:ea:f4:a0:ca:90:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Jun 13 15:00:12 2026 GMT
            Not After : Jun 14 15:00:12 2026 GMT
        Subject: CN=09a3d0f99841d92e054f177d6dde695bc39e7a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:b2:45:80:fa:1a:06:e9:a3:e1:66:bf:17:
                    13:8c:5c:78:01:c3:e2:b5:8d:7e:36:84:c2:a9:60:
                    59:b8:b4:bc:64:53:5e:53:b4:55:e4:28:fb:e9:36:
                    7f:d3:f3:7c:2e:3b:e1:55:20:1d:a9:15:a3:76:22:
                    71:e5:a7:22:ce:ad:a5:37:22:22:61:36:f7:f9:f8:
                    59:70:d0:ed:f2:13:f7:6c:47:ab:b7:39:64:c6:e6:
                    40:bf:01:c1:b2:7c:cd:20:b1:d4:2c:6b:8c:c9:40:
                    44:cf:ac:96:d2:a1:c7:a3:03:9b:f1:81:0d:97:63:
                    83:57:72:72:58:b4:99:b2:fa:cd:fb:c6:ad:2b:d6:
                    80:c1:e2:10:8b:93:e3:d2:11:10:4a:8a:76:d9:55:
                    b1:19:0a:22:73:8e:26:0f:c8:f8:ec:df:8e:69:b4:
                    ad:3e:20:c6:0f:08:4c:f6:64:bc:4c:c0:e1:8b:13:
                    37:bf:c5:1c:7a:47:6e:3d:1e:cb:c9:44:03:c3:88:
                    ce:d2:e2:27:7e:de:5c:7f:cd:49:9b:80:64:cc:d8:
                    06:db:e7:0c:1e:1a:b9:6a:a2:f8:46:54:9b:d3:12:
                    c2:fb:c0:03:22:b7:07:59:65:88:1d:4f:18:22:91:
                    f2:83:69:90:cf:4d:f7:27:49:df:43:ad:31:aa:14:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:D0:F9:98:41:D9:2E:05:4F:17:7D:6D:DE:69:5B:C3:9E:7A:5B
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:20:f5:fd:33:ac:ff:c2:f8:db:84:44:cc:d1:66:bd:11:42:
         fa:c7:33:e0:3a:7f:fd:b7:8e:16:30:05:26:6f:23:50:04:00:
         e8:e1:94:83:2e:14:0d:49:19:f4:4a:61:e4:e7:bf:2f:81:33:
         42:18:08:6f:b5:a2:03:47:c7:e0:32:e1:72:4d:4f:d6:61:56:
         8a:14:dc:f2:88:3a:09:39:84:26:f1:9e:12:43:2c:d9:d0:10:
         4d:fa:71:11:a2:67:79:d0:cd:09:1f:c5:ad:95:9e:f7:11:72:
         7f:13:62:1a:01:1c:63:03:bc:3e:cc:11:75:df:eb:e2:e5:b3:
         3c:08:ba:d6:39:f0:5c:72:3d:e8:33:f9:cb:fc:25:bb:96:e1:
         81:6f:e2:7a:1e:88:67:ae:27:83:0a:b9:3d:d0:fe:93:e7:10:
         07:63:f7:46:07:83:b4:5e:94:1c:b6:4e:53:ff:98:aa:2a:ba:
         7e:ad:45:6e:3a:fd:48:7b:cb:30:90:bd:1a:57:72:e6:4f:2b:
         f4:1a:bf:70:d1:1d:37:c9:66:9f:77:8f:75:fd:c5:2c:e7:d6:
         c8:e1:07:b9:6c:12:f5:31:94:6e:6e:58:8d:08:78:34:32:fd:
         c3:8b:15:97:0c:60:0d:a4:f1:68:cf:da:03:c1:09:f6:07:88:
         99:0d:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:41 2026 by rpki-client