Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          xw8Zynebz0OtVNE8ZCDC7Bs/2BZJzXB+e/jbf5twvv4=
Subject key identifier:   7E:36:51:80:50:F6:9E:02:23:8C:62:8A:2C:E7:03:0B:21:C9:01:6D
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       019EC3371287FBB50A10A964024768F80D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          1236
Signing time:             Sat 13 Jun 2026 23:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:26 +0000
Files and hashes:         1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
                          2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: r36nD1auMBOJZbvcHskqj91pTL8iH0pfS1TraRqxzyo=)
                          3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:12:87:fb:b5:0a:10:a9:64:02:47:68:f8:0d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: Jun 13 23:00:26 2026 GMT
            Not After : Jun 14 23:00:26 2026 GMT
        Subject: CN=7e36518050f69e02238c628a2ce7030b21c9016d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:1f:1f:f0:80:8b:3f:6d:98:8a:59:4c:97:
                    c2:0e:6b:73:cb:92:7f:b3:7b:45:ab:d6:e0:b1:74:
                    44:8d:22:53:e7:45:01:07:e1:25:58:b4:7f:39:16:
                    e1:5e:7a:7e:63:d5:5e:e6:ab:8f:47:17:7e:44:88:
                    67:d5:02:b1:29:ce:c6:15:9c:9c:23:28:a9:1a:0a:
                    db:11:c5:36:69:6b:2c:cf:1c:c4:fc:e5:66:f9:2c:
                    9b:52:ad:dd:53:81:11:0f:6d:e6:94:4b:0b:70:cb:
                    79:97:32:f2:97:4a:e8:fe:50:0f:eb:bf:5e:64:1e:
                    72:84:90:0b:3a:3e:9e:fd:2e:b0:61:b6:7b:85:82:
                    08:a8:0a:f8:d7:30:16:45:b7:8e:7b:ee:c9:12:91:
                    e3:5c:5c:53:dd:e2:8d:da:46:b2:8b:76:52:04:d0:
                    98:4f:3e:6a:26:04:ef:b6:6d:65:37:4d:2c:f8:71:
                    cf:c4:ff:09:a1:8c:8f:96:b2:27:e9:b7:49:8f:69:
                    b6:5c:31:2d:03:21:e7:a0:a9:b9:88:0f:45:c4:4d:
                    02:88:e6:a9:a1:8a:68:06:85:10:84:db:ab:79:d8:
                    50:69:de:81:ba:af:dd:a7:68:ab:e1:39:9b:23:9c:
                    e0:a8:79:3a:0d:af:9f:8b:7a:61:a1:2b:1b:1a:1a:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:36:51:80:50:F6:9E:02:23:8C:62:8A:2C:E7:03:0B:21:C9:01:6D
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a0:ff:49:d6:27:bb:f8:44:e9:a4:be:d8:55:67:60:e9:e0:
         f0:5c:ea:f3:34:5f:93:50:ce:aa:e2:b0:c3:d7:3f:98:64:c7:
         3d:62:af:c7:34:bd:35:c2:db:3f:85:c3:dc:0b:51:08:4d:00:
         49:6b:3d:4f:ef:ca:cd:55:b4:0c:4c:c6:c5:29:64:73:7e:00:
         c2:f8:ce:0c:8f:23:81:da:58:6a:b7:c4:18:22:57:ee:4b:22:
         22:81:3b:c1:98:45:c1:52:65:08:7a:45:22:3f:ed:ed:31:f3:
         43:6e:7f:e2:be:82:32:aa:f8:4b:d1:b3:ab:1e:b7:9f:97:85:
         a0:10:b2:2f:66:28:ff:90:8f:cd:ea:4f:b2:b8:93:1e:35:1a:
         fd:ef:95:6b:e7:08:67:19:9f:a3:c1:30:02:fc:07:a7:16:f7:
         d6:db:32:82:09:32:3f:fa:71:4a:7d:14:2b:38:e3:f1:ea:b2:
         c1:e0:11:30:e3:bd:38:3d:43:89:06:73:c7:16:b7:9c:be:3b:
         10:6d:54:e3:9d:f1:fa:7f:b0:8a:87:c9:ff:13:2f:2a:da:97:
         8e:d8:b5:59:e8:b3:5e:2b:17:db:eb:61:39:cb:59:4a:8c:8a:
         ec:1d:31:7a:3d:a4:c6:a1:78:1c:f0:08:69:55:86:d1:20:8f:
         34:52:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:01 2026 by rpki-client