Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File:                     zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier:          d/4+IF7dyOA9BANFGftauBrSvIVaLjtdOAcq3fxFihA=
Subject key identifier:   08:51:7A:AD:21:92:1C:B1:9B:34:AD:F3:36:E0:C6:2A:94:AC:C4:4F
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer:       /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial:       019EBFFF45B7EDCAB2EED5595FB5B1EAEB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number:          0460
Signing time:             Sat 13 Jun 2026 08:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:38 +0000
Files and hashes:         1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
                          2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: iXqzVR0p5K1bERacQ+TTDYQY9p9wDHmu0zIdNrZmekg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:45:b7:ed:ca:b2:ee:d5:59:5f:b5:b1:ea:eb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
        Validity
            Not Before: Jun 13 08:00:38 2026 GMT
            Not After : Jun 14 08:00:38 2026 GMT
        Subject: CN=08517aad21921cb19b34adf336e0c62a94acc44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:a3:30:a2:76:78:53:89:8d:4d:ec:83:8e:
                    5f:7b:40:89:20:84:17:82:63:55:2d:9c:f4:86:f0:
                    5b:e0:c7:89:1e:2a:a4:30:94:81:c3:aa:ad:4d:57:
                    e4:72:0c:ff:41:4e:88:eb:aa:f2:9a:0e:fc:af:db:
                    43:6d:3c:4d:36:ac:a9:73:69:22:94:2b:2a:cb:a0:
                    ab:51:7c:02:f7:e3:1b:09:2e:75:de:bf:14:67:f6:
                    1c:1e:b2:5d:19:24:1f:a3:04:d5:d6:ec:53:ed:24:
                    09:ab:03:09:ce:98:f4:70:50:d7:c0:ab:87:78:46:
                    55:25:e9:4b:83:92:13:e7:bd:02:52:c9:64:64:b8:
                    8a:dd:e3:57:7e:21:75:d4:6b:31:3e:08:01:66:c5:
                    be:fd:02:87:10:e8:36:ca:57:6d:64:21:bd:09:f2:
                    ac:95:54:3e:f7:83:5b:0a:ea:1c:2e:3c:51:27:69:
                    80:3d:21:a1:0c:22:e6:00:0a:10:2a:a1:04:06:91:
                    b6:76:78:a5:20:4f:3b:01:77:14:25:c1:38:01:87:
                    a4:08:e5:51:5c:ae:b3:db:b0:5d:b9:c8:a3:c7:d8:
                    5c:9d:70:86:4c:ce:db:0b:6d:d6:47:63:62:03:93:
                    12:d5:c0:53:6e:ca:07:5c:18:c6:7f:33:52:5c:37:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:7A:AD:21:92:1C:B1:9B:34:AD:F3:36:E0:C6:2A:94:AC:C4:4F
            X509v3 Authority Key Identifier:
                keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:10:bc:e9:58:31:73:94:60:30:09:b0:bc:bb:8c:a7:53:da:
         1b:43:99:02:2e:f2:a8:6c:96:ec:d0:e6:8f:b6:c6:c9:84:ae:
         23:65:88:d3:5e:81:f9:ac:89:84:37:16:94:85:aa:21:b1:39:
         09:02:57:45:46:f3:b2:0e:57:10:7e:c1:c6:a0:be:d3:6b:d1:
         03:aa:38:13:5c:a0:a9:47:94:96:36:3f:5b:d9:8c:6b:79:ed:
         10:3b:bd:54:55:f5:b9:ad:58:2e:fb:01:25:1e:d1:40:64:c7:
         0f:36:90:e0:58:d4:ff:f1:4c:0d:23:a4:0d:16:46:8a:84:bc:
         11:1d:1b:99:ed:7d:0d:c3:1c:fd:81:32:d9:44:af:7f:15:4c:
         6d:a0:85:c2:eb:1b:4b:b3:9c:00:29:f3:4f:bf:b2:01:f6:fd:
         ab:d7:01:90:7e:7e:28:f4:3b:d2:3f:7f:fa:7d:93:54:35:93:
         ef:9e:18:f9:58:98:97:7c:56:b4:0e:95:f8:b8:3c:2d:5a:b6:
         01:cf:d6:6b:7c:3f:1b:3d:8b:9b:53:33:43:8d:d2:76:63:d5:
         8b:1d:63:86:4b:67:35:16:dd:87:b3:d4:af:96:41:ca:b1:12:
         ad:4c:ef:d9:18:ce:50:dc:60:87:58:2e:4b:25:48:cd:1b:c5:
         6b:1f:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:11 2026 by rpki-client