Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          CWKbAlfLceibxbZYqWY08/SCLb8DwWexlCXYgrx9qMg=
Subject key identifier:   50:B4:96:75:B5:9D:0F:86:62:23:72:C7:49:9A:AB:47:A2:07:EB:EC
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       019EC0DB7D177355BB706DAA89C5E2ED5997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          17AB
Signing time:             Sat 13 Jun 2026 12:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:10 +0000
Files and hashes:         1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: Ho0DLmxQWa9AyNW9jXxmOVNCrDVjsfveMQXOIbcHXIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:7d:17:73:55:bb:70:6d:aa:89:c5:e2:ed:59:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: Jun 13 12:01:10 2026 GMT
            Not After : Jun 14 12:01:10 2026 GMT
        Subject: CN=50b49675b59d0f86622372c7499aab47a207ebec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:4e:f9:82:90:c8:04:c0:6d:1b:4d:65:c5:
                    14:45:41:4d:2f:7f:bc:1e:11:0a:b6:9d:3a:25:d1:
                    f2:dc:1d:06:53:d1:47:1b:f0:2f:d8:3f:46:4c:64:
                    ed:f4:88:b8:32:f8:b6:7b:0f:71:a1:a6:26:7b:26:
                    c9:33:52:29:5e:2c:d8:29:9f:df:89:16:27:f1:bd:
                    77:69:60:90:ad:16:a9:b8:da:a7:1b:7d:27:2e:a0:
                    c6:e1:2e:00:2c:56:c5:27:c0:7d:2f:fc:48:75:4c:
                    c9:ae:15:c2:4e:e0:a8:08:fe:79:2b:17:f8:31:ae:
                    02:53:69:9b:2a:8c:d5:56:c1:78:bc:83:e8:d8:79:
                    b3:fa:e7:58:29:74:4c:67:09:dd:9e:b0:72:7a:9f:
                    d7:c2:33:ae:fe:61:80:1b:ac:26:69:1e:ca:69:55:
                    3f:a4:70:f0:7a:8e:72:91:04:87:87:d4:29:1b:14:
                    08:4e:04:15:e9:82:0a:f8:a9:d3:42:f3:19:1f:70:
                    ff:18:3e:9b:3f:66:8c:8b:d2:b9:8c:53:01:63:8e:
                    ea:6a:83:7f:23:d7:36:db:d8:5b:9a:70:f7:ac:04:
                    55:5d:f1:88:71:f8:51:59:e7:42:c1:6f:ed:ee:65:
                    d9:40:90:3e:ee:ff:e7:57:d6:a5:f6:1c:4d:f8:56:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B4:96:75:B5:9D:0F:86:62:23:72:C7:49:9A:AB:47:A2:07:EB:EC
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:95:21:e0:70:04:75:13:c5:6a:9e:9d:ab:1b:cb:04:90:
         c7:f2:ef:22:32:6a:c4:8b:91:d6:ee:0b:91:a1:15:10:ff:9b:
         75:85:3a:03:0e:f8:5c:44:f3:09:ea:92:47:ef:ec:b7:0c:b8:
         47:1d:a4:ff:e2:41:ef:cc:64:e2:4a:bc:30:11:26:46:a5:9c:
         12:98:fb:c4:1f:b3:7e:d3:dd:e7:d4:8c:0c:ab:e1:43:76:17:
         a8:99:b0:78:04:8b:8f:02:83:bd:28:cf:1e:86:68:9e:65:bb:
         d8:20:62:46:14:30:0e:05:ad:43:ac:59:f9:39:8a:8f:2f:28:
         b3:fe:0d:16:50:a2:c1:4a:b5:c2:09:60:2f:4e:17:4a:f2:dd:
         52:0f:16:43:1c:7b:17:26:1c:f3:a3:23:04:1c:05:e1:21:6f:
         06:4d:cb:9c:d4:3a:dd:01:e9:16:ad:ce:f0:b6:36:7a:67:e2:
         4a:60:39:ad:d4:c3:eb:0d:08:4b:3f:bf:09:52:0d:04:92:5c:
         bc:3c:01:41:4f:3e:9b:fc:48:16:5c:4a:4e:2a:90:44:f3:e5:
         56:ab:29:ee:a9:72:42:56:9c:dc:bc:90:18:35:37:74:39:0c:
         e3:56:34:c4:40:65:ab:99:c1:ad:8f:34:99:b8:d2:ce:dd:10:
         9b:51:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:47 2026 by rpki-client