Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File:                     zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier:          pmsDyVsjeJV8uOhjFzA6K0wKeNttxxWsvxSoTO8iTm8=
Subject key identifier:   6F:A2:70:76:DE:CF:10:A8:CA:08:8A:74:93:99:7D:F3:66:AC:98:02
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer:       /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial:       019EC1EE098E009C582E665B91DE45AD6472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 17:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:03 +0000
Files and hashes:         1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
                          2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: Wu7BbanQRPhCjJEDSKo7k5Ll57VzykoSLihufQtH8q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:09:8e:00:9c:58:2e:66:5b:91:de:45:ad:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
        Validity
            Not Before: Jun 13 17:01:03 2026 GMT
            Not After : Jun 14 17:01:03 2026 GMT
        Subject: CN=6fa27076decf10a8ca088a7493997df366ac9802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:1e:e9:73:b5:49:ca:c5:7f:38:93:f5:8c:
                    d0:b2:ef:df:84:5a:cb:86:74:b0:1c:6a:ee:25:14:
                    1e:1e:2f:9f:51:91:6c:62:8c:18:75:4a:c4:8c:3e:
                    25:e5:c9:bc:12:b2:d4:fc:1b:86:39:91:1a:6e:86:
                    bf:ce:87:ef:1e:a7:44:41:31:37:7b:b0:ff:1d:51:
                    b8:14:2b:3f:23:d3:07:c4:27:de:69:0e:9e:2e:dc:
                    88:63:28:18:f7:c0:8b:22:3f:5e:c6:27:16:01:25:
                    dd:a8:9e:59:90:ad:a0:a6:fe:c3:f7:fa:ae:1f:29:
                    fe:13:00:49:8e:1f:a7:89:a3:6b:64:9b:09:46:e7:
                    ef:e7:48:d1:0d:3a:13:2c:e7:5a:1b:a7:2c:65:0a:
                    8d:c0:f2:c7:52:4c:ad:0e:de:7c:d9:a8:09:c8:d8:
                    04:42:2f:01:5a:27:7d:37:03:9a:08:60:f1:90:6e:
                    fa:b8:46:31:14:59:1f:9f:c1:0a:60:73:3e:a4:08:
                    27:25:ce:cb:df:c5:db:84:26:56:42:01:f0:6e:12:
                    d5:b8:30:8e:d5:87:97:23:c5:bd:11:91:fb:1f:da:
                    6b:d0:76:90:3c:d4:47:4b:d2:7c:57:1a:91:00:68:
                    e4:4d:bb:7f:6a:a1:f4:a7:d7:fd:59:d7:75:e9:26:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:70:76:DE:CF:10:A8:CA:08:8A:74:93:99:7D:F3:66:AC:98:02
            X509v3 Authority Key Identifier:
                keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:88:a7:27:ec:15:5f:52:82:73:36:a8:c3:1d:a8:d6:49:44:
         d4:ad:3c:9d:52:d2:2c:2f:56:d4:d9:34:13:97:4b:9f:35:e2:
         e7:94:85:3f:5a:6e:77:cb:fe:6d:5a:43:b0:94:7e:4c:1d:d6:
         b2:d1:62:54:2e:72:06:6e:a9:31:b7:b8:2c:df:13:31:06:24:
         a7:02:3c:71:8f:d0:57:88:f8:0f:dc:be:d8:78:7b:83:f3:ec:
         32:3a:68:bf:8b:39:ac:ce:8b:f5:8a:5b:42:6e:a5:d1:f1:be:
         e7:ac:43:f5:ba:77:86:e7:ed:9a:59:a2:e1:0e:91:63:a2:4a:
         29:a7:0b:b6:b7:d5:b5:2e:b2:73:2f:26:74:46:81:d4:aa:f0:
         65:2c:ce:02:2a:c0:eb:93:6e:29:10:ee:fd:74:be:e9:5f:04:
         39:79:28:b2:97:83:cd:e6:0e:be:20:37:1c:9c:c2:3e:ed:42:
         79:ee:0f:58:36:5f:e0:2e:ab:b7:a5:b3:c3:a1:de:91:51:4a:
         7a:07:80:c1:ea:ee:35:dd:95:0a:7e:3c:7f:79:c9:98:3b:12:
         c9:b8:8d:c9:30:1f:84:14:90:62:c8:44:d4:92:e7:75:a9:34:
         9c:49:fd:16:b5:d9:56:c9:06:b0:2c:c2:5c:2d:4a:8e:95:e3:
         5b:bd:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:19:10 2026 by rpki-client