Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File:                     ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier:          km+SqD82hv3GJg4PZcR4bvdfx6bL3s6JFT6Fai2i1K4=
Subject key identifier:   F3:31:2D:B2:90:4F:60:8A:E9:5E:D9:56:E7:7B:F3:05:03:5C:16:79
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer:       /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial:       019EC1B754E98B0C48FC284ECEEEA366BB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number:          0C73
Signing time:             Sat 13 Jun 2026 16:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:17 +0000
Files and hashes:         1: 3YnZtmegxXoZvb9K7_HalTViL0w.roa (hash: B1b4mNLvcXEYUbcOc3EYX+Xry/YHoo7ZiUdGbEg4AFc=)
                          2: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: 29OlWPDGkSq+ORVjZxB8NMNyUzi+ezqWJqzP1gGQWyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:54:e9:8b:0c:48:fc:28:4e:ce:ee:a3:66:bb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
        Validity
            Not Before: Jun 13 16:01:17 2026 GMT
            Not After : Jun 14 16:01:17 2026 GMT
        Subject: CN=f3312db2904f608ae95ed956e77bf305035c1679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:60:8a:f1:18:f9:84:c8:4b:40:9c:cb:11:
                    47:45:21:13:6f:d4:0c:7a:5c:02:bb:6c:d1:ac:9b:
                    0b:6e:b3:4d:c0:fe:86:e1:41:17:7c:24:4c:8f:80:
                    34:64:0a:36:40:56:58:5d:68:47:71:16:a2:f1:62:
                    06:86:e1:5a:d6:50:17:f1:b7:c8:68:e1:96:b8:5d:
                    8a:b9:9c:ca:b8:a8:b1:1f:da:60:6a:fe:6c:7c:5f:
                    86:31:30:2e:41:62:c3:15:93:14:b9:a1:66:90:a4:
                    ad:dd:f7:ba:72:c9:aa:36:15:b7:65:2c:71:7c:78:
                    15:02:64:90:97:60:96:f7:97:ad:6d:85:aa:8b:3c:
                    08:fb:6f:6a:8d:4f:57:87:6f:d6:25:28:13:81:b0:
                    54:74:49:71:8b:1c:24:54:3e:df:a4:f4:cc:aa:f1:
                    51:f3:e7:0b:b8:9e:97:05:4b:d1:af:74:20:63:65:
                    00:df:a4:3f:30:89:25:99:4f:b6:07:15:b8:5a:89:
                    3e:72:b8:e9:43:bf:6a:43:8c:55:11:bc:11:99:b8:
                    04:4b:ce:ce:d2:c1:34:59:e2:60:23:de:89:3a:a1:
                    09:90:b3:30:de:54:6a:81:72:7a:ce:39:f3:b2:ec:
                    c7:26:f9:51:a4:24:bd:11:1d:1f:45:1e:f9:54:94:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:31:2D:B2:90:4F:60:8A:E9:5E:D9:56:E7:7B:F3:05:03:5C:16:79
            X509v3 Authority Key Identifier:
                keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:95:0b:e9:61:1f:a5:98:fb:08:63:49:37:ae:4e:43:60:5c:
         a6:e4:0a:a6:c4:b1:54:77:80:61:e5:2a:86:d5:76:56:09:43:
         23:64:ed:72:77:71:04:40:2c:ca:e1:89:af:34:cd:d7:c1:db:
         11:64:b1:32:b1:31:77:0f:04:3e:6e:6c:10:a5:53:3a:ca:94:
         02:6e:4b:89:ba:b2:03:9c:a4:c0:7c:43:fe:45:71:6e:1a:48:
         81:27:97:60:bb:8b:a4:ae:15:08:a6:eb:35:07:7e:67:16:c8:
         71:61:ad:f2:3b:77:bc:1b:52:58:37:28:c7:75:f0:c6:26:d4:
         21:1b:88:cf:b1:1c:47:c7:64:ba:c4:5c:e1:f1:33:ea:89:6e:
         98:8b:c4:84:13:b9:2a:17:ab:23:61:49:2d:c4:ac:06:36:56:
         6b:51:2f:77:00:72:03:09:fa:dd:ea:ef:0c:81:63:3e:1d:c7:
         d6:67:17:20:95:08:8a:ac:6c:06:c8:b0:63:da:30:2a:bb:ee:
         1a:19:a3:f8:0c:48:be:21:de:3e:64:44:14:0b:42:a5:3a:61:
         67:f0:fe:e4:ed:49:be:05:a3:70:f9:d0:6b:d5:59:5a:af:e4:
         e7:a7:4a:e3:7b:42:aa:b9:a5:fd:8a:01:75:2b:4f:78:ab:34:
         25:b6:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:50:55 2026 by rpki-client