Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          qBQUJVoZLGcEONb/XVNLP8aLq98mGzYdCvl7yLQMSJk=
Subject key identifier:   DA:9D:B6:53:49:CA:7B:F2:DD:C2:3E:0E:6B:66:86:D6:37:B5:DF:E1
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019EBF5A4645C2D806A6B5C9BFBFE36565D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0988
Signing time:             Sat 13 Jun 2026 05:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:24 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: Otz-lRLGypvf7TIwVms5jHBwxYQ.roa (hash: DTvEpHl+5nUpwx5mYYuodxVy4t8FUL7YR0GMpNyL6AA=)
                          3: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          4: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: lx/clyEA1cXQDlu1IAhQTOBV2dzF8ARPrQj06xBZFOg=)
                          5: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:46:45:c2:d8:06:a6:b5:c9:bf:bf:e3:65:65:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Jun 13 05:00:24 2026 GMT
            Not After : Jun 14 05:00:24 2026 GMT
        Subject: CN=da9db65349ca7bf2ddc23e0e6b6686d637b5dfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:39:04:71:71:11:ed:35:32:e6:99:44:a4:
                    b4:f9:55:cd:8f:bc:b9:e4:5f:16:f6:24:33:1d:63:
                    21:3a:75:dc:76:f3:02:3c:d4:0b:42:93:e8:91:60:
                    a0:64:47:02:70:10:38:3c:1b:82:4f:25:42:81:88:
                    05:e2:b3:1e:3b:05:a6:a4:6f:9f:a6:42:9e:2d:cc:
                    fe:c3:9f:af:31:c0:f6:02:c1:63:a3:cd:1c:45:86:
                    96:21:c4:13:7c:05:8c:93:01:88:83:1a:65:d5:df:
                    a7:33:4a:af:6c:96:27:00:c1:73:ce:0c:51:fc:d7:
                    32:1b:8c:8b:89:06:62:7b:ee:f3:f5:eb:f1:41:52:
                    7c:de:04:0c:86:02:ff:b3:16:51:6d:53:5f:62:fb:
                    da:de:9b:62:2e:d8:c0:b9:f2:13:13:bf:70:6f:7b:
                    cf:a2:1b:3c:03:a0:21:1d:5e:b4:95:4f:66:aa:07:
                    a2:05:a5:9e:19:98:b1:15:91:4f:0e:26:cd:00:de:
                    0c:e7:70:9c:bc:f2:e4:be:33:db:6e:2c:7d:c6:e0:
                    41:6a:a2:02:23:c8:ca:f7:36:93:39:70:f9:58:d0:
                    d4:75:63:4b:88:77:41:eb:cb:4a:26:0c:dd:58:12:
                    ab:8d:64:0c:95:26:1e:86:46:46:a7:89:3a:60:0e:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9D:B6:53:49:CA:7B:F2:DD:C2:3E:0E:6B:66:86:D6:37:B5:DF:E1
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:42:17:36:a0:c4:fc:2e:c0:9f:5a:70:c8:3d:f2:94:c9:a8:
         70:76:5a:54:37:2b:2c:90:94:d0:6c:38:dc:b8:5a:a8:b2:37:
         67:1f:e1:b0:da:40:c8:4c:96:89:f7:4a:b7:ed:06:73:40:89:
         fd:ba:63:a0:76:4d:55:66:ed:95:cc:3c:45:c4:2e:a6:40:dd:
         22:2c:9e:76:01:c9:6b:f0:15:bf:14:55:4c:ca:b1:3f:6e:22:
         48:51:ac:59:a7:cd:d1:21:1d:14:a6:84:35:00:f3:7a:f1:40:
         9a:6e:69:7f:06:cd:d4:17:c2:1f:3a:10:d8:3d:16:26:fe:8a:
         c4:f9:d5:c7:7f:cf:27:dd:6f:25:61:1d:b6:62:ec:47:64:bc:
         c6:d8:dd:b2:c8:da:4f:6f:44:a8:6d:f2:54:09:90:19:ba:90:
         03:40:26:ff:ac:df:12:3e:e0:df:1e:fe:cc:fb:66:77:4b:2b:
         80:2b:f0:c3:d1:8d:60:85:45:7e:3e:b2:db:76:52:ab:c8:f6:
         28:c5:43:87:48:6a:7a:7f:c7:45:02:1e:a8:d5:cb:1f:d7:72:
         7d:fc:f9:7a:84:79:87:4a:7e:fc:65:36:5f:82:fa:2b:95:a6:
         b1:52:5f:42:12:db:75:ba:1b:23:4a:05:63:6a:61:de:de:ef:
         c6:96:3d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:08 2026 by rpki-client