Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File:                     ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier:          qD7snhfcjWv4aJWidqlwtUKpvObO7oVlE2M3NmRC75Y=
Subject key identifier:   C9:EA:B9:CE:D5:6E:EE:6F:6A:E1:D1:1A:DC:4B:16:E5:75:93:C4:A9
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       019EBFC92D3DBEA4F959DEBBDE1910BB41D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 07:01:32 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:32 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:32 +0000
Files and hashes:         1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
                          2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
                          3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
                          4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: rg1kKLCfNL9o3V7kCwIbnkzKgHIl/YrC68VbwdzPwyA=)
                          5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:2d:3d:be:a4:f9:59:de:bb:de:19:10:bb:41:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Jun 13 07:01:32 2026 GMT
            Not After : Jun 14 07:01:32 2026 GMT
        Subject: CN=c9eab9ced56eee6f6ae1d11adc4b16e57593c4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:e2:d8:cb:a3:fb:0c:84:f4:d1:9e:08:81:
                    69:f9:00:21:ee:5e:4f:33:44:94:d1:82:99:42:80:
                    8b:64:80:17:2a:ca:d6:a6:2c:f2:b5:8c:bf:c4:8f:
                    7f:81:99:da:39:cb:f5:bb:e7:56:bd:a3:b3:c9:3a:
                    17:38:40:6e:15:1c:92:79:97:39:40:38:6d:47:28:
                    2a:e4:88:72:34:4b:57:4d:09:70:7c:e0:58:ed:33:
                    fd:0b:03:f0:5d:f5:ef:27:f1:18:16:d2:45:51:46:
                    c0:81:42:b9:5b:15:40:1f:ca:f3:16:4b:16:b9:54:
                    35:a9:02:11:ce:26:65:25:f2:f0:74:a9:d9:8d:33:
                    f2:a0:e0:53:ac:57:70:d0:50:1c:83:f1:ff:6b:29:
                    49:04:ba:4a:a5:26:34:9b:84:f2:98:d0:99:8c:76:
                    23:6e:92:64:dc:a2:bb:2f:45:40:1b:f7:7a:68:cb:
                    91:7f:46:d0:54:21:c1:95:a1:11:ed:f2:88:66:3a:
                    12:3b:c8:89:26:02:7a:81:73:3b:56:af:82:90:96:
                    56:8d:31:cc:ee:97:b2:fc:b5:bb:37:c3:3f:7d:1d:
                    f2:37:3f:29:b9:ea:5f:1a:a9:ec:e9:5f:90:77:8b:
                    d0:ad:4c:46:4f:a3:15:3a:57:b6:c9:fa:3b:ad:35:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:B9:CE:D5:6E:EE:6F:6A:E1:D1:1A:DC:4B:16:E5:75:93:C4:A9
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:ae:6b:59:9f:cf:c0:2a:db:a4:2f:eb:c1:8b:58:f6:c7:
         18:c1:69:6a:b9:f9:c1:bc:b3:9d:ac:28:e9:9a:f2:54:51:08:
         42:9c:03:4a:cd:be:7b:be:cf:b3:80:82:78:bd:61:61:4a:f8:
         09:d5:ec:63:fb:81:e9:7c:36:6b:f8:4e:1d:dd:58:8e:5f:cc:
         8b:73:b0:30:1b:09:82:c1:0b:63:a2:39:99:0c:5c:ff:a6:5e:
         7c:57:da:3a:f5:28:7d:85:4c:42:f1:d9:98:82:05:22:f0:7c:
         3a:cf:30:0b:09:45:1b:70:46:11:6f:14:0f:42:34:18:88:00:
         d5:90:ae:76:47:07:50:44:33:8a:cd:78:f0:9b:b6:63:50:62:
         fa:58:3c:ad:61:8c:50:82:b7:55:7c:6c:3f:fd:55:5f:db:95:
         2e:f0:ab:49:06:a8:9c:81:20:26:50:bb:f1:95:4d:7b:4a:25:
         b5:51:b4:a1:39:15:19:84:f9:d0:a5:80:87:fe:d8:63:5d:5f:
         f4:e1:dd:44:95:9b:e6:0a:15:fd:54:76:5c:22:06:e6:b7:db:
         0e:cc:10:4f:b6:4b:53:22:67:9d:87:4e:10:7a:08:cd:70:f4:
         a3:ee:fd:d4:6c:ec:de:d7:ee:fa:c4:6a:34:2b:e6:56:99:f5:
         eb:70:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:09 2026 by rpki-client