Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File:                     z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier:          nQOIjMf1KvgxCF3xsbFqS4fRIbq4mplZT4DXJHwcXms=
Subject key identifier:   D1:48:6B:5D:C7:08:49:DA:33:C6:35:B8:57:FA:58:21:10:99:19:A5
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer:       /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial:       019EC1EE3AF93B2D57B8C6361B2CDBE058D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 17:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:15 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:15 +0000
Files and hashes:         1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
                          2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: dbqPl/HuytCGq+Kb1s4cc7WKCL1IrfaV6FmQ5r4jKQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:3a:f9:3b:2d:57:b8:c6:36:1b:2c:db:e0:58:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
        Validity
            Not Before: Jun 13 17:01:15 2026 GMT
            Not After : Jun 14 17:01:15 2026 GMT
        Subject: CN=d1486b5dc70849da33c635b857fa5821109919a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:2c:f3:f3:92:46:81:7f:d5:ef:66:54:88:
                    3b:9b:56:4e:6f:83:1c:36:01:61:f7:b9:5a:67:99:
                    2f:f8:c1:58:0f:44:01:42:e3:41:a7:b6:91:97:f7:
                    c6:36:8d:4f:7a:c6:ee:f5:d2:76:02:e3:09:cb:a4:
                    57:1e:b1:cf:6b:ea:58:54:85:2f:72:d8:ea:d6:30:
                    65:22:53:11:83:bc:0a:2d:7e:d4:46:f1:fe:34:ae:
                    ed:fb:2e:07:bc:d1:f1:38:83:1a:79:22:3f:3b:6f:
                    48:06:98:0c:e3:79:0a:80:b8:b9:72:1a:3f:ec:6a:
                    d0:6b:91:a1:40:e0:d4:f4:40:58:69:96:c9:c5:69:
                    9a:db:81:c4:2f:74:65:1b:77:ac:fc:00:ae:a4:a1:
                    2c:02:93:17:3f:fc:61:e4:5e:65:3e:e3:0d:dc:98:
                    ba:f7:f7:fc:83:41:c4:2d:9a:ff:c0:b1:c0:3b:ac:
                    22:10:18:33:72:13:d8:e1:48:a1:21:aa:31:77:0d:
                    14:b0:a0:e5:c7:81:cd:b8:7c:2d:38:ae:81:2c:2a:
                    48:a6:aa:47:cb:5b:97:a0:cb:de:e8:b6:79:4f:d7:
                    29:f1:68:ca:28:75:6c:da:13:db:1b:da:20:d3:45:
                    19:fd:5a:d1:7f:29:37:59:f9:c4:4d:24:62:4f:e5:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:48:6B:5D:C7:08:49:DA:33:C6:35:B8:57:FA:58:21:10:99:19:A5
            X509v3 Authority Key Identifier:
                keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:9b:a2:df:7a:39:5a:07:1e:b4:f4:3f:3e:c5:2a:46:0d:
         4f:b1:00:30:98:e5:eb:01:28:4d:e6:4f:8d:76:1a:df:89:35:
         06:0f:52:f8:64:39:22:b9:3b:e9:61:1d:d0:ce:6c:2f:59:4f:
         93:42:7c:f8:27:c4:d6:85:12:cf:92:15:8a:d1:9a:52:05:d2:
         13:ca:a3:6c:99:b2:d9:ba:1a:08:c2:36:4c:e7:43:83:65:a0:
         93:9e:7b:37:20:e4:c4:52:c6:00:d8:6a:10:07:1a:29:14:70:
         9f:64:e4:91:42:7a:bd:88:6d:07:69:25:9e:ae:4b:4e:54:b6:
         7c:63:84:f1:fd:90:f8:19:17:2e:4a:25:21:6b:2a:3e:3d:d2:
         31:6a:18:ac:43:73:1f:a2:9a:8c:18:71:d4:d6:5d:ec:3e:e0:
         cc:a5:9e:61:85:34:16:65:7f:7a:c4:40:52:49:32:b2:3c:b3:
         d2:53:0d:da:4a:9a:fb:cf:c9:6d:00:7e:0a:54:f1:8d:5c:d6:
         27:18:34:70:8d:4d:64:b9:54:24:b4:ad:a0:06:7e:34:f6:b7:
         9a:a9:3a:67:62:d1:ad:6b:23:65:64:fa:05:15:6c:b3:f8:f3:
         29:98:9c:cf:0d:56:5a:3a:11:4d:58:11:c6:da:73:77:74:43:
         76:c4:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:48 2026 by rpki-client