Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File:                     zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier:          MFGX+bPoKsCQLZz38p5OIW4uG0gOPSSdZ6eIz4lslG0=
Subject key identifier:   F6:5F:B3:53:4A:2B:C0:7D:09:88:4D:33:B7:13:31:DA:88:A0:8B:96
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer:       /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial:       019EC0362690F54DA7FC05CE69AC270D0412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number:          0FB8
Signing time:             Sat 13 Jun 2026 09:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:34 +0000
Files and hashes:         1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
                          2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: ZTSJD9NGy1yfEKEI7WwspEwqazqwvKIR2Y5ck1KYOLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:26:90:f5:4d:a7:fc:05:ce:69:ac:27:0d:04:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
        Validity
            Not Before: Jun 13 09:00:34 2026 GMT
            Not After : Jun 14 09:00:34 2026 GMT
        Subject: CN=f65fb3534a2bc07d09884d33b71331da88a08b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a5:15:87:da:a8:c3:ca:d1:fc:44:6f:42:e6:
                    20:9d:32:5d:55:dd:e9:3f:6b:b4:a3:08:b0:2d:89:
                    de:b1:83:00:0e:0f:5d:a8:4b:10:49:93:d3:18:0a:
                    48:c6:85:9e:7d:4e:28:cd:e9:19:3a:c7:77:eb:c1:
                    bd:47:33:20:8f:6b:03:95:98:c8:f1:c1:c5:5e:46:
                    76:a1:11:ea:92:b2:c0:37:f7:47:2b:51:9e:16:e4:
                    a3:d7:15:79:f6:af:56:26:b1:39:dc:52:8e:ad:23:
                    bc:8c:e3:25:34:8e:b7:0e:d7:05:ed:6c:62:e1:4a:
                    33:9e:da:83:cc:cf:24:30:5e:7a:d7:1b:a6:89:5b:
                    46:4b:00:6f:32:22:82:e5:82:84:1c:08:ec:c0:12:
                    c6:9e:91:b0:69:00:e8:e6:40:34:e3:55:74:c9:9b:
                    76:9c:d7:ca:14:94:87:d6:22:c8:e4:da:68:5e:92:
                    10:d2:05:8b:63:19:05:ce:ce:c4:74:47:c1:25:03:
                    7f:68:41:b5:be:b4:01:30:0c:29:3e:37:aa:00:ce:
                    2a:36:c0:7a:93:e6:05:9e:74:02:79:b0:91:a8:6f:
                    f6:73:15:9e:4d:51:08:ab:17:91:56:12:ad:4b:9c:
                    0c:43:77:94:4b:a5:c3:f3:20:a1:62:af:38:35:7a:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:B3:53:4A:2B:C0:7D:09:88:4D:33:B7:13:31:DA:88:A0:8B:96
            X509v3 Authority Key Identifier:
                keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:55:4e:a2:6d:38:43:6b:bb:ee:7d:db:92:14:25:2c:e2:36:
         e5:50:74:4d:1c:bd:b7:bf:9f:cb:59:df:58:5c:af:16:95:34:
         4e:01:27:53:ab:d9:8d:f5:97:d6:28:30:f3:16:de:32:3c:79:
         aa:a1:30:b9:7c:c0:0b:d9:6f:20:13:fa:9e:29:93:99:f4:e1:
         ef:88:3c:52:3e:52:d1:8b:1e:e9:1a:68:12:48:dd:15:f8:ec:
         42:2e:9a:79:4c:ee:1d:5b:7b:3f:89:7d:66:14:08:35:c6:20:
         1b:57:35:bf:94:87:81:cb:4c:40:3f:77:39:c5:3b:cd:63:5c:
         34:74:32:6e:b9:de:48:01:43:22:79:be:00:ec:2a:47:f6:fc:
         27:b2:fa:2f:8d:e4:b1:5c:0f:fd:1a:8a:c9:76:d1:5e:94:0a:
         d0:a2:e9:0f:08:33:c8:a3:b5:17:86:22:ff:c7:27:a7:b3:61:
         cd:d7:f2:b6:3d:4c:9c:c1:2e:47:52:09:03:5a:75:e5:0c:99:
         a7:fb:6b:32:38:f5:e5:81:70:ba:b5:50:b1:36:6c:0e:17:91:
         0e:98:69:a2:bb:25:17:8d:f2:7f:26:d1:23:5b:2f:ed:3b:17:
         5d:d2:6f:2a:cc:1d:48:a5:d3:df:86:31:65:df:d2:04:2a:1f:
         4a:61:f4:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANiaQ9U2n/AXOaawnDQQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2
ZjljNDAwHhcNMjYwNjEzMDkwMDM0WhcNMjYwNjE0MDkwMDM0WjAzMTEwLwYDVQQD
EyhmNjVmYjM1MzRhMmJjMDdkMDk4ODRkMzNiNzEzMzFkYTg4YTA4Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96UVh9qow8rR/ERvQuYgnTJdVd3p
P2u0owiwLYnesYMADg9dqEsQSZPTGApIxoWefU4ozekZOsd368G9RzMgj2sDlZjI
8cHFXkZ2oRHqkrLAN/dHK1GeFuSj1xV59q9WJrE53FKOrSO8jOMlNI63DtcF7Wxi
4UozntqDzM8kMF561xumiVtGSwBvMiKC5YKEHAjswBLGnpGwaQDo5kA041V0yZt2
nNfKFJSH1iLI5NpoXpIQ0gWLYxkFzs7EdEfBJQN/aEG1vrQBMAwpPjeqAM4qNsB6
k+YFnnQCebCRqG/2cxWeTVEIqxeRVhKtS5wMQ3eUS6XD8yChYq84NXqgSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZfs1NKK8B9CYhNM7cTMdqIoIuWMB8GA1UdIwQY
MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt
YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3
LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1VOom04
Q2u77n3bkhQlLOI25VB0TRy9t7+fy1nfWFyvFpU0TgEnU6vZjfWX1igw8xbeMjx5
qqEwuXzAC9lvIBP6nimTmfTh74g8Uj5S0Yse6RpoEkjdFfjsQi6aeUzuHVt7P4l9
ZhQINcYgG1c1v5SHgctMQD93OcU7zWNcNHQybrneSAFDInm+AOwqR/b8J7L6L43k
sVwP/RqKyXbRXpQK0KLpDwgzyKO1F4Yi/8cnp7Nhzdfytj1MnMEuR1IJA1p15QyZ
p/trMjj15YFwurVQsTZsDheRDphporslF43yfybRI1sv7TsXXdJvKswdSKXT34Yx
Zd/SBCofSmH00w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:11 2026 by rpki-client