Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File:                     1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier:          BaXCoArd7AHppv57d/rWXafWxeIJ0clDOPs4z1FhAe4=
Subject key identifier:   C2:D6:D5:7D:C7:95:4C:EB:7B:3E:75:C7:BE:A6:54:98:7D:F7:7B:67
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer:       /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial:       019EC06DC1609946B1A3AD489C9082F8AAA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number:          1051
Signing time:             Sat 13 Jun 2026 10:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:18 +0000
Files and hashes:         1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: QVZTSovW+AQ4du6r1iyGuVZdZVwFLq5zw9L1mIyyFC0=)
                          2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:c1:60:99:46:b1:a3:ad:48:9c:90:82:f8:aa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
        Validity
            Not Before: Jun 13 10:01:18 2026 GMT
            Not After : Jun 14 10:01:18 2026 GMT
        Subject: CN=c2d6d57dc7954ceb7b3e75c7bea654987df77b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:23:e2:d2:bf:67:1e:8b:64:9c:6f:0d:a7:
                    72:67:fb:c0:94:cf:2b:b0:93:74:6c:47:9c:e6:69:
                    33:07:b8:ae:27:a3:ae:83:04:bd:95:01:af:ff:25:
                    9b:96:cd:11:c4:da:5a:24:7b:df:33:cb:7c:46:2d:
                    ce:4b:fb:1d:9a:68:15:fc:29:74:59:b2:7e:2d:e6:
                    b4:bc:ba:84:f6:6a:1f:03:03:1f:86:8f:21:ec:5b:
                    d3:d8:97:ac:a0:29:f3:79:e1:86:f9:0c:0e:bd:22:
                    30:e5:18:74:fa:61:2c:ad:ce:f4:4d:69:86:b4:1e:
                    47:dd:3a:a4:03:eb:62:79:56:38:4e:df:a1:e5:d0:
                    33:25:3f:7e:84:c9:6b:6b:f4:66:bc:0e:04:2a:83:
                    78:62:34:19:31:ee:66:d4:12:d0:b1:ac:59:cd:cd:
                    4e:57:36:7c:f0:ed:d3:79:c4:2f:9e:b9:2e:35:49:
                    5c:e2:ff:96:3e:0d:ae:de:c1:2b:70:00:26:50:34:
                    ff:73:95:cd:25:07:b9:a9:e5:d4:4b:5a:43:ac:4e:
                    44:f0:3a:04:71:5c:7e:50:7a:c8:64:4c:a9:f0:ce:
                    9f:fd:f7:ff:0c:63:65:8f:8f:73:3b:01:d1:64:a5:
                    9d:f1:73:ea:9d:40:b3:db:8d:7c:9e:7e:50:e5:91:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D6:D5:7D:C7:95:4C:EB:7B:3E:75:C7:BE:A6:54:98:7D:F7:7B:67
            X509v3 Authority Key Identifier:
                keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b2:39:c2:95:06:94:fb:d1:dd:60:cc:1b:9e:d9:3f:47:48:
         e0:21:ad:4d:49:eb:50:5d:ca:06:39:0c:ae:63:e4:2c:f5:bf:
         de:c1:4b:73:4c:f8:ae:75:8e:50:e1:33:50:56:2b:5e:bb:7f:
         09:da:17:0f:e8:84:27:b2:a2:bb:58:34:21:7d:8c:6b:93:bd:
         7c:7b:f7:54:19:3a:6f:af:ab:c2:f7:67:f1:ae:ab:47:41:73:
         32:e4:4d:ea:cc:96:41:ec:0b:fd:8d:85:5e:2d:74:4a:2c:e9:
         ca:bc:e5:03:c1:3d:7b:f9:be:6c:5b:78:1d:c5:bd:5f:9d:11:
         3e:8c:fe:0c:4c:02:86:6a:cd:f6:fb:15:3f:f6:ea:f1:33:c0:
         4b:fa:a1:17:52:9a:27:76:66:62:8c:fe:92:29:44:a7:03:4e:
         00:8f:cd:31:71:6a:64:a3:b7:32:91:b2:ea:d8:c0:7f:60:c0:
         c2:5f:57:23:44:56:7d:e1:f9:40:db:af:b2:79:41:a3:94:d9:
         b5:e8:f2:62:ff:bc:cb:8e:e6:15:91:7d:6b:64:47:84:c9:a9:
         bc:eb:9c:20:e6:6d:81:a9:1b:c5:8f:b0:0e:7f:e6:93:54:54:
         90:54:c9:5e:89:37:a5:a0:55:5c:33:13:8b:24:06:74:d2:7c:
         c5:e3:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:40 2026 by rpki-client