Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File:                     Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier:          p0utG6dUZczkYE54N+gOInXjZ25RmFPHZmEqVIKexas=
Subject key identifier:   41:B9:C2:9A:A3:66:62:2B:E5:73:89:BA:99:21:BE:FA:3A:03:88:7F
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer:       /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial:       019EC2C9F8C71E91B07CB25DB23D9338420C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 21:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:16 +0000
Files and hashes:         1: Z7YKoT2uZ4toIphTGHeS29211HY.roa (hash: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=)
                          2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: onvjpHwmSeHn6SerwIPPV+8rCR/u+gW/2MYE0+yRrrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:f8:c7:1e:91:b0:7c:b2:5d:b2:3d:93:38:42:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
        Validity
            Not Before: Jun 13 21:01:16 2026 GMT
            Not After : Jun 14 21:01:16 2026 GMT
        Subject: CN=41b9c29aa366622be57389ba9921befa3a03887f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:be:4a:ba:a6:95:98:8d:9c:8c:11:e0:ac:
                    4b:88:a3:47:96:9f:98:54:d0:82:e4:88:2f:99:32:
                    9c:92:a2:7f:f7:8b:bc:1f:67:69:7d:51:25:fd:e6:
                    0e:b2:63:0c:a9:bc:0d:36:15:b2:d2:a0:6b:f7:29:
                    f3:cb:0a:e4:80:22:8c:d0:4c:99:c1:e5:27:23:06:
                    c2:27:06:d7:90:15:68:67:f5:10:6b:68:88:a8:ba:
                    cc:c4:76:26:01:f5:2a:af:f9:e4:06:b7:3d:1b:e7:
                    af:54:f2:7c:91:3f:0e:ef:3f:98:dd:3d:b3:7b:f7:
                    3e:70:63:29:98:b8:a2:90:4b:66:ac:90:02:ba:e6:
                    97:48:52:fb:fc:50:60:3e:3d:cd:59:04:cd:db:c1:
                    17:1d:af:12:c8:0d:5b:b6:05:72:19:3b:27:f6:1f:
                    14:93:21:97:eb:f7:f5:f7:5d:a8:e0:54:ab:dc:82:
                    ea:c1:23:f1:3a:7a:4d:b2:3f:45:89:01:24:2f:25:
                    af:e7:5f:9a:32:6e:b3:bf:fd:d7:9d:71:a2:58:73:
                    d0:f2:b3:aa:f7:49:1f:b7:4b:c7:10:10:80:75:ca:
                    84:da:ef:d5:8b:f8:cf:38:9b:e7:18:87:80:db:74:
                    01:33:1f:d2:0d:13:e2:50:7c:3d:0c:19:72:ec:2c:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:C2:9A:A3:66:62:2B:E5:73:89:BA:99:21:BE:FA:3A:03:88:7F
            X509v3 Authority Key Identifier:
                keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:45:a4:2b:e8:ed:9f:05:e4:d7:34:5d:04:75:25:5e:3f:73:
         d1:cb:13:dd:93:42:f5:5c:96:48:31:1e:65:34:db:f2:d1:9c:
         92:cf:b4:2b:99:fb:2d:b4:e9:d7:db:12:80:a7:38:b7:3a:1c:
         95:24:21:cb:3e:17:14:cb:81:72:c7:e2:30:2a:93:d1:73:2f:
         3c:47:dd:42:2b:a7:64:8e:a6:88:d9:c2:92:a3:3e:82:e4:81:
         e4:26:50:8c:a6:11:64:09:49:bc:97:20:a2:e1:6c:fe:86:43:
         a2:b7:0a:4f:44:f3:65:ca:85:62:e7:57:a7:56:55:b3:eb:ea:
         08:db:0a:b4:21:1a:98:eb:bd:db:9f:2f:13:b3:0e:9b:f3:88:
         b6:26:41:9b:41:94:f0:4e:65:d9:ea:59:d7:66:7a:a9:48:42:
         2c:6a:59:7e:cc:fb:90:8c:5d:f1:2a:a4:ee:7a:20:ad:5b:c9:
         51:0b:52:cf:4e:f8:61:f4:fd:a1:18:0c:b1:f9:e6:cf:8c:e2:
         47:e6:5a:07:c9:a9:2d:55:42:08:28:66:2c:c8:d3:96:0a:a1:
         e7:56:e2:9b:ad:d7:4a:42:56:8c:8c:e0:13:f3:f3:00:3a:f2:
         a4:06:04:ea:50:1a:d6:92:34:ee:9d:2c:0c:af:30:fb:e3:e7:
         3e:e5:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:16:09 2026 by rpki-client