Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File:                     Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier:          pdYchiHWpntIlJvdnmcOWTidBIGh0rt9zNYAeSwGPTU=
Subject key identifier:   F3:D9:08:C6:FF:5F:A7:62:17:AA:04:BC:29:51:AC:BA:F1:BB:DC:50
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer:       /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial:       019ED461F2EA9A0347D6A48649B1464A0DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number:          1470
Signing time:             Wed 17 Jun 2026 07:00:49 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:49 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:49 +0000
Files and hashes:         1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: FC+8+wR53zn20kUrXfTFX/0dXQMcgFHZ8j8j97sWZX4=)
                          2: ft2lqYuwguQru201O9bgAkHsRZw.roa (hash: SxxAgVWTlTtYZ2yYRlmGWx2ZIQrhV12/tHeUOv3mztU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:61:f2:ea:9a:03:47:d6:a4:86:49:b1:46:4a:0d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
        Validity
            Not Before: Jun 17 07:00:49 2026 GMT
            Not After : Jun 18 07:00:49 2026 GMT
        Subject: CN=f3d908c6ff5fa76217aa04bc2951acbaf1bbdc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:1d:cc:05:46:15:e1:1b:3d:09:b0:3b:10:
                    73:33:97:f2:4d:21:f2:7e:41:fc:85:0a:13:2e:eb:
                    07:c1:b2:9b:da:8c:ca:a0:49:37:8d:87:b6:e8:fb:
                    b4:63:34:bb:24:d5:14:d3:80:cb:ad:29:15:ff:02:
                    89:8d:b7:ff:a2:b0:45:a0:b2:e5:06:7d:19:40:dc:
                    da:41:9b:29:4f:49:4d:ed:3e:07:c4:4d:7a:95:8b:
                    52:57:33:d4:91:fb:ef:9a:6b:f8:72:6d:db:4b:b9:
                    02:47:0b:82:1e:40:ef:93:5c:72:ee:ea:7e:ba:3f:
                    b5:b7:28:f3:44:de:7a:d5:06:8d:f4:6f:0c:a0:ec:
                    d4:f1:73:74:97:b0:56:dd:d9:75:c3:51:32:5c:25:
                    52:77:cb:62:c0:6c:bc:6c:6a:7d:23:b5:0d:58:e7:
                    0c:98:c6:80:bc:a7:04:6b:77:58:02:23:f7:90:d7:
                    b0:ae:ac:31:d3:0b:03:74:a1:35:ca:24:65:c1:f1:
                    7b:58:1e:4b:2a:ad:2e:1d:d1:a7:aa:09:6c:39:38:
                    c9:28:73:1a:cc:04:fe:61:3d:29:2b:68:66:53:9c:
                    e6:84:00:ef:9e:4e:48:a3:1c:26:db:30:36:06:96:
                    25:2d:ab:4c:37:07:a3:ae:cf:e0:14:b4:cf:b4:69:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:08:C6:FF:5F:A7:62:17:AA:04:BC:29:51:AC:BA:F1:BB:DC:50
            X509v3 Authority Key Identifier:
                keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:15:e3:61:87:b0:2e:f8:21:d4:5c:ca:2f:fe:91:3e:a4:
         d9:9f:2c:72:9c:64:ed:03:29:36:19:16:5e:e0:b7:57:e9:f8:
         15:c5:d0:00:d8:a3:ce:c4:a5:45:ab:d2:69:bc:3f:83:7b:23:
         ea:26:e4:2d:9c:c8:0c:c4:b4:e3:36:38:25:fd:be:69:66:5e:
         5f:26:03:11:d1:35:0b:2e:08:f9:48:c4:fd:a5:46:96:2a:13:
         32:b7:3f:2c:e4:ca:da:37:d5:c5:34:e4:75:a6:2c:bf:c2:db:
         a8:cb:32:4b:58:79:9a:b3:b4:d7:cd:56:41:0d:ab:ef:7f:35:
         f9:7d:32:f3:44:5c:c0:ed:a0:4e:c6:c6:70:1b:05:e2:15:cb:
         20:43:b2:21:41:d1:67:76:ea:b2:4c:25:c7:3e:5b:29:be:e7:
         81:89:c2:41:b7:24:40:2f:0e:27:03:f5:07:14:a1:36:fd:ab:
         2e:f4:4f:20:6f:4f:16:6a:b8:24:6a:a7:56:cf:35:0e:30:7b:
         51:42:59:31:51:dd:e3:9e:5c:28:cc:1d:02:a5:56:37:39:cc:
         5d:c1:a7:11:d2:a2:3e:f0:73:0c:c7:4f:62:c1:e1:d2:4c:cb:
         04:73:48:bc:da:22:50:88:00:c8:bf:02:6d:3a:27:88:22:bb:
         68:c7:ff:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UYfLqmgNH1qSGSbFGSg25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjYwNjE3MDcwMDQ5WhcNMjYwNjE4MDcwMDQ5WjAzMTEwLwYDVQQD
EyhmM2Q5MDhjNmZmNWZhNzYyMTdhYTA0YmMyOTUxYWNiYWYxYmJkYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eAdzAVGFeEbPQmwOxBzM5fyTSHy
fkH8hQoTLusHwbKb2ozKoEk3jYe26Pu0YzS7JNUU04DLrSkV/wKJjbf/orBFoLLl
Bn0ZQNzaQZspT0lN7T4HxE16lYtSVzPUkfvvmmv4cm3bS7kCRwuCHkDvk1xy7up+
uj+1tyjzRN561QaN9G8MoOzU8XN0l7BW3dl1w1EyXCVSd8tiwGy8bGp9I7UNWOcM
mMaAvKcEa3dYAiP3kNewrqwx0wsDdKE1yiRlwfF7WB5LKq0uHdGnqglsOTjJKHMa
zAT+YT0pK2hmU5zmhADvnk5Ioxwm2zA2BpYlLatMNwejrs/gFLTPtGnybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPZCMb/X6diF6oEvClRrLrxu9xQMB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEAV42GH
sC74IdRcyi/+kT6k2Z8scpxk7QMpNhkWXuC3V+n4FcXQANijzsSlRavSabw/g3sj
6ibkLZzIDMS04zY4Jf2+aWZeXyYDEdE1Cy4I+UjE/aVGlioTMrc/LOTK2jfVxTTk
daYsv8LbqMsyS1h5mrO0181WQQ2r7381+X0y80RcwO2gTsbGcBsF4hXLIEOyIUHR
Z3bqskwlxz5bKb7ngYnCQbckQC8OJwP1BxShNv2rLvRPIG9PFmq4JGqnVs81DjB7
UUJZMVHd455cKMwdAqVWNznMXcGnEdKiPvBzDMdPYsHh0kzLBHNIvNoiUIgAyL8C
bToniCK7aMf/TA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:48:29 2026 by rpki-client