Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          C39SY8hIxZttFvt7v73wIwuMFCpIKXxhryjBcKLSacQ=
Subject key identifier:   36:72:A8:78:5E:6A:57:B7:22:84:2F:1E:5F:D2:36:FD:19:E8:F3:99
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       019EC2251BDE83C360911C892BE1258E7EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          12C4
Signing time:             Sat 13 Jun 2026 18:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:12 +0000
Files and hashes:         1: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: zpOcBCqz9EecgmMhEKG4kTNoAlOYcfXGS3l5XguWynw=)
                          2: __i6sIYUIBe7mo2fXsSB58_KDR8.roa (hash: xm+A31I7Z/MMOUkoqOHD6xRyGTCyQb2nbbsP/I4N0LQ=)
                          3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:1b:de:83:c3:60:91:1c:89:2b:e1:25:8e:7e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Jun 13 18:01:12 2026 GMT
            Not After : Jun 14 18:01:12 2026 GMT
        Subject: CN=3672a8785e6a57b722842f1e5fd236fd19e8f399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:8a:cf:34:36:e7:92:14:74:ed:fd:96:14:
                    9f:a6:bd:be:76:f7:c4:21:8a:a6:4e:3e:90:13:b7:
                    a0:67:60:1e:b1:9d:1a:21:cf:6d:7e:e9:d6:4f:ba:
                    c2:a6:d2:98:3e:67:c7:9a:fc:90:62:8f:5e:d2:09:
                    e1:e1:27:b3:7d:d3:f5:58:91:25:a4:6e:49:53:65:
                    e1:a2:23:b8:15:61:ad:24:ac:a4:48:04:c5:83:e7:
                    bd:b1:0f:de:ba:84:fe:d1:1f:b9:87:c3:d4:c8:b6:
                    0b:4f:75:d0:f5:27:bc:6c:8a:f9:4c:db:1b:fa:dd:
                    dc:2b:e8:e8:67:db:98:c5:a3:27:23:4b:9e:a6:f6:
                    12:7f:e2:a2:5c:ef:98:02:a7:9d:a8:d0:f2:d4:a5:
                    94:6e:ed:21:c4:3a:7c:de:70:13:da:d7:e5:13:99:
                    72:e7:be:e4:86:f5:ed:73:15:af:e1:63:a6:37:22:
                    83:89:7a:f7:da:70:ec:db:f9:eb:31:1d:96:44:70:
                    3e:42:07:38:3a:c9:82:33:28:74:87:aa:0f:2c:d6:
                    5d:2a:47:6b:3a:33:74:e8:10:67:5e:90:86:06:02:
                    cc:7c:67:c6:fe:45:6b:0e:c7:87:8a:9f:7a:09:8b:
                    af:ca:72:08:0f:09:2b:57:98:ea:c0:03:92:3d:ab:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:72:A8:78:5E:6A:57:B7:22:84:2F:1E:5F:D2:36:FD:19:E8:F3:99
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:00:31:e6:69:42:82:6c:7f:f1:47:f9:68:d1:20:96:56:70:
         b6:bb:7e:36:74:86:3f:54:a8:95:51:c7:5e:98:b6:02:f3:2f:
         77:d4:b1:4a:cf:c0:ea:ca:b4:e5:79:90:b8:0b:3e:7e:c1:3d:
         08:07:c4:44:ae:d4:eb:e8:14:da:eb:62:3f:b9:95:10:d8:8c:
         ad:0a:c4:96:42:3c:47:8a:82:87:d6:a8:ec:24:27:ab:d6:a6:
         57:05:cb:2e:cf:1e:10:d6:21:34:f4:7a:14:5a:13:9a:57:46:
         d9:4b:64:f3:9d:c7:de:49:70:9c:78:d7:5e:69:46:2c:9e:af:
         6a:74:0e:47:f9:96:71:07:3d:6c:de:92:46:de:71:65:e3:c7:
         46:1b:4b:65:1d:68:c8:08:ab:e0:a5:64:75:7d:08:fe:25:75:
         36:a1:63:0e:36:4b:5f:8e:de:45:d2:33:d4:a7:05:62:53:ba:
         ad:91:39:e5:7b:c4:a2:bc:d0:9e:01:90:ba:2e:5c:52:d3:52:
         6b:80:86:dc:96:88:9d:16:38:f4:a8:ba:5a:e5:bc:3e:70:e4:
         87:40:12:af:ff:3f:56:d8:2f:86:19:d0:60:a8:ff:83:50:82:
         af:a1:2e:3d:4c:fd:6d:60:ef:8a:34:dd:65:be:6c:46:86:78:
         11:e6:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:58:15 2026 by rpki-client