Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File:                     Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier:          hWdDVGhukzLLUAFAynPKUsxroBqgmYInvDdSJneCwLU=
Subject key identifier:   2D:58:98:56:E8:F9:B6:55:F8:C8:2A:01:41:D7:7C:86:86:32:BE:E4
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       019EBDD9FCF6201A92DE59B655E7137466DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number:          0E1C
Signing time:             Fri 12 Jun 2026 22:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:40 +0000
Files and hashes:         1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
                          2: A1CXr4dOt7xuCmQiPBtgt3iWtAo.roa (hash: GtPqaBuYk/tZ5YQVdapU19lv8Ijc7CBMwLU16C7BxnM=)
                          3: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
                          4: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
                          5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: b8C+1ppMrpbIPTAHrbqmAzy6aq8FqQY9Rl9EJlmj/Zo=)
                          6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
                          7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=)
                          8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
                          9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
                          10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:fc:f6:20:1a:92:de:59:b6:55:e7:13:74:66:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Jun 12 22:00:40 2026 GMT
            Not After : Jun 13 22:00:40 2026 GMT
        Subject: CN=2d589856e8f9b655f8c82a0141d77c868632bee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:5c:9c:f2:c4:31:49:fa:cb:24:12:0b:1a:
                    08:f9:dd:cf:82:ce:5f:26:76:f6:8b:6a:b8:e2:5b:
                    7f:21:cf:3b:51:3a:1c:a9:1f:a9:e2:e8:39:ea:2a:
                    6d:40:41:a7:22:ac:f9:de:a6:88:e1:5d:bc:ee:a6:
                    ea:17:40:8b:b0:5f:0a:5b:70:95:e5:30:1c:93:21:
                    44:e9:fe:ab:22:59:8a:d6:64:65:94:6c:19:ba:98:
                    fb:ae:74:5c:52:a6:bd:f8:cb:03:69:f6:0a:fc:ae:
                    51:92:42:cc:91:5f:6c:09:3d:d5:0f:1a:de:cd:b3:
                    82:6f:d4:4a:3d:9a:6d:79:da:f4:e9:a1:82:c7:07:
                    b1:cd:c7:31:81:64:fa:32:6a:84:ad:9b:d2:58:08:
                    2c:45:cc:a3:4b:ce:87:1f:a0:e4:63:96:5c:b5:a6:
                    0c:7f:f3:70:e1:8c:ca:65:72:21:e6:09:c4:92:62:
                    85:7b:b2:25:1c:d3:5a:dd:5c:ed:1d:1d:82:7f:9c:
                    ea:11:65:d4:73:31:30:9f:cd:26:37:21:f5:58:da:
                    ae:b0:98:a0:8a:c6:8c:c3:5d:60:77:b2:7a:3c:19:
                    ab:12:a3:a7:88:ee:bf:39:68:7f:d2:be:a0:4f:3d:
                    9a:11:a2:12:07:8e:58:cb:e7:e7:c7:33:8e:23:71:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:58:98:56:E8:F9:B6:55:F8:C8:2A:01:41:D7:7C:86:86:32:BE:E4
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:76:f3:4b:cf:e9:ec:73:e9:03:94:14:d0:67:c6:05:75:
         2d:e6:f4:7d:91:8f:5d:44:e9:06:cb:17:4b:7b:cc:0c:5b:b8:
         a2:4e:9c:77:a8:fa:ed:f1:3f:06:83:d2:78:90:ba:4f:1e:3d:
         a9:ae:88:26:02:e2:5d:27:fb:fe:b8:9a:32:36:98:be:47:44:
         4a:7b:90:8e:51:48:56:94:ab:7c:39:a8:3e:27:f3:d6:74:df:
         22:f8:d9:54:89:b2:ee:dd:92:f0:08:85:31:a2:9e:bd:52:44:
         a2:5f:82:0a:10:ec:1a:70:2c:9c:84:d2:1b:40:d1:a6:65:96:
         a9:36:ab:99:34:5b:94:b8:c1:7e:50:59:f5:0a:2e:a6:93:b5:
         be:8b:75:88:1a:fb:a4:3d:b1:e6:7f:45:df:27:2b:9a:88:cf:
         1a:67:ea:23:c4:77:c3:d4:5d:91:12:0c:1f:27:a2:a9:f4:28:
         a8:63:6a:9a:4f:55:f6:3d:61:f2:82:0c:f4:e4:00:db:fe:65:
         d0:6f:24:21:66:e7:a6:90:5b:50:d1:35:8c:a4:0c:b6:be:98:
         0f:69:f4:e5:e4:b8:9d:9f:c6:75:2d:b5:6f:9a:9f:6b:9f:50:
         da:a9:fc:81:9b:b2:16:49:cb:ef:d4:66:b6:16:43:9b:61:88:
         24:0d:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:08 2026 by rpki-client