Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File:                     Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier:          +AIYv01r3iHxmrqrjik7T4pCy20X7rfvZR/03cXCPSA=
Subject key identifier:   94:A9:11:31:3B:E3:C4:FD:07:AF:52:0B:E7:AF:37:96:9E:9C:99:02
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer:       /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial:       019EC44A35B5643EAE54C52B910898E14189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number:          0527
Signing time:             Sun 14 Jun 2026 04:00:58 +0000
Manifest this update:     Sun 14 Jun 2026 04:00:58 +0000
Manifest next update:     Mon 15 Jun 2026 04:00:58 +0000
Files and hashes:         1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: BN1lvTAwtfdpKidYJUdllSxLOxXcxUm7Nm9X7J8X59Q=)
                          2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:35:b5:64:3e:ae:54:c5:2b:91:08:98:e1:41:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
        Validity
            Not Before: Jun 14 04:00:58 2026 GMT
            Not After : Jun 15 04:00:58 2026 GMT
        Subject: CN=94a911313be3c4fd07af520be7af37969e9c9902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:41:15:6a:2d:57:b4:4b:29:26:e7:e6:84:
                    a5:e0:01:39:14:6b:98:17:14:b4:a6:6e:17:c7:d7:
                    23:f7:3a:d4:ca:ba:cd:c2:c6:bd:47:1d:51:73:fd:
                    68:fd:3a:d0:2d:2b:26:7e:89:62:37:92:fd:bb:89:
                    f2:61:da:b9:49:9c:40:1a:f0:07:67:67:ab:34:85:
                    d1:b7:72:26:a8:f8:6d:90:43:6d:ed:1f:1c:d1:4f:
                    60:e1:11:b6:c1:97:ad:6b:39:fc:e7:1e:b9:33:39:
                    c2:ef:73:58:4c:47:04:34:38:56:6b:ce:ac:0c:b9:
                    b8:18:85:c7:71:26:2d:66:2a:9b:6c:ff:be:b8:a7:
                    4e:f0:9a:5c:29:b6:4a:54:67:cc:0d:2e:bf:48:4e:
                    a3:33:bf:2c:b2:25:df:82:52:5f:ff:1d:32:82:b5:
                    6c:d6:47:b5:93:2b:9f:3d:bc:54:59:70:ee:27:63:
                    70:79:a2:35:49:78:51:12:58:3f:47:d2:ab:e8:3f:
                    74:60:32:fa:1a:fa:aa:c0:e0:e2:9d:b3:27:95:f5:
                    25:83:d9:a5:72:a4:5a:41:25:7f:63:19:97:01:de:
                    f6:b8:4f:a9:7b:1c:74:65:e9:0e:12:30:dc:22:3c:
                    97:49:a7:80:03:42:a4:e3:45:02:a9:b3:3c:20:75:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A9:11:31:3B:E3:C4:FD:07:AF:52:0B:E7:AF:37:96:9E:9C:99:02
            X509v3 Authority Key Identifier:
                keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:58:1b:27:83:6a:89:23:a8:a3:e8:b7:95:a1:77:93:12:
         d9:c7:67:4d:a0:0b:dd:eb:02:00:f8:49:f0:77:9d:2c:f7:53:
         ef:75:36:11:fc:ca:1d:9e:e8:36:f1:0b:51:83:c3:56:52:49:
         65:4d:39:b3:41:cd:03:e6:15:77:2b:15:86:8b:4b:c6:28:7e:
         5e:c8:0f:3f:df:3a:f5:d6:2d:28:03:ab:b3:a9:d8:38:4b:eb:
         e3:bb:3c:f5:ef:a5:3e:ee:32:d4:5c:5d:7e:57:af:ee:95:5a:
         bd:15:fc:9b:b5:15:5f:95:af:6f:d4:e3:d5:15:71:58:ad:d4:
         0f:90:35:5f:87:13:24:d8:d0:ec:1c:5f:05:ca:68:9d:72:7e:
         8b:40:f4:84:98:4a:14:f4:60:59:37:81:7d:d8:10:a4:c9:19:
         10:f4:fe:56:47:34:1b:df:ee:d4:3a:8d:f9:cc:d3:2f:66:30:
         48:7c:b3:f0:72:c7:49:87:1e:0c:03:5b:23:80:35:52:e3:48:
         a0:b5:82:2f:e1:da:d5:88:54:55:7a:1d:2b:6c:21:bb:60:21:
         1a:00:79:44:e4:e4:8d:91:ba:a0:1f:d4:07:b9:ec:b0:52:fc:
         05:aa:4c:ba:95:28:fc:23:33:ab:49:d9:26:f6:be:5c:0f:25:
         e9:2a:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:11:38 2026 by rpki-client