Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
File:                     zt0ju4440Jd0Yzyw20Llog1-F2c.mft (raw, json)
Hash identifier:          g00f5ovoWcGrcxggtfvvti791jGP05KooxjFYtXZ07A=
Subject key identifier:   64:E1:B5:3E:00:F8:B2:18:D5:4F:37:01:71:08:37:27:9E:4E:5D:70
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Certificate issuer:       /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial:       019EC292BA4017A96E05E0CC39622F8BAF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
Manifest number:          017A
Signing time:             Sat 13 Jun 2026 20:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:56 +0000
Files and hashes:         1: FpEkjvz9ExCU8WF_yZEuTynNxEk.roa (hash: 1Ak172v20VjTJ5IkMewnA1XPtCQFB64d4MBqUxG0hTA=)
                          2: MP8cv65ITY8cNWNWM9JIwSTr0Og.roa (hash: rx4izqKgskJfzl6CODgjsArLoXvxQVPJAAPmsXR/tZI=)
                          3: zt0ju4440Jd0Yzyw20Llog1-F2c.crl (hash: XgTFmo3ABv2DDPVogNWTUorJbLjzLa5LqZh2G1A83U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:ba:40:17:a9:6e:05:e0:cc:39:62:2f:8b:af:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
        Validity
            Not Before: Jun 13 20:00:56 2026 GMT
            Not After : Jun 14 20:00:56 2026 GMT
        Subject: CN=64e1b53e00f8b218d54f3701710837279e4e5d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:ae:6b:25:3f:63:99:21:b6:bb:e0:cb:26:
                    98:b8:e9:18:26:c9:7d:fd:23:18:00:74:ab:98:fd:
                    1d:f9:29:65:cd:56:24:fd:2e:ba:c4:fe:07:b0:f5:
                    0d:ed:6e:00:ed:27:e2:ac:b9:f3:dd:5e:e6:7f:b9:
                    2d:04:1e:60:09:83:3a:59:06:7f:b9:4a:01:28:9d:
                    f3:16:7c:06:38:6b:ec:ea:e8:bb:fd:7d:ac:37:69:
                    5f:35:73:63:f5:81:0c:2c:da:6f:e6:37:55:cf:e6:
                    43:5e:93:5f:ff:99:39:f6:99:c7:9d:88:7b:96:0a:
                    1e:a7:03:4e:49:0d:83:6f:b6:8b:8f:a5:0f:7e:cc:
                    c5:17:6c:27:4b:95:38:26:71:8c:76:52:c4:bf:b1:
                    e1:1f:77:a8:0a:07:0e:ac:d4:a2:03:9b:93:62:9b:
                    1c:ad:9f:34:89:4c:1c:d0:8d:45:4b:2d:7a:f0:18:
                    1c:81:08:19:e5:2f:79:53:bf:ce:b8:1e:07:3d:03:
                    05:7e:7b:96:b6:e0:07:c4:25:72:1f:5b:ff:c3:d7:
                    e3:a3:4f:63:43:db:95:8c:66:e4:48:46:92:f0:9d:
                    b2:de:ae:3e:51:05:76:db:f5:73:eb:e9:74:2b:d8:
                    4c:d1:cf:e3:ee:a4:44:1c:2d:fb:1d:8c:42:0f:29:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:B5:3E:00:F8:B2:18:D5:4F:37:01:71:08:37:27:9E:4E:5D:70
            X509v3 Authority Key Identifier:
                keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:b7:ce:89:1f:7a:b1:95:21:18:34:9b:5e:ba:b3:04:90:
         7c:78:64:be:a2:ad:17:22:9e:35:62:64:64:b4:a5:df:58:8f:
         96:4e:b1:f4:d6:a7:e7:7f:24:22:83:b6:4a:36:ad:82:8f:37:
         89:56:03:80:e3:f0:3f:37:8b:bc:ef:48:1d:52:7e:90:b0:04:
         8f:bc:0e:73:cd:19:79:0c:bf:5d:06:9e:d2:ec:f2:87:9d:67:
         69:64:d8:d1:70:00:09:f3:b8:2a:57:3d:79:07:73:c8:15:bb:
         f9:97:80:15:5c:17:9f:e1:95:d6:1f:6e:c4:5e:b3:cb:2d:8f:
         f6:9d:40:50:35:81:d3:e4:28:b6:39:fa:d6:06:b3:7e:f8:d1:
         24:90:85:0f:6c:31:d7:73:1d:ba:48:fe:7e:6d:43:10:54:02:
         f6:76:f0:dc:d2:b6:b6:73:c6:28:8c:a1:ec:1e:df:13:7a:94:
         ba:d7:47:56:31:ec:d1:e6:bb:d1:bc:80:51:fd:08:14:33:3a:
         8c:ee:2b:9f:bf:7d:7b:97:8d:4a:e7:ee:f8:a4:9c:7b:64:71:
         0e:18:9c:16:95:a9:5b:16:72:cf:36:b1:db:81:eb:92:83:ca:
         bf:ec:98:2f:63:63:9c:06:67:30:f8:e2:c6:6c:ce:7a:85:1b:
         85:e8:09:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkrpAF6luBeDMOWIvi6+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZGQyM2JiOGUzOGQwOTc3NDYzM2NiMGRiNDJlNWEyMGQ3
ZTE3NjcwHhcNMjYwNjEzMjAwMDU2WhcNMjYwNjE0MjAwMDU2WjAzMTEwLwYDVQQD
Eyg2NGUxYjUzZTAwZjhiMjE4ZDU0ZjM3MDE3MTA4MzcyNzllNGU1ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVKuayU/Y5khtrvgyyaYuOkYJsl9
/SMYAHSrmP0d+SllzVYk/S66xP4HsPUN7W4A7SfirLnz3V7mf7ktBB5gCYM6WQZ/
uUoBKJ3zFnwGOGvs6ui7/X2sN2lfNXNj9YEMLNpv5jdVz+ZDXpNf/5k59pnHnYh7
lgoepwNOSQ2Db7aLj6UPfszFF2wnS5U4JnGMdlLEv7HhH3eoCgcOrNSiA5uTYpsc
rZ80iUwc0I1FSy168BgcgQgZ5S95U7/OuB4HPQMFfnuWtuAHxCVyH1v/w9fjo09j
Q9uVjGbkSEaS8J2y3q4+UQV22/Vz6+l0K9hM0c/j7qREHC37HYxCDynu1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGThtT4A+LIY1U83AXEINyeeTl1wMB8GA1UdIwQY
MBaAFM7dI7uOONCXdGM8sNtC5aINfhdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenQwanU0NDQwSmQwWXp5dzIwTGxvZzEtRjJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82YzA2MjItMjAwMC00ZTRlLWFhYzIt
ZjZiMDE4ZTdjODBhLzEvenQwanU0NDQwSmQwWXp5dzIwTGxvZzEtRjJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82YzA2MjItMjAwMC00ZTRlLWFhYzItZjZiMDE4ZTdjODBh
LzEvenQwanU0NDQwSmQwWXp5dzIwTGxvZzEtRjJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtu3zokf
erGVIRg0m166swSQfHhkvqKtFyKeNWJkZLSl31iPlk6x9Nan538kIoO2Sjatgo83
iVYDgOPwPzeLvO9IHVJ+kLAEj7wOc80ZeQy/XQae0uzyh51naWTY0XAACfO4Klc9
eQdzyBW7+ZeAFVwXn+GV1h9uxF6zyy2P9p1AUDWB0+Qotjn61gazfvjRJJCFD2wx
13Mdukj+fm1DEFQC9nbw3NK2tnPGKIyh7B7fE3qUutdHVjHs0ea70byAUf0IFDM6
jO4rn799e5eNSufu+KSce2RxDhicFpWpWxZyzzax24HrkoPKv+yYL2NjnAZnMPji
xmzOeoUbhegJhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:15 2026 by rpki-client