Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File:                     Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier:          06kRagpOhpSyNIvsVaKAZJuB7oWx7OrpVRBnaM4k78s=
Subject key identifier:   57:60:5D:F8:BC:96:39:D1:8B:3E:60:7F:85:A3:F5:73:4C:04:8A:BA
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer:       /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial:       019EBEB6335DE5B9DEBAFF9675B3B6F77FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number:          04B0
Signing time:             Sat 13 Jun 2026 02:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:12 +0000
Files and hashes:         1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: 8yLIEMu8K5kakHUX2NIrVLnjzT2G9oXI2G9u64TQnwM=)
                          2: aHYzogA8_WqXNHaKUaPcBWBK-e0.asa (hash: fDrzsmR+TVdgn5fOzpZUh6wt7D5Sp3KZs3IDsXyA4SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:33:5d:e5:b9:de:ba:ff:96:75:b3:b6:f7:7f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
        Validity
            Not Before: Jun 13 02:01:12 2026 GMT
            Not After : Jun 14 02:01:12 2026 GMT
        Subject: CN=57605df8bc9639d18b3e607f85a3f5734c048aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:af:ee:f0:65:3f:7a:c0:fa:b6:21:41:42:
                    6b:42:41:08:f9:be:89:47:a5:21:ec:10:f7:f9:6d:
                    fe:99:d3:3e:03:e2:4a:32:17:08:8c:fc:ff:24:ba:
                    27:97:e9:a0:71:80:b8:d7:c9:67:a5:eb:5f:50:50:
                    b3:a6:55:0e:60:ec:c0:c2:2d:1f:ce:27:c1:3f:02:
                    e5:d0:53:4a:17:e1:47:59:15:48:cf:8f:ad:ed:25:
                    48:be:66:f6:90:a3:87:c9:05:63:55:cc:6f:07:85:
                    93:a2:72:75:5d:bd:3a:9c:93:30:37:8e:0f:c7:e1:
                    04:19:e4:40:4d:42:63:98:c6:47:31:6d:4d:a4:16:
                    a4:40:f3:a7:9f:88:5b:41:e0:6a:63:08:26:b8:aa:
                    ed:dc:1d:77:78:66:9d:1d:74:b5:6d:d0:ed:58:51:
                    3f:f6:22:03:85:ab:aa:0c:0f:dc:0a:41:28:28:5e:
                    f7:74:5d:53:1b:f4:68:09:83:4a:02:7f:38:e9:b4:
                    5c:5f:36:a8:99:16:ef:70:b0:42:e1:e1:1e:ea:d6:
                    b2:8e:69:8c:7b:2c:af:23:09:5d:ca:8b:24:ce:93:
                    e8:96:18:08:47:a0:83:5f:fd:ff:ee:f9:12:0d:7c:
                    85:3b:7f:70:9d:2b:95:d1:f0:06:1a:18:5a:fc:df:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:60:5D:F8:BC:96:39:D1:8B:3E:60:7F:85:A3:F5:73:4C:04:8A:BA
            X509v3 Authority Key Identifier:
                keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:2d:02:dc:d8:c8:1e:c4:33:36:6f:b9:6a:4e:dd:24:03:
         7a:e0:f4:3b:81:25:44:1d:05:dc:d7:0b:4d:fd:9c:0e:44:42:
         b7:9a:01:8c:5e:28:53:44:db:9c:2a:08:34:65:2d:5c:f4:e2:
         a0:7b:5b:6d:f3:23:6c:88:5a:7c:e3:0b:0b:fa:e7:00:91:cc:
         f8:83:ff:f1:8a:01:9f:9c:10:0f:5a:d0:fe:e6:ac:75:9a:a1:
         2c:ca:57:5c:fa:53:d0:2b:e8:de:a0:05:32:fa:07:af:f5:a3:
         1d:b3:90:1f:7d:59:07:f8:b4:2e:84:21:4b:7f:4b:0d:0a:c4:
         ab:5d:05:0b:39:49:79:a6:59:15:b6:f6:e9:9c:c2:ad:7e:89:
         22:c5:cb:01:f6:f6:de:53:4e:98:50:1b:49:11:f3:ea:09:3b:
         80:67:75:51:82:c0:d3:46:c1:74:0e:f6:ed:84:f3:20:87:77:
         42:b2:47:a5:63:67:b0:de:93:83:c0:0e:5d:57:9c:25:87:93:
         85:de:04:c8:09:e3:32:4d:11:ea:c4:e0:85:41:83:4b:a6:a4:
         7d:35:de:8c:9a:ad:8d:1f:14:22:d7:1e:49:64:6d:65:5c:64:
         6d:6e:e5:aa:05:f4:32:f9:79:ab:31:d9:af:19:fc:4f:3b:39:
         c6:fc:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:33 2026 by rpki-client