Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File:                     ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier:          offDaiI7396mPSkEi4pHtaTWNEGuD4lN81ISVCargGY=
Subject key identifier:   29:DB:CA:32:A1:7B:AC:4C:14:1E:3D:A9:D8:6F:FE:D3:76:73:83:D5
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer:       /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial:       019ED3F44BDD0ECAF6CA8B52DD5B8D295D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number:          154D
Signing time:             Wed 17 Jun 2026 05:01:03 +0000
Manifest this update:     Wed 17 Jun 2026 05:01:03 +0000
Manifest next update:     Thu 18 Jun 2026 05:01:03 +0000
Files and hashes:         1: R4biYlru54aTOhXabFWJZhdtNlE.roa (hash: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU=)
                          2: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: a3xfWm2w7FFYQ3KMvHjcqxvZsL1ZExfi72Tzj0z8+vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:4b:dd:0e:ca:f6:ca:8b:52:dd:5b:8d:29:5d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
        Validity
            Not Before: Jun 17 05:01:03 2026 GMT
            Not After : Jun 18 05:01:03 2026 GMT
        Subject: CN=29dbca32a17bac4c141e3da9d86ffed3767383d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:bb:4b:51:56:ef:9e:c3:96:30:0e:91:01:
                    1d:7e:af:44:59:9e:22:41:c3:e8:3d:a6:57:26:c4:
                    0e:aa:e2:e9:6d:82:52:27:f1:5f:5e:d0:87:e7:a2:
                    86:55:53:8b:42:a9:26:0d:c0:ea:ce:41:d1:3f:de:
                    cb:45:b5:4e:49:b5:dc:2c:69:85:a7:fd:9e:65:f6:
                    ed:c2:24:3c:63:cc:23:98:24:ab:19:4c:2a:9b:1e:
                    58:d0:19:4a:3f:a8:83:85:23:17:ad:8f:8b:a2:3f:
                    c8:17:aa:90:c7:78:73:9c:1c:d9:b4:c9:6c:b4:3e:
                    a1:79:04:ce:62:7b:af:ea:c8:c0:b6:40:f4:1d:4d:
                    38:e5:1d:9a:b5:3c:84:ea:75:dc:9b:0c:8b:34:b2:
                    50:76:7c:46:6f:5b:05:24:92:eb:8d:a6:30:b1:cd:
                    4d:d1:c8:8d:7d:ae:00:a1:57:76:a8:bf:1d:66:5d:
                    cd:53:67:47:d4:0e:c8:4c:44:1f:34:d0:ff:a3:3b:
                    a9:64:52:c8:0e:4b:2d:d3:e9:42:e8:4c:2f:f4:5e:
                    8d:e9:c6:7e:fc:04:2f:e9:26:c3:3e:b9:ce:ea:8e:
                    d6:de:95:33:5d:0a:ff:3d:c3:c3:52:be:97:a7:be:
                    d3:e7:b4:64:35:48:69:97:68:ae:47:d2:9d:15:08:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:CA:32:A1:7B:AC:4C:14:1E:3D:A9:D8:6F:FE:D3:76:73:83:D5
            X509v3 Authority Key Identifier:
                keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:de:6d:74:26:a1:ca:2f:e7:f3:f8:40:07:ae:ef:a7:79:
         32:5a:d3:57:bc:85:0b:e5:71:c8:b0:4c:da:de:82:81:50:2c:
         f5:a1:00:1e:73:ef:37:15:1f:74:87:e4:42:82:b1:f5:e5:4e:
         46:61:87:f4:f9:0e:28:ef:03:72:59:62:23:91:34:84:79:1c:
         1d:76:5d:9a:ff:5c:7e:f0:4e:67:fa:8f:64:25:4e:57:75:13:
         66:ef:4e:a6:03:29:01:23:60:1d:a2:58:70:83:02:dc:af:4b:
         11:da:dc:5f:95:b6:fa:16:da:e2:41:53:26:63:b5:e7:1d:03:
         fb:f9:3f:88:5a:56:1d:56:8b:d1:d5:bf:af:d1:91:ef:8c:cb:
         dc:df:6f:91:1d:a2:4b:d4:1e:8d:33:11:82:52:1e:20:fc:da:
         00:9b:cb:ca:5b:64:db:cb:bd:26:2b:25:9a:5b:5a:59:8c:5a:
         3d:af:36:af:31:93:ba:2b:76:78:70:65:5a:48:93:75:ee:56:
         cf:14:a4:a4:57:ec:d2:52:da:7e:c9:e0:1f:1c:8e:f5:39:6a:
         f4:5d:b5:3f:72:75:a7:93:8a:3e:7a:1e:09:b8:18:2e:25:3c:
         07:43:05:db:27:bb:44:1d:f3:7f:06:a0:67:c6:83:c9:3f:a6:
         db:24:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:36:08 2026 by rpki-client