Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          uy8sHmp7TRD5UjMan5hOD5OlEpWJ381WB0lDRGZVyz4=
Subject key identifier:   4A:B4:10:02:BB:1B:5F:54:01:0B:AE:9A:EF:2F:D2:48:4C:15:7E:25
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019EC1123538F2FD81B0EF438728B57D7C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          11E5
Signing time:             Sat 13 Jun 2026 13:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:56 +0000
Files and hashes:         1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
                          2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=)
                          3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: xZ45RKIgkQRXzDudADlImegzeFGE7p1LLb4oWICvML0=)
                          5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
                          6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
                          7: vUUgJIohg5SQneif_sUKDZs-FYo.roa (hash: O9F4ICaD35Dayn0PCg4Uohxoxcc4CWJ4HvxFQPiHF6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:35:38:f2:fd:81:b0:ef:43:87:28:b5:7d:7c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Jun 13 13:00:56 2026 GMT
            Not After : Jun 14 13:00:56 2026 GMT
        Subject: CN=4ab41002bb1b5f54010bae9aef2fd2484c157e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:57:95:07:2f:74:6f:2c:86:21:bc:f0:90:
                    d9:85:47:5f:67:fd:9d:f7:4b:11:de:b1:43:90:a9:
                    79:d0:16:43:6a:7c:1f:7b:55:1d:71:c6:0a:58:e7:
                    65:ac:07:02:d4:96:46:55:ce:bf:42:2b:1a:1c:a4:
                    64:d6:86:48:61:d3:a6:2a:d9:35:42:1b:8d:71:3a:
                    8a:6d:cc:43:4b:33:a6:55:a7:62:66:11:aa:25:d7:
                    c1:ac:10:2e:09:b9:01:96:5d:b5:82:ba:e0:9f:00:
                    47:1d:32:3f:94:a3:8c:91:a2:c7:4a:ee:a4:e6:ae:
                    e0:a1:33:f7:1a:80:6a:93:d5:a4:1c:f0:40:7f:f3:
                    83:d4:ce:26:43:b6:58:11:f9:c3:43:1e:41:7f:5d:
                    9b:9a:72:b4:46:87:46:d5:91:e0:6d:38:a4:37:eb:
                    62:f7:1c:23:14:5a:4f:01:a7:4c:26:37:06:16:48:
                    a9:0d:ec:5a:3d:56:56:b4:03:c9:d1:95:1d:f8:d2:
                    20:8f:d9:e7:61:f8:9c:15:ac:6c:ae:58:c4:9b:81:
                    25:29:3d:c4:99:3f:91:ef:4b:c1:6e:8b:98:18:44:
                    2d:cf:15:f9:ab:2c:0a:e2:02:db:d6:ab:e7:48:3b:
                    33:85:02:e6:35:e2:5e:b5:4d:88:00:f3:e3:a7:15:
                    ed:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B4:10:02:BB:1B:5F:54:01:0B:AE:9A:EF:2F:D2:48:4C:15:7E:25
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:72:3c:01:d5:a6:fe:59:a4:8b:68:8d:8b:eb:51:08:80:
         8c:25:7a:3c:bd:87:c5:25:a8:00:ff:73:c7:ab:ef:82:15:6a:
         5e:41:e0:07:9a:db:82:82:28:12:2c:73:cf:7e:b1:4b:9d:a5:
         d7:80:45:d5:0f:7f:f4:78:82:67:bc:40:e8:bf:b3:dd:e3:9a:
         58:a7:a9:60:69:da:a1:82:f1:7d:2b:58:f5:a8:22:4a:4b:de:
         05:42:2e:ad:1d:67:80:e0:71:a5:77:39:d6:c2:1d:01:72:94:
         85:37:bc:8c:62:81:59:20:ab:61:08:d9:93:d6:ff:98:d8:83:
         73:99:ac:c1:d7:93:f1:a2:7d:5e:35:c3:94:c7:dd:64:30:77:
         cd:3d:45:f1:61:6b:55:09:9f:b8:f8:e2:4b:1b:a5:61:f0:72:
         a4:7c:45:4e:54:1c:eb:be:73:ca:57:5b:f7:c5:16:58:ec:35:
         5a:f6:e5:d8:ac:8e:60:66:4e:8b:7b:ba:9b:7a:4b:aa:eb:63:
         16:62:a6:21:40:b1:4d:34:71:50:93:ec:21:18:00:a5:0f:0a:
         36:69:b9:09:84:b2:5f:64:ef:82:6d:b7:f4:24:5f:53:ec:c5:
         d6:94:ff:fc:f2:59:10:6f:d5:ec:0e:7d:fa:88:2a:11:10:ed:
         26:7d:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:25 2026 by rpki-client