Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File:                     Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier:          j5u3V3AxuI3panEEzpD+9xLjVFYcA6ntGBCL93Mlii8=
Subject key identifier:   0B:02:36:06:3C:61:1F:DD:D8:F3:F7:12:64:DC:12:A3:CD:29:61:CA
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer:       /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial:       019EC1EE231DC0CF9AB6A7AE94E0EC853237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number:          16AC
Signing time:             Sat 13 Jun 2026 17:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:09 +0000
Files and hashes:         1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
                          2: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
                          3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: iQtquBLH9Hv3LhePIYpTPLyjalylw11uVgVwRja+DOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:23:1d:c0:cf:9a:b6:a7:ae:94:e0:ec:85:32:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
        Validity
            Not Before: Jun 13 17:01:09 2026 GMT
            Not After : Jun 14 17:01:09 2026 GMT
        Subject: CN=0b0236063c611fddd8f3f71264dc12a3cd2961ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:b2:32:a2:df:42:f9:31:ef:58:97:48:60:
                    c5:c8:c7:6f:59:24:13:4e:b7:46:85:dc:9b:fc:82:
                    25:e9:a7:be:19:1b:a9:f1:4f:34:a8:61:ab:04:b7:
                    f3:8a:55:48:9a:3f:af:5e:08:bd:e7:68:8b:63:b6:
                    95:a4:a5:99:1b:b8:85:7e:db:80:a5:32:43:37:6b:
                    dc:64:ef:a0:e8:de:60:3d:c3:95:1d:9a:92:55:bc:
                    aa:7f:8a:40:91:be:7f:15:00:de:82:7b:22:fd:9b:
                    9b:37:f9:97:47:ee:c5:c3:06:3f:13:75:1e:b1:79:
                    df:43:cc:e9:81:0e:81:f7:24:ed:50:48:dd:62:cf:
                    41:64:4c:85:72:52:6e:31:8d:3a:41:09:2d:37:83:
                    45:33:10:fd:c2:76:41:e7:df:58:d5:44:c1:07:92:
                    a3:94:47:c2:af:56:c1:c3:8d:7f:25:71:0d:c4:78:
                    b5:d8:6f:c2:3a:45:72:ce:f2:67:88:10:fa:eb:53:
                    a4:aa:5e:e2:29:57:ca:f7:77:7f:fc:68:32:11:10:
                    b2:8c:9d:2e:84:c3:5f:2f:d0:da:ab:c6:8a:bb:39:
                    60:10:26:42:ff:70:1e:aa:a8:2b:22:4f:d0:17:87:
                    5e:cf:29:f7:08:03:d4:36:01:ba:95:ab:9c:54:14:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:02:36:06:3C:61:1F:DD:D8:F3:F7:12:64:DC:12:A3:CD:29:61:CA
            X509v3 Authority Key Identifier:
                keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:35:ab:b8:ca:2f:65:d9:9b:be:6b:d9:03:77:81:d3:b8:02:
         01:df:58:f3:a7:49:f1:ae:a6:68:5a:d1:aa:70:17:b0:da:a2:
         1a:b6:ad:87:42:36:9d:3d:7a:2b:cf:79:0f:be:56:0e:18:f3:
         17:01:fc:d9:60:3b:7c:70:4c:a4:74:84:84:0a:76:24:de:2f:
         00:3e:66:46:c8:bd:63:f3:66:d4:4e:45:b7:51:f2:b9:2a:ad:
         31:0d:66:b1:ae:2d:0e:8c:d6:97:d5:73:d8:1f:a6:4b:2a:31:
         e1:69:ab:5d:f9:6d:34:d0:77:50:07:9c:04:78:7f:95:67:ee:
         1a:8e:b2:29:aa:13:88:3b:ce:7e:91:3e:41:ba:01:35:87:da:
         dd:a5:2b:9f:2c:cb:2d:a7:a7:aa:0c:07:c4:10:ef:28:b9:a4:
         6b:e6:0f:a2:f9:d7:0f:a4:1d:c7:fa:12:a9:97:31:ac:3e:d6:
         33:78:e2:98:1b:ed:a0:7b:a6:ed:0a:11:b3:1f:d8:5e:f8:83:
         41:07:d9:06:e7:20:d0:94:59:6c:34:78:8a:3c:1e:66:10:82:
         0e:7c:fd:b0:31:9c:0f:ec:75:d2:0a:5b:18:1b:a3:27:db:1f:
         f9:69:ed:19:36:06:af:f0:9d:4f:d7:db:30:a1:c5:f1:66:72:
         5b:ba:6d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7iMdwM+atqeulODshTI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjYwNjEzMTcwMTA5WhcNMjYwNjE0MTcwMTA5WjAzMTEwLwYDVQQD
EygwYjAyMzYwNjNjNjExZmRkZDhmM2Y3MTI2NGRjMTJhM2NkMjk2MWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6CyMqLfQvkx71iXSGDFyMdvWSQT
TrdGhdyb/IIl6ae+GRup8U80qGGrBLfzilVImj+vXgi952iLY7aVpKWZG7iFftuA
pTJDN2vcZO+g6N5gPcOVHZqSVbyqf4pAkb5/FQDegnsi/ZubN/mXR+7FwwY/E3Ue
sXnfQ8zpgQ6B9yTtUEjdYs9BZEyFclJuMY06QQktN4NFMxD9wnZB599Y1UTBB5Kj
lEfCr1bBw41/JXENxHi12G/COkVyzvJniBD661Okql7iKVfK93d//GgyERCyjJ0u
hMNfL9Daq8aKuzlgECZC/3AeqqgrIk/QF4dezyn3CAPUNgG6laucVBTXTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsCNgY8YR/d2PP3EmTcEqPNKWHKMB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTWruMov
ZdmbvmvZA3eB07gCAd9Y86dJ8a6maFrRqnAXsNqiGrath0I2nT16K895D75WDhjz
FwH82WA7fHBMpHSEhAp2JN4vAD5mRsi9Y/Nm1E5Ft1HyuSqtMQ1msa4tDozWl9Vz
2B+mSyox4WmrXfltNNB3UAecBHh/lWfuGo6yKaoTiDvOfpE+QboBNYfa3aUrnyzL
LaenqgwHxBDvKLmka+YPovnXD6Qdx/oSqZcxrD7WM3jimBvtoHum7QoRsx/YXviD
QQfZBucg0JRZbDR4ijweZhCCDnz9sDGcD+x10gpbGBujJ9sf+WntGTYGr/CdT9fb
MKHF8WZyW7ptgg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:16 2026 by rpki-client