Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File:                     zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier:          PM5g81uexQXTKwHEtEICHq39EMzBznAz8xpPgD7d03g=
Subject key identifier:   75:72:EA:18:21:68:04:09:8F:62:C4:E3:5A:80:CA:D1:C2:54:B5:5D
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer:       /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial:       019EC1B75538AD94148EEC00EAF86193CD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number:          1411
Signing time:             Sat 13 Jun 2026 16:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:18 +0000
Files and hashes:         1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
                          2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
                          3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: /+YK/dvs8+Efln0Twoyf4/WJuBNpfnPB6/72kr0gLa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:55:38:ad:94:14:8e:ec:00:ea:f8:61:93:cd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
        Validity
            Not Before: Jun 13 16:01:18 2026 GMT
            Not After : Jun 14 16:01:18 2026 GMT
        Subject: CN=7572ea18216804098f62c4e35a80cad1c254b55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:38:87:b7:a0:2a:85:af:59:8c:a7:f6:f1:
                    b0:7c:95:b5:2e:cc:b2:f6:83:f9:c0:fe:cb:0f:d4:
                    ad:0e:a4:29:2c:12:b2:29:0a:e1:97:f2:21:07:d0:
                    19:25:e7:c1:d2:4f:51:8f:e2:16:7d:5d:95:78:99:
                    1b:95:dd:16:b8:5c:0b:34:f5:e6:ab:7f:62:54:31:
                    3d:98:84:c4:85:e7:28:64:17:2c:5d:cd:aa:9b:c7:
                    1f:1b:73:b6:d1:da:a8:b1:a5:e5:96:b3:ce:3c:d3:
                    fd:3f:61:4a:d7:99:3c:23:2b:f7:37:7d:ff:b0:fe:
                    77:1f:63:16:38:32:50:58:ff:8e:c0:dc:3d:d3:d4:
                    c0:c9:c2:17:85:f1:af:54:34:a7:3c:3a:40:39:94:
                    e9:12:19:5b:e1:a8:0b:45:fe:dc:45:c8:ab:e6:22:
                    ac:22:28:60:a3:ce:04:7e:f8:7c:c2:c4:f6:d6:5a:
                    9b:24:9f:46:fe:3f:22:17:54:fc:d6:3b:6d:aa:20:
                    6a:5c:d1:f9:3c:1e:9c:49:1c:58:d8:f5:03:8d:4f:
                    d6:d7:d9:bf:17:78:c9:3d:50:e4:28:3d:85:a3:6f:
                    96:2e:4b:e5:46:2f:23:f6:9a:ad:8e:81:84:15:c8:
                    5e:20:cf:ca:69:03:95:25:1e:f1:08:75:38:61:8e:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:72:EA:18:21:68:04:09:8F:62:C4:E3:5A:80:CA:D1:C2:54:B5:5D
            X509v3 Authority Key Identifier:
                keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f5:10:b4:66:e6:d3:68:fa:bd:6b:70:46:50:ee:a4:be:da:
         3f:fc:7a:fe:73:ff:72:d1:7d:e8:85:02:89:c9:22:85:0d:41:
         8a:b3:8d:f7:2f:ad:9a:6e:bc:5e:4a:19:1a:85:c0:51:fb:2c:
         54:92:5b:c2:a8:36:54:44:e2:d4:30:87:4c:b2:d8:0f:d8:15:
         fa:fe:f1:e6:8a:f8:f2:1b:1c:fb:c2:32:1d:dd:ec:31:31:f2:
         a5:4d:5a:36:1b:b2:f8:0b:f2:33:5d:12:e2:ad:12:4b:d1:14:
         d7:4c:b3:eb:6e:47:ef:33:cf:71:1f:fd:47:e4:6c:7e:b7:1b:
         cb:08:5e:fe:30:54:62:d7:73:a3:3b:f0:1c:a7:ff:57:c7:3c:
         12:a6:29:7f:19:f7:06:2f:9d:ec:d3:1b:23:04:89:fa:21:20:
         f8:67:8b:3f:b7:e1:8f:d3:04:c9:4d:8d:b0:78:5f:18:db:f8:
         f2:14:b7:b8:3c:ed:3d:ac:4e:20:a1:29:cc:d2:9e:d5:b9:f8:
         3e:b3:9d:1c:20:60:23:fb:a5:95:19:61:5a:5a:79:2d:90:66:
         b8:e6:59:8f:58:f2:28:a1:dc:2a:f3:9d:48:36:47:27:f4:18:
         d2:c5:d1:51:a0:e8:d8:00:00:93:58:c9:ab:9f:bf:3c:2c:80:
         06:29:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:11 2026 by rpki-client