Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File:                     Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier:          dFwoXlIrdcNZ4fJD51bH9tb5yKicNmC2Pp+I1T7qRvQ=
Subject key identifier:   A7:2A:8F:7F:2F:63:1D:C2:BE:8B:12:A3:77:3F:9E:E8:4E:88:21:4B
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer:       /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial:       019EC3379785F3CE96041F7796F5B4808A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number:          0808
Signing time:             Sat 13 Jun 2026 23:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:00 +0000
Files and hashes:         1: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: IZ88AnoVhUeLDDCAn7FiQ9YK/nLce1sXDryqEm/d7HM=)
                          2: zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa (hash: adtaF+5W4MxrQ+0iffQsTYlJHGFBvciDfETz57Ec0LI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:97:85:f3:ce:96:04:1f:77:96:f5:b4:80:8a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
        Validity
            Not Before: Jun 13 23:01:00 2026 GMT
            Not After : Jun 14 23:01:00 2026 GMT
        Subject: CN=a72a8f7f2f631dc2be8b12a3773f9ee84e88214b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:28:c7:bf:dd:0b:65:c7:eb:9f:2a:92:33:
                    01:f0:42:84:c0:19:c2:af:4a:db:d6:cb:1d:18:31:
                    28:44:cb:ee:ee:65:54:29:d0:bf:46:b7:61:19:08:
                    b7:59:4e:80:d8:bc:ac:97:ff:60:36:85:b9:c2:9d:
                    84:af:03:ef:7b:b4:7e:29:d4:fa:02:03:c9:7a:dd:
                    1f:2b:80:35:c5:b0:7d:c6:fa:be:f7:b2:58:cc:6b:
                    09:a2:92:6b:57:1c:4f:70:cc:0d:1b:10:08:dc:5d:
                    e0:76:1f:80:b6:38:89:84:3b:60:ea:86:79:e8:1b:
                    69:1d:a1:d9:ae:d2:23:8d:b0:62:b5:df:a5:2d:4e:
                    fb:c4:8b:fa:c9:7f:b7:df:7d:59:35:86:a3:c3:2e:
                    7a:f8:58:84:35:a8:7a:fa:38:f5:ee:18:cc:9f:cf:
                    c0:2a:bf:78:7f:e2:6e:ac:f6:9f:6b:b8:65:fb:0f:
                    42:c6:de:6d:49:42:75:b1:63:fe:e0:be:e7:78:5e:
                    ff:91:84:62:09:e7:c0:f3:ce:75:51:55:eb:9d:e2:
                    33:3b:04:22:8a:2d:f6:e1:d9:7c:c0:b5:0f:a3:92:
                    0d:a1:b7:c2:21:fe:5d:54:c6:a7:61:a9:d3:99:a4:
                    27:90:43:2e:02:b8:04:a6:15:28:d8:b8:e2:29:88:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2A:8F:7F:2F:63:1D:C2:BE:8B:12:A3:77:3F:9E:E8:4E:88:21:4B
            X509v3 Authority Key Identifier:
                keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1b:5f:21:2a:70:84:89:db:96:a5:9b:a8:9f:bc:20:60:75:
         6e:12:da:cc:84:5e:8a:1d:95:4f:5c:dc:1e:28:1b:4d:d6:3f:
         f2:48:c7:c5:5b:d5:7a:3e:01:4f:30:88:e2:ba:a2:5d:9c:e6:
         92:54:0d:ec:0f:1b:13:0e:b1:f2:a4:a7:f3:a9:fe:89:93:f1:
         2d:9e:5d:ca:60:22:a8:ef:7b:ef:b7:0b:a9:7e:a9:d3:57:80:
         43:f8:f4:12:c6:b2:2f:c5:44:8d:01:2d:cd:c1:02:e9:a2:71:
         55:7d:6d:66:f7:5d:a7:b1:dd:03:35:f6:86:e4:63:30:1c:c4:
         f4:ac:52:91:db:c2:15:f4:fb:b7:5a:1a:9a:9e:b7:ef:c0:d7:
         51:9f:8d:26:c4:3b:94:92:60:99:ee:e5:0a:ce:f5:11:af:26:
         f3:eb:88:7a:10:79:c8:3e:da:7b:a9:8a:f2:62:7f:f8:0d:28:
         ee:61:06:57:3a:fb:1f:aa:23:2d:5a:56:64:84:54:13:20:df:
         b8:49:0c:02:ee:cc:7b:c8:a4:af:76:3b:9a:bc:12:93:9c:a9:
         58:fc:cd:85:0a:49:9f:e6:75:ad:9e:72:d7:b9:cc:76:77:52:
         69:c6:f4:9b:38:b1:80:a0:5e:e1:0d:f9:16:3c:c2:0c:eb:15:
         24:c2:db:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:45 2026 by rpki-client