Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File:                     ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier:          y7wHrJUWpP61AV+6075MVm8L+kfyNH0n5CeZBXMP2Ww=
Subject key identifier:   95:12:DE:63:08:4E:25:45:CE:CB:2A:45:4D:3E:E8:69:12:29:7E:C7
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer:       /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial:       019EC30046D94557E7EB5A85D74A5DF2E2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number:          0893
Signing time:             Sat 13 Jun 2026 22:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:35 +0000
Files and hashes:         1: YDyC5kBhNI8thKV1LynCzapFE7Q.roa (hash: QeALQ6HX+21WYDZockRGHmyT4aXfggw6UzIeai2uvuw=)
                          2: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: 0iz0vdNoWRPn2JsFQtMLd0JA+mh+uvGExBQW9BrTmts=)
                          3: uhkofDxDROlcHCvXKtjXZmbwMcM.roa (hash: VNaYu0cLAzaNZcXisiMMcDQwN9FyAi7e1kpMVNW8PJk=)
                          4: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (hash: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic=)
                          5: wOkpHSGw-U8KI9tK8aag-rxFIFI.roa (hash: eMuVT13Zj6Uew2bZcSNq7VO8ffPMy9zKzbd96LA2Eac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:46:d9:45:57:e7:eb:5a:85:d7:4a:5d:f2:e2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
        Validity
            Not Before: Jun 13 22:00:35 2026 GMT
            Not After : Jun 14 22:00:35 2026 GMT
        Subject: CN=9512de63084e2545cecb2a454d3ee86912297ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:22:ac:14:15:b5:9a:24:3f:30:46:22:a6:
                    dc:61:14:fc:91:a5:60:de:37:a5:f3:70:b0:f9:86:
                    7b:f4:0c:70:75:30:74:94:58:68:a6:42:75:b8:48:
                    2e:63:ba:d4:ca:a7:ed:c5:73:27:9b:d8:c2:71:43:
                    fd:39:df:94:5b:7e:6f:ad:de:d1:09:0c:83:e1:d7:
                    24:0f:ed:ed:06:3d:61:d7:3b:a8:4d:93:fe:57:92:
                    2b:6d:71:10:f8:69:4e:4c:10:e7:8c:eb:50:fc:a1:
                    69:98:bf:b8:de:34:7e:d4:0b:d8:e6:bd:ef:81:42:
                    3c:45:e5:89:56:9a:1f:b8:a8:8f:10:d4:18:3a:09:
                    a6:64:5d:ca:5c:cf:10:c4:ee:ed:79:84:ba:1f:dc:
                    3a:ac:7f:03:15:82:49:65:4c:66:e0:c0:e0:36:59:
                    1c:13:12:4c:0d:21:21:ad:39:2e:4d:82:5e:44:7d:
                    95:10:5b:d0:dd:65:f8:74:84:74:76:f3:58:b1:53:
                    fd:65:c9:48:9f:6d:7c:b9:24:78:b5:1c:97:d7:62:
                    1d:c9:32:67:eb:bd:08:5c:3d:c8:44:5c:38:47:08:
                    56:3c:62:06:c4:08:2d:6a:ac:e1:0a:b4:3f:be:98:
                    42:a5:9a:79:58:bf:5e:2e:6b:75:5f:8d:64:ba:1d:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:12:DE:63:08:4E:25:45:CE:CB:2A:45:4D:3E:E8:69:12:29:7E:C7
            X509v3 Authority Key Identifier:
                keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:9d:09:57:bf:0a:6e:9e:b1:aa:7e:79:7c:4c:e3:56:20:03:
         79:fd:8f:27:85:7d:bc:7b:bf:b3:1a:59:14:72:2e:fe:d5:72:
         02:91:e8:01:3f:2c:bd:24:b8:e3:d3:57:da:84:a4:68:20:33:
         7e:1a:64:c8:35:49:87:96:43:da:8e:e1:e7:d7:9c:a8:fc:5a:
         82:29:5d:6d:2c:4f:cd:20:7a:2c:4d:00:4a:b9:50:71:ee:c9:
         87:28:72:23:65:03:77:54:45:e6:d7:8b:b9:aa:e3:5e:d4:ef:
         1a:f8:ce:94:42:69:60:8d:b3:b6:90:d5:b9:ff:54:76:98:b0:
         20:0f:41:19:42:48:88:8e:27:35:f2:31:a1:45:59:d2:8b:74:
         f3:aa:6b:52:61:03:f2:44:54:a2:d5:8f:32:d0:a4:e8:b6:5f:
         f2:9f:8c:b1:17:47:2d:1a:a6:4d:c2:59:d3:5b:60:88:84:e5:
         0f:ae:b0:03:7d:dc:41:1c:18:3d:f8:87:25:d0:ea:0d:54:c5:
         c0:81:37:98:bd:7a:e1:83:d1:9d:09:04:fe:91:d1:09:8b:42:
         a4:71:2e:7d:e2:71:0a:8d:4a:17:e6:5e:7e:af:8d:79:c5:13:
         a4:59:4c:b3:ee:e4:2d:20:4a:51:32:94:a5:8e:9b:c2:33:47:
         52:48:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:03 2026 by rpki-client