Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File:                     Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier:          IZTaXXF6xQkDsGF5TCR5r/q0/ospesoyl+lbN+XIwyo=
Subject key identifier:   1A:E1:BB:7C:2A:CF:8E:88:8C:B8:B8:E6:72:95:AB:06:E6:B1:69:27
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer:       /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial:       019EC2922BA10093413B9BBE92C15F79A572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number:          0551
Signing time:             Sat 13 Jun 2026 20:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:19 +0000
Files and hashes:         1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
                          2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: dv4FJVQoQ1wWZW9YwobFIjk3Jv6UnZ0fWCAcEHDW1uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:2b:a1:00:93:41:3b:9b:be:92:c1:5f:79:a5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
        Validity
            Not Before: Jun 13 20:00:19 2026 GMT
            Not After : Jun 14 20:00:19 2026 GMT
        Subject: CN=1ae1bb7c2acf8e888cb8b8e67295ab06e6b16927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:ff:48:ea:eb:8e:3d:e8:b6:55:72:d4:c1:
                    fa:5f:c6:dc:48:6c:0d:cc:2f:c1:db:48:a4:10:b5:
                    65:fc:1c:02:a5:0a:7a:57:45:19:db:c0:f8:bc:4b:
                    87:69:d2:c8:94:a2:e4:28:62:8e:b1:3f:4e:d9:12:
                    d2:39:9e:5e:0a:76:ad:12:6f:e4:f9:8a:a3:fd:06:
                    a5:9c:b3:42:9d:d0:30:fe:d5:96:d6:9a:70:7a:90:
                    7a:71:0d:ee:65:01:81:0f:39:76:69:56:f1:59:77:
                    97:d3:74:2d:6d:c1:ed:7a:28:3e:61:1d:9a:3d:db:
                    a0:ad:ec:82:19:22:ba:e6:6a:22:1e:ba:8f:77:4e:
                    10:04:09:e1:9a:21:7d:51:91:98:f9:de:96:9e:04:
                    d8:46:9a:67:37:31:5c:2e:4e:1b:fa:b9:4b:0b:50:
                    79:8a:18:6e:ec:06:dc:6b:93:cf:17:82:e3:8e:53:
                    e3:19:29:b3:c6:66:86:8b:b8:e9:ce:d8:9c:3a:33:
                    a1:93:56:f8:5e:1d:35:38:62:d3:0e:fe:b7:22:10:
                    2a:c3:ca:d6:b1:4c:da:fb:e4:e2:1f:2c:f6:56:1d:
                    79:9d:1e:26:93:06:b5:3d:28:ee:bd:97:de:29:f4:
                    7d:ac:14:3b:2d:5c:8d:44:78:6a:7f:d9:39:ec:77:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E1:BB:7C:2A:CF:8E:88:8C:B8:B8:E6:72:95:AB:06:E6:B1:69:27
            X509v3 Authority Key Identifier:
                keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:1d:cf:67:ff:19:7f:ef:11:0e:3e:66:36:b5:b2:ab:d3:
         4c:48:26:bd:b3:b6:c2:20:a3:6a:d4:46:f2:c8:94:24:b1:8a:
         2a:29:c7:33:fc:00:99:0c:99:4f:20:d7:e2:47:b5:ac:74:5e:
         1d:6e:df:e6:d4:ee:a7:50:dc:f6:e5:16:fa:78:4e:0e:d1:48:
         1c:d6:86:c1:67:e4:cc:13:9e:9b:47:0a:64:b6:4a:78:06:4b:
         de:13:67:56:5c:c5:b1:e9:be:f1:f7:2d:76:75:15:7a:30:2a:
         8a:f0:0e:e1:91:f8:de:e2:36:35:76:70:cf:1c:37:15:b3:46:
         68:bc:b1:a5:f9:53:00:8a:7b:3d:dd:84:15:5a:3b:1d:ed:6d:
         7f:76:60:37:d2:55:de:a1:d7:fe:13:76:a5:42:5a:21:29:c8:
         bd:b8:2f:40:55:62:e2:a1:f6:60:bf:d2:ee:c0:17:c9:ba:10:
         d8:6e:0a:d7:fa:cd:71:47:74:c9:6e:2a:84:9d:09:e2:a8:60:
         a5:b0:06:e2:65:73:c9:43:5f:5f:2e:b4:7c:7f:61:f2:f0:80:
         d3:38:c7:ed:23:73:0d:35:fe:20:58:e6:b8:a4:15:05:58:09:
         f6:93:84:6c:8c:ce:3c:5e:a7:45:8b:8e:07:f5:b9:9e:d2:95:
         ff:a5:e2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkiuhAJNBO5u+ksFfeaVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj
NDE4NDMwHhcNMjYwNjEzMjAwMDE5WhcNMjYwNjE0MjAwMDE5WjAzMTEwLwYDVQQD
EygxYWUxYmI3YzJhY2Y4ZTg4OGNiOGI4ZTY3Mjk1YWIwNmU2YjE2OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCr/SOrrjj3otlVy1MH6X8bcSGwN
zC/B20ikELVl/BwCpQp6V0UZ28D4vEuHadLIlKLkKGKOsT9O2RLSOZ5eCnatEm/k
+Yqj/QalnLNCndAw/tWW1ppwepB6cQ3uZQGBDzl2aVbxWXeX03QtbcHteig+YR2a
PdugreyCGSK65moiHrqPd04QBAnhmiF9UZGY+d6WngTYRppnNzFcLk4b+rlLC1B5
ihhu7Abca5PPF4LjjlPjGSmzxmaGi7jpzticOjOhk1b4Xh01OGLTDv63IhAqw8rW
sUza++TiHyz2Vh15nR4mkwa1PSjuvZfeKfR9rBQ7LVyNRHhqf9k57HfYhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrhu3wqz46IjLi45nKVqwbmsWknMB8GA1UdIwQY
MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt
YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy
LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjwdz2f/
GX/vEQ4+Zja1sqvTTEgmvbO2wiCjatRG8siUJLGKKinHM/wAmQyZTyDX4ke1rHRe
HW7f5tTup1Dc9uUW+nhODtFIHNaGwWfkzBOem0cKZLZKeAZL3hNnVlzFsem+8fct
dnUVejAqivAO4ZH43uI2NXZwzxw3FbNGaLyxpflTAIp7Pd2EFVo7He1tf3ZgN9JV
3qHX/hN2pUJaISnIvbgvQFVi4qH2YL/S7sAXyboQ2G4K1/rNcUd0yW4qhJ0J4qhg
pbAG4mVzyUNfXy60fH9h8vCA0zjH7SNzDTX+IFjmuKQVBVgJ9pOEbIzOPF6nRYuO
B/W5ntKV/6XiDg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:48 2026 by rpki-client