Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          GwP2Av5Kmu12gsfuX+OkWTGztnhKbkU30t/WDJStW3M=
Subject key identifier:   ED:7D:7B:CF:9D:A1:A4:2E:08:5C:95:B1:EF:AD:5F:21:54:58:41:DD
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       019EC036153848B3C501BA9D0C5F8802E6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          1962
Signing time:             Sat 13 Jun 2026 09:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:30 +0000
Files and hashes:         1: LyD-byAqHkCId2X413D2X1Z2qHU.roa (hash: X3jzbRpGbv2O4J/HEOEG5KsHYAnqovf/BVNCZIBzGEc=)
                          2: NciFosUTZQjh8wuLeV_tqda00bY.roa (hash: zOA4Wef7GnD51/XhXMPfbgxKu5akVCbUSUyI9R7xcbI=)
                          3: Y8fFR3SR2JFo5SN-QHUy1g5AXnQ.roa (hash: rcBm3Sru1/9gzs1C6m5Kf+QWRSXdM9HmkBd/Rq/ayVk=)
                          4: gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa (hash: HeuNS/isx5Ir7rrhD9rHIdV2SzMR1qCm5KBXOXdXtqU=)
                          5: np_2_SKmGfgCwircPk4_KpAxetI.roa (hash: EXS4ryAU66idTchghJIvxISW9h87H73QFGZzRNJ0+zI=)
                          6: uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa (hash: xSRJcjd0eLR5MNbT/qQW4MnOH8NKSKy8VGBBsMm1Rj4=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: LQ8dkXGFqH/ODtnvUqypePFuQRRgrrBcsFRPXyE1Boo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:15:38:48:b3:c5:01:ba:9d:0c:5f:88:02:e6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Jun 13 09:00:30 2026 GMT
            Not After : Jun 14 09:00:30 2026 GMT
        Subject: CN=ed7d7bcf9da1a42e085c95b1efad5f21545841dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:67:3d:cb:b6:08:c9:6d:d9:23:c5:c1:1a:
                    45:27:56:9a:bb:20:69:24:a9:7b:d3:b5:79:6b:ed:
                    1d:59:fd:fb:2a:39:ee:41:b7:6f:a5:be:e2:22:eb:
                    a8:2d:49:a5:ec:38:54:db:82:70:c2:7a:62:8d:62:
                    ed:70:20:28:62:8e:cd:27:ad:04:0b:ec:d5:2d:f9:
                    c6:e7:4a:29:ad:b5:c4:7c:ff:64:fa:3a:89:59:63:
                    0b:6d:8d:6d:1b:25:ff:23:eb:ee:a4:85:40:33:28:
                    c6:54:e8:74:81:6f:22:9b:20:e7:7c:a8:f5:67:f4:
                    03:1e:ca:ff:cc:64:c2:b6:bb:7c:df:dc:9b:e6:70:
                    66:a4:3f:10:6d:97:70:d5:04:58:90:7b:31:6d:4a:
                    e8:40:d8:b4:b4:11:9f:cc:7d:2e:fe:6e:45:fe:7c:
                    02:68:69:b4:47:93:23:2c:5a:80:2a:e6:f8:66:e1:
                    87:67:af:1d:28:b0:c1:c8:52:81:76:7f:5a:3f:ec:
                    5a:27:52:b3:2b:30:e5:01:ad:f4:25:88:18:e4:6e:
                    d6:28:83:12:49:1b:e2:ce:55:92:21:a7:15:50:74:
                    54:4c:51:33:6c:04:5e:3a:bf:f5:eb:eb:ef:aa:19:
                    f0:c7:5b:08:bc:44:ea:fa:8d:20:09:f7:64:46:59:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:7B:CF:9D:A1:A4:2E:08:5C:95:B1:EF:AD:5F:21:54:58:41:DD
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:59:c9:00:ee:63:54:88:20:53:11:55:38:4e:24:45:b1:d3:
         3c:83:64:3b:7d:d5:5e:c1:34:11:97:ae:16:90:92:80:d8:86:
         46:ef:b0:ab:27:ec:fc:58:a4:1f:4a:4b:e9:aa:e7:c1:66:9c:
         77:b6:fa:6a:34:7e:a1:66:ec:ba:80:86:bd:0c:a2:fe:3b:d0:
         61:c1:d0:87:ad:ed:00:10:91:05:f8:07:93:be:8a:80:a5:c0:
         42:39:63:b2:08:6c:5b:98:0e:8f:3f:9a:25:fd:79:cf:56:28:
         c7:84:68:81:f6:11:e2:1d:6b:eb:2d:87:2b:cf:b4:39:b6:db:
         42:20:36:aa:75:9f:e9:7d:07:17:50:20:c5:05:f7:fa:99:cf:
         2a:09:da:42:94:4f:6a:ce:cc:62:fe:22:39:af:e2:df:8b:d3:
         2e:eb:d8:83:89:5d:d7:29:6b:80:5d:5d:18:2f:03:a3:6f:08:
         7b:a5:01:20:2d:56:22:82:ba:1b:1c:60:64:9f:99:c4:b3:31:
         ae:c1:45:78:5e:1b:f9:53:6c:30:41:17:e1:15:63:7f:cb:e6:
         69:ef:90:2d:d9:7e:71:fd:59:ff:1f:5c:6f:3e:fb:e9:96:a2:
         b0:a9:d4:03:aa:85:a5:85:62:0f:c5:a9:af:49:33:c2:42:66:
         48:eb:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:24 2026 by rpki-client