Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
File:                     ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft (raw, json)
Hash identifier:          NrJNph36iE8DswlfKY1MrnaQ8MxS8RbGzgwP56RIn0I=
Subject key identifier:   B0:16:38:64:13:CA:4D:09:70:4C:42:0C:E2:F8:CC:A5:7F:A0:DE:D2
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Certificate issuer:       /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial:       019EC111FFDED33426EDF42291F9C16BAF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
Manifest number:          D4
Signing time:             Sat 13 Jun 2026 13:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:42 +0000
Files and hashes:         1: Stua-bI85s_Qjcis9xg3M4eoMT0.asa (hash: P9r1AQ6O3K6feHqh5gbLCxcbf2Aonowkyk/Ljn2V6bU=)
                          2: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl (hash: TURXmt/FI5vyKh+UWJG35Lg1quEsuvqZQeZAn2fcnAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:ff:de:d3:34:26:ed:f4:22:91:f9:c1:6b:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
        Validity
            Not Before: Jun 13 13:00:42 2026 GMT
            Not After : Jun 14 13:00:42 2026 GMT
        Subject: CN=b016386413ca4d09704c420ce2f8cca57fa0ded2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:4a:fa:58:f8:7f:05:39:43:fb:c8:1e:91:
                    2e:cb:48:76:99:1f:4a:00:f5:1c:be:f7:30:84:9c:
                    3a:2a:9c:ed:77:86:d5:29:22:75:0c:29:f4:f0:ed:
                    48:5b:41:27:b6:56:60:4e:2d:04:90:53:da:30:ab:
                    26:74:19:00:b4:58:24:a7:1f:46:8a:1f:46:09:eb:
                    63:61:74:2a:3e:f8:59:c2:7b:e9:62:5d:3e:83:fb:
                    06:92:ce:e2:4c:b0:ca:86:70:b8:c9:e7:47:35:ae:
                    68:d8:26:1e:60:58:cc:1c:24:47:32:1e:fc:ef:e4:
                    34:e0:95:72:2d:c0:33:01:17:1b:fc:e9:a7:a5:3c:
                    8a:0e:99:2c:09:5b:3f:e0:10:60:da:2d:bd:67:9a:
                    8e:7b:03:9e:d0:e8:03:41:58:32:03:3c:5f:45:70:
                    1e:0d:14:64:51:5f:4b:33:5d:6b:be:c3:5a:db:94:
                    fd:4e:05:02:d5:1c:74:cd:c9:aa:67:c8:91:bc:df:
                    c6:f0:63:fd:85:fe:d3:39:89:3f:5b:be:c9:bf:2b:
                    ed:2c:b3:2b:ac:4e:25:db:45:ab:0a:02:ac:c5:1b:
                    81:49:96:76:48:74:7f:d4:7b:0a:0a:a5:c7:d3:78:
                    7e:3a:d4:f8:d5:3e:e8:ce:41:8b:d3:52:f0:90:9d:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:16:38:64:13:CA:4D:09:70:4C:42:0C:E2:F8:CC:A5:7F:A0:DE:D2
            X509v3 Authority Key Identifier:
                keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6e:60:44:b0:30:03:b3:57:8b:e3:7a:12:b0:a0:1a:ad:92:
         a2:d4:d7:f2:c5:b8:ea:41:30:db:a3:94:f1:cd:8d:e6:95:bc:
         27:a3:19:1a:9b:7a:36:af:5e:a5:71:59:89:10:80:42:07:05:
         5f:b2:71:2f:f1:30:b3:4b:29:59:96:92:34:9c:d1:ca:2e:41:
         d5:74:0f:46:31:b9:eb:de:c3:18:55:2f:c8:66:9d:fb:24:a6:
         4e:ba:9e:98:c6:74:e9:e3:48:d1:1d:0a:a4:b3:36:50:a8:5b:
         5c:6c:64:dd:41:61:74:51:05:57:3a:f5:9a:ac:33:7c:17:b4:
         39:d0:3c:d2:21:4f:d3:91:8b:a5:01:3e:3f:01:13:a2:3d:79:
         a5:6b:16:14:e4:71:f2:25:5e:54:44:82:e2:f7:82:65:8a:88:
         60:17:e3:3c:b4:62:68:1c:8f:67:9f:c3:9f:fd:8d:75:c8:c4:
         21:c4:32:95:38:39:3b:9d:6f:09:20:1b:ea:f3:d3:df:37:83:
         a6:af:3e:8a:45:98:e0:0c:f7:27:66:3c:94:81:8f:71:3e:0a:
         7b:23:fc:d4:f7:01:e4:ae:c0:cf:77:2f:ae:46:77:0c:e1:42:
         62:b0:b7:4b:32:2b:e3:9a:e8:94:95:fa:b1:b8:47:e8:50:c2:
         64:24:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:54 2026 by rpki-client