Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File:                     ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier:          S3AQ3TJDDdrzV732a7+SkDm64RibLvZ5PDlK1GEEioI=
Subject key identifier:   59:35:9E:55:A7:E9:1A:FE:29:7A:A6:71:76:53:3E:99:20:57:E1:75
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer:       /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial:       019EBE482D998B6800A21CC8BCCD30C56F5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number:          0224
Signing time:             Sat 13 Jun 2026 00:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:01 +0000
Files and hashes:         1: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: l5fKK2fqL6X2/xz1DgB7NNOBF3uIZpB/1hNz8BVEyEQ=)
                          2: ePdfcmEly5Dl0aA1ewubTdRxJ3I.asa (hash: iM3b8PFgdGY/6U0w7mAZ45rKC6QWI2ztw48nHOY/7P8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:2d:99:8b:68:00:a2:1c:c8:bc:cd:30:c5:6f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
        Validity
            Not Before: Jun 13 00:01:01 2026 GMT
            Not After : Jun 14 00:01:01 2026 GMT
        Subject: CN=59359e55a7e91afe297aa67176533e992057e175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:55:ab:43:66:04:e8:f1:1b:76:bd:52:3e:
                    ec:29:d2:60:7c:f2:96:b4:c5:c5:4d:03:71:8f:8a:
                    16:11:76:4b:70:1c:38:27:86:2e:83:65:f8:d4:64:
                    96:9c:3d:dc:d8:ce:85:88:8f:08:84:68:49:b0:62:
                    62:be:81:f3:a3:9a:c1:11:dc:44:65:11:d7:de:18:
                    0b:da:ab:8e:3e:8e:41:b2:0c:9a:16:a9:36:e8:74:
                    ee:b0:5c:40:bf:c7:59:69:ce:09:0c:20:ae:8c:d7:
                    40:69:73:f8:cb:7f:87:22:a8:f5:cc:c5:8c:21:e5:
                    5d:08:b0:0b:4c:94:79:61:e7:75:6b:ed:64:a6:12:
                    4e:be:c2:15:a5:d6:4e:d8:75:8c:13:56:74:2d:ee:
                    8e:41:46:b6:20:1c:54:24:8d:c6:71:a1:6c:1d:33:
                    dc:6b:8f:13:51:4e:a7:08:62:10:99:17:ec:79:32:
                    16:1a:60:4f:e5:d3:b4:12:f2:dd:04:d8:e6:6a:2e:
                    26:12:49:a5:ea:fc:00:e7:f9:dd:53:d9:db:b1:d7:
                    33:6c:30:ba:1a:66:a3:d2:9e:59:20:8d:61:79:cb:
                    59:e5:c9:43:95:85:61:c7:3f:11:d1:c4:02:76:f7:
                    c4:5e:d7:7d:c8:e6:33:2a:ec:67:61:3e:42:d3:5b:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:35:9E:55:A7:E9:1A:FE:29:7A:A6:71:76:53:3E:99:20:57:E1:75
            X509v3 Authority Key Identifier:
                keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:02:53:53:32:b7:aa:75:ba:9d:1d:8d:c1:01:d3:16:9d:
         68:b0:11:3c:e9:95:2a:18:45:87:b7:40:34:81:b1:d8:1f:c7:
         61:45:cc:d8:ef:07:d9:4b:9c:cb:ce:7f:26:bc:3c:80:3d:1b:
         36:14:c5:d7:93:57:15:cb:41:87:6b:ea:44:b3:d8:7c:0b:52:
         33:80:4e:5d:8c:30:fc:9f:a9:a4:8a:fc:ed:1b:a8:9c:86:4c:
         1b:a9:2d:81:09:72:53:04:f8:99:5d:1f:3b:46:0d:d3:41:0b:
         5f:e9:d2:02:58:68:17:f7:ad:31:46:2f:20:36:f6:be:9d:18:
         44:be:e2:d3:25:42:7f:81:aa:c2:e2:ea:62:73:c7:9d:31:fc:
         91:a2:65:02:ab:6c:a0:d9:56:15:ed:fa:fa:14:6f:ac:a0:24:
         b6:96:fd:3b:d1:65:93:89:6c:f8:4e:57:9a:a6:83:2f:ca:08:
         98:6d:f3:ba:a7:c9:bf:c1:49:71:93:f2:00:3c:a9:fe:e9:49:
         df:07:43:14:83:fe:7a:ba:64:46:5a:c4:28:35:eb:b6:62:ea:
         ce:f2:db:0b:65:b4:14:67:38:54:cf:4c:91:4d:4c:5c:f7:5b:
         1f:41:da:27:f1:95:c4:63:ce:ec:13:28:86:bc:17:7d:d7:e4:
         fc:4d:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:26 2026 by rpki-client