Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File:                     ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier:          eL2Wfq3JjHc+NJQPHU/lF0Bb3Xrl6Vynqd4AaaU1sjc=
Subject key identifier:   70:37:CC:09:7D:CF:AD:2B:ED:26:C2:C4:64:BB:C5:15:58:1E:CA:68
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer:       /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial:       019EBEED0E62B69B943BB99DB027F2761622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number:          0DC1
Signing time:             Sat 13 Jun 2026 03:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:07 +0000
Files and hashes:         1: 1-8yART7xM2-_6XMTd_NQPcz65zM.roa (hash: tQW6oVAcsw1dq1koaqtzJ35SlN0zgIfaKPB7+0DEfrg=)
                          2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: 1rL3k8nEI4lLhfNQFQQGR5B+59umuYlm+n4XcaLtl4A=)
                          3: zv8htVuLlM7L27gWdlqS584Hu_g.roa (hash: aUcg7/4honTLftFLDXOy/acZ6va/bYgkctanVBZKlS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:0e:62:b6:9b:94:3b:b9:9d:b0:27:f2:76:16:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
        Validity
            Not Before: Jun 13 03:01:07 2026 GMT
            Not After : Jun 14 03:01:07 2026 GMT
        Subject: CN=7037cc097dcfad2bed26c2c464bbc515581eca68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:34:1d:50:0f:e0:56:80:e3:47:00:90:94:
                    0b:96:a2:92:1c:15:75:c5:51:59:79:e0:af:2d:39:
                    b2:00:d7:55:d9:c4:68:d4:aa:57:3a:51:ca:d6:10:
                    8d:6c:da:ad:c3:ab:64:fd:86:44:10:41:c9:50:1c:
                    1d:b6:82:29:08:3d:8f:61:21:4a:c6:7f:74:56:85:
                    c9:4c:7b:1f:b4:f3:47:e5:9b:b1:6c:7a:36:61:fd:
                    46:e6:ef:0a:31:26:7d:2f:bb:ac:f3:9b:0d:c0:cb:
                    6c:19:bb:3a:c7:bb:11:55:ba:d8:a0:c8:06:05:bd:
                    89:e6:f2:b6:62:4c:91:65:44:82:4f:57:45:1a:b7:
                    ca:49:83:2a:a4:07:99:0a:c9:85:f7:8e:68:59:03:
                    6f:e8:9c:c9:f8:78:b7:5f:bc:d3:de:28:98:88:25:
                    23:d7:4e:27:f1:3b:20:a5:b7:77:33:7e:96:9e:d7:
                    6c:b4:a2:1a:00:4f:31:85:36:d2:dd:37:5d:c4:4c:
                    5c:38:a6:3a:4c:71:0a:b6:4d:b3:dc:20:98:96:44:
                    00:9a:f3:aa:a4:a4:15:ea:bc:d7:0f:3f:de:a8:0e:
                    5b:dc:9e:ba:33:b1:d6:e4:0a:97:98:40:c6:41:2e:
                    fe:ec:b6:7f:e9:d2:51:1c:cf:ff:ab:fb:d7:62:3e:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:37:CC:09:7D:CF:AD:2B:ED:26:C2:C4:64:BB:C5:15:58:1E:CA:68
            X509v3 Authority Key Identifier:
                keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:e4:50:a8:f1:bb:c3:cc:78:88:48:94:f1:7b:8c:2d:42:
         8c:4b:c4:ce:89:1f:51:8d:15:9f:b6:78:15:66:bf:97:e3:a8:
         ab:fc:3f:7e:cb:03:b1:b6:65:1d:e3:b6:92:56:4d:21:02:8a:
         23:db:c5:6e:f9:31:d1:62:f2:50:95:20:50:7d:52:94:71:57:
         69:2d:d0:67:4a:6c:37:13:e1:58:0f:06:b2:5b:3e:3e:62:58:
         8d:6b:6d:90:63:17:0d:9c:71:d6:9f:68:79:85:72:73:c8:9c:
         c0:f3:8a:8b:21:b0:ab:63:1a:1a:00:8f:96:e4:6b:c9:de:2e:
         34:10:e1:f0:da:76:b6:98:cd:c8:aa:ae:e4:f5:93:a6:c5:35:
         32:fe:d1:36:9b:7d:e5:09:0e:d3:94:ad:42:c6:82:e7:e0:4a:
         e8:06:6a:cb:3b:b9:c3:81:28:12:bf:c4:d7:f4:27:b0:09:af:
         34:d8:b4:e3:47:43:f8:c8:89:5d:23:ef:79:c8:b9:9b:8e:96:
         95:65:07:f5:f2:0d:93:d5:ce:ed:27:a2:5c:ef:03:2b:20:71:
         94:a0:b0:56:11:11:50:75:82:17:58:2a:60:46:77:19:7b:fa:
         95:f4:7c:50:f6:eb:3d:57:07:d7:c0:22:7f:82:70:2e:cb:57:
         42:b6:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:52 2026 by rpki-client