Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File:                     zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier:          4mPGmPFjaPMhsa7IVoMLk6yoFyIT56QRscdku2QMcL4=
Subject key identifier:   8A:36:FE:62:0F:D3:BF:D6:90:1B:52:D7:06:17:D5:22:54:89:AD:25
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer:       /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial:       019EC1495E22970D5601DDAD238DFF58AEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number:          090B
Signing time:             Sat 13 Jun 2026 14:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:11 +0000
Files and hashes:         1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
                          2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
                          3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: rIsZ1UUYbN0fswVEKAZNy6mRRrmctk0UsftOo6wyMOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:5e:22:97:0d:56:01:dd:ad:23:8d:ff:58:ae:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
        Validity
            Not Before: Jun 13 14:01:11 2026 GMT
            Not After : Jun 14 14:01:11 2026 GMT
        Subject: CN=8a36fe620fd3bfd6901b52d70617d5225489ad25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:22:a5:9c:7f:2c:96:c7:fb:ad:52:d8:cc:
                    60:1e:50:87:42:c3:65:9e:16:70:a5:b2:2d:1e:33:
                    22:6f:d3:7a:6a:a2:65:01:3d:7e:ad:9f:f7:9a:88:
                    91:b9:4e:a5:09:82:23:46:3e:b8:e3:89:9e:06:ed:
                    7e:15:15:04:d8:7f:53:70:79:e1:8d:ae:68:1a:2a:
                    fd:84:3c:4f:00:99:8e:c0:99:64:f9:5d:65:e3:f0:
                    a2:bd:1b:70:33:b3:89:7b:d7:e7:ea:94:d9:b6:a3:
                    1a:51:74:c4:ba:b1:f9:08:19:80:0c:18:ac:8c:f2:
                    6c:91:d5:b0:c8:ed:14:20:26:e2:aa:50:8a:34:f2:
                    81:a4:01:c9:c3:6b:37:30:16:47:bb:cd:df:ad:2f:
                    a3:64:d9:3d:35:ce:8f:a0:bb:97:17:49:1d:fe:44:
                    82:ae:3c:fb:18:6c:29:81:30:43:04:2d:f5:bf:18:
                    57:f2:1c:55:78:35:85:fc:cd:d8:7a:41:87:95:03:
                    4c:bd:98:9f:61:c1:21:25:54:52:20:52:f9:8d:31:
                    6d:23:7f:d2:89:0f:d9:cf:51:6f:32:63:c6:55:82:
                    be:2b:54:6c:11:73:44:f4:41:77:1e:cc:d3:01:46:
                    64:99:21:19:95:b9:64:ee:35:47:b7:b9:fd:27:80:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:36:FE:62:0F:D3:BF:D6:90:1B:52:D7:06:17:D5:22:54:89:AD:25
            X509v3 Authority Key Identifier:
                keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:26:08:4d:0a:17:25:52:c7:48:c9:17:04:aa:49:8d:ef:
         72:2e:c8:b1:c5:ce:91:17:bd:51:b0:2e:96:c4:9f:f3:35:a4:
         1e:7b:d5:47:8d:54:af:d2:13:5a:d2:f5:d0:8f:ea:92:e5:bf:
         03:84:c5:bb:e4:d8:3c:71:3f:c1:4e:2a:0d:66:37:77:d0:3c:
         10:8d:43:67:d0:75:40:c2:e2:f8:65:82:5c:f4:32:67:80:ce:
         7c:b1:17:b7:77:dd:74:8b:8e:c0:e8:6b:5c:34:eb:39:7f:6e:
         29:82:37:b7:9d:6a:5d:d8:fe:fe:8a:47:32:74:60:de:f9:3e:
         89:fb:45:f9:f9:3d:b9:f4:24:87:df:3c:9d:8b:c1:37:78:b1:
         7d:d3:bc:a8:11:43:22:e4:64:a6:95:36:58:3c:20:79:d0:79:
         86:af:97:dd:d2:05:00:04:cf:86:dc:b2:91:f4:f7:cd:ca:ab:
         74:23:21:2d:c4:49:ac:68:17:15:33:5f:63:8b:5b:9b:c5:bd:
         1c:b4:cb:4a:97:5f:a1:5d:bc:89:ea:5c:22:eb:01:fc:cc:48:
         36:07:54:ed:a8:da:88:42:5c:95:1c:22:9e:8d:86:8b:e3:7b:
         c9:64:5b:24:40:29:1e:aa:50:6d:a9:a3:48:66:67:be:e9:79:
         d0:a0:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:08:21 2026 by rpki-client