Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File:                     zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier:          n0sTPW7iGEIIoP/YvqWYXgcXWop03EWRsEOXWwgbqu8=
Subject key identifier:   5F:7D:87:B3:FE:14:5E:51:C3:FA:47:2A:0A:F7:16:57:E0:9E:13:96
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer:       /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial:       019EC337C2D40E823393DC583C16CBE0D26F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number:          090C
Signing time:             Sat 13 Jun 2026 23:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:11 +0000
Files and hashes:         1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
                          2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
                          3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: uTun9sSNsY5IF1teWN1GfGVf26ccLpe0likUnFOOAas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:c2:d4:0e:82:33:93:dc:58:3c:16:cb:e0:d2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
        Validity
            Not Before: Jun 13 23:01:11 2026 GMT
            Not After : Jun 14 23:01:11 2026 GMT
        Subject: CN=5f7d87b3fe145e51c3fa472a0af71657e09e1396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:45:5d:29:1c:c6:27:87:98:79:4e:a0:03:
                    3f:e0:42:07:14:a7:98:08:13:df:ed:00:b1:76:f2:
                    b4:23:fa:13:81:cd:93:57:e0:97:7e:47:11:b6:a1:
                    78:47:8c:7f:3a:0f:e1:92:a0:ea:52:da:81:d0:19:
                    d3:73:28:8b:0b:26:27:7a:a2:18:1a:c4:fc:1a:42:
                    1c:d4:6d:c3:ad:e9:55:79:36:23:fc:de:ee:d0:16:
                    b1:d6:11:86:83:7c:3f:78:e5:1e:52:c3:8c:ae:62:
                    a9:e9:4c:63:90:c7:c7:78:05:43:da:18:a9:00:67:
                    bd:9e:5a:fb:b2:cc:ce:5a:95:fd:dd:a8:4d:7f:db:
                    ff:55:e0:de:2e:90:99:6d:71:0f:36:80:b3:e5:c7:
                    bc:76:08:74:b7:e2:69:9a:f0:27:73:33:66:b0:22:
                    a1:02:ca:07:d6:30:17:99:83:b5:f7:95:16:02:78:
                    e7:fd:24:7a:72:5e:38:23:4f:13:07:03:82:51:e4:
                    89:08:b8:31:35:d1:ef:13:1e:4f:c1:51:b7:54:e5:
                    83:c4:98:f1:51:54:9f:b6:2d:92:54:ab:af:dc:e1:
                    1f:8a:b7:06:2e:0d:b6:95:ba:03:13:05:34:1f:c1:
                    ea:9f:c8:7f:91:d8:be:ec:ea:d6:b0:80:34:d8:67:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7D:87:B3:FE:14:5E:51:C3:FA:47:2A:0A:F7:16:57:E0:9E:13:96
            X509v3 Authority Key Identifier:
                keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:55:48:cb:dd:16:f8:dc:57:05:bb:a5:bf:f3:46:0b:81:19:
         6f:08:7f:79:43:ad:ae:36:57:fd:3f:00:49:ef:12:10:3b:ec:
         4f:80:83:ad:26:38:df:1a:d4:cf:b5:8d:ed:7e:c4:6b:32:a5:
         75:60:c2:da:97:0d:82:19:51:38:9c:f4:64:0e:5c:0d:76:87:
         0e:06:af:fe:75:2b:4a:d5:78:ad:db:ea:4b:93:5d:ef:a6:29:
         07:9b:7e:02:04:14:60:be:25:71:d5:4a:5f:8b:47:ee:13:8f:
         d3:3c:9d:6a:eb:e7:a8:ca:a8:10:22:03:28:83:56:4c:b3:cc:
         26:1e:23:c1:63:b8:d6:db:e8:4b:1f:42:24:98:10:d4:89:c7:
         bb:6d:da:d8:4d:dc:b3:e4:9d:c4:9a:0e:78:be:f9:31:78:ec:
         ae:e4:d1:b2:07:40:f4:b1:41:a7:63:72:e2:20:b9:ad:b8:52:
         7d:4b:07:26:86:4e:c7:ef:4c:e5:a6:15:a6:f0:6c:56:af:a7:
         3a:79:cf:bd:99:da:9c:60:c0:d8:c4:c5:53:22:e7:84:d1:bf:
         f8:d7:03:55:14:6b:23:2a:85:21:89:b6:4b:e7:6a:2f:2d:7e:
         78:e6:c5:4f:83:27:89:7f:ad:fb:c0:9d:49:87:1e:b5:f0:c9:
         92:2d:29:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN8LUDoIzk9xYPBbL4NJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk
MGRjOTcwHhcNMjYwNjEzMjMwMTExWhcNMjYwNjE0MjMwMTExWjAzMTEwLwYDVQQD
Eyg1ZjdkODdiM2ZlMTQ1ZTUxYzNmYTQ3MmEwYWY3MTY1N2UwOWUxMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxINFXSkcxieHmHlOoAM/4EIHFKeY
CBPf7QCxdvK0I/oTgc2TV+CXfkcRtqF4R4x/Og/hkqDqUtqB0BnTcyiLCyYneqIY
GsT8GkIc1G3DrelVeTYj/N7u0Bax1hGGg3w/eOUeUsOMrmKp6UxjkMfHeAVD2hip
AGe9nlr7sszOWpX93ahNf9v/VeDeLpCZbXEPNoCz5ce8dgh0t+JpmvAnczNmsCKh
AsoH1jAXmYO195UWAnjn/SR6cl44I08TBwOCUeSJCLgxNdHvEx5PwVG3VOWDxJjx
UVSfti2SVKuv3OEfircGLg22lboDEwU0H8Hqn8h/kdi+7OrWsIA02GemAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF99h7P+FF5Rw/pHKgr3FlfgnhOWMB8GA1UdIwQY
MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It
NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2
LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlVIy90W
+NxXBbulv/NGC4EZbwh/eUOtrjZX/T8ASe8SEDvsT4CDrSY43xrUz7WN7X7EazKl
dWDC2pcNghlROJz0ZA5cDXaHDgav/nUrStV4rdvqS5Nd76YpB5t+AgQUYL4lcdVK
X4tH7hOP0zydauvnqMqoECIDKINWTLPMJh4jwWO41tvoSx9CJJgQ1InHu23a2E3c
s+SdxJoOeL75MXjsruTRsgdA9LFBp2Ny4iC5rbhSfUsHJoZOx+9M5aYVpvBsVq+n
OnnPvZnanGDA2MTFUyLnhNG/+NcDVRRrIyqFIYm2S+dqLy1+eObFT4MniX+t+8Cd
SYcetfDJki0pdg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:31 2026 by rpki-client