Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
File:                     ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft (raw, json)
Hash identifier:          opQfOV8X304xTv6znEmyxyJvnwGrRl1Y386qjuzlfQE=
Subject key identifier:   B8:96:AD:0A:68:D0:03:A8:76:3E:C2:CE:05:D4:97:5F:EF:AD:E2:81
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Certificate issuer:       /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial:       019EBF918F5EE3969EC6FF41792656705F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
Manifest number:          67
Signing time:             Sat 13 Jun 2026 06:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:48 +0000
Files and hashes:         1: NmfGAB9g6IwfbTf5IGeRlUzzLK8.roa (hash: nTmZ/2NC+LsTf/mvJ/ayjnPfWSnwWzWFoHlvAvwIR94=)
                          2: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl (hash: BzTXAqiOfFkfy/rm1V41FpQEg3ZnqLoHXiePduqZN/s=)
                          3: tY2WtQaeJpuUmJI8VN0JtvLm7nM.roa (hash: KjixT4XxmdU3bVJwP3k9mRsSDgi6HnBSPdfTCDjkwQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:8f:5e:e3:96:9e:c6:ff:41:79:26:56:70:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
        Validity
            Not Before: Jun 13 06:00:48 2026 GMT
            Not After : Jun 14 06:00:48 2026 GMT
        Subject: CN=b896ad0a68d003a8763ec2ce05d4975fefade281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:a4:9f:68:d7:55:25:92:e0:86:d4:ac:1b:
                    a3:c2:35:a2:bb:d8:7c:b0:6f:25:e4:46:89:d2:0a:
                    9f:ca:fb:0b:fe:8e:32:24:16:cf:c8:3e:c1:21:60:
                    c8:fb:89:c1:d2:cf:8e:07:e1:9d:28:3b:82:6d:cf:
                    bc:9e:dc:3c:16:b0:6f:87:b3:7d:10:db:46:6c:0c:
                    52:9f:40:91:ae:7d:86:3c:b6:9f:b9:d4:9c:4e:74:
                    f5:78:af:47:76:ce:f4:c1:a5:d2:e4:e2:bd:b5:0d:
                    49:f7:76:21:ce:8c:0d:bf:04:53:e6:35:76:6b:b3:
                    1b:15:df:96:3d:2d:42:b2:bb:89:04:d8:c8:41:36:
                    f5:b8:50:a8:cc:30:e3:fb:00:cb:ce:a5:6a:d3:37:
                    43:9f:87:ad:45:ce:d0:cf:35:21:4a:1e:74:83:43:
                    85:4c:d1:fa:5c:9d:d1:8e:d9:a1:27:ba:e2:c8:1f:
                    79:d2:78:07:dd:9b:6b:8c:d7:3c:1c:80:e0:93:81:
                    05:f9:b1:8a:d8:d8:de:bf:dc:45:7e:be:0c:02:ec:
                    3a:38:2b:af:a0:e0:c6:8d:98:ce:b5:98:18:33:11:
                    27:c5:e2:64:7b:d4:3c:7e:a7:0c:19:05:14:fa:c8:
                    e7:04:08:0a:23:7e:2f:5e:82:9b:8b:fd:97:36:e8:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:96:AD:0A:68:D0:03:A8:76:3E:C2:CE:05:D4:97:5F:EF:AD:E2:81
            X509v3 Authority Key Identifier:
                keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:f4:bd:41:aa:f3:78:94:57:fa:c0:cb:ce:7a:3e:64:1e:
         d4:b9:16:ee:25:a2:7f:b8:0c:a3:b0:76:8f:bb:fb:ac:ef:c5:
         34:2d:3f:27:01:fd:58:7f:f4:7d:51:c0:74:b4:64:69:08:d7:
         94:32:0b:29:c7:6e:62:2b:0d:c8:9a:98:37:da:9e:ba:f1:29:
         46:2a:00:f4:a3:d3:7d:33:ba:a1:0e:65:bb:f4:c7:26:9c:2f:
         fe:0a:b5:3b:80:b4:12:0b:1f:01:ba:49:f2:4c:36:47:d3:8f:
         53:f2:26:6c:ca:8f:0a:70:2d:37:49:0c:9c:08:72:c4:c8:ee:
         81:c1:39:bd:b0:da:04:72:d4:ec:0e:5b:9e:b4:4e:06:15:8c:
         44:cd:7d:53:33:96:d0:27:aa:92:61:3c:7c:08:03:c6:41:f6:
         89:ee:5d:78:fc:6e:aa:9b:8b:f4:87:71:ba:db:f5:d3:03:7b:
         bc:41:cb:38:5f:1c:ac:00:67:a3:f2:a9:f2:72:1c:83:87:df:
         5a:14:47:89:9b:cc:ed:9f:57:1c:7e:18:85:5a:7e:d3:11:4e:
         00:0b:5c:f0:fb:38:f8:eb:b1:85:7e:2a:62:5c:83:f0:53:e7:
         6f:8f:c2:dc:db:1b:9d:68:5f:5c:d5:ac:ca:3d:d8:81:16:6e:
         59:16:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:46 2026 by rpki-client