Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File:                     ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier:          ydbT9NI+JPnu2ZcohMsfWZfhfJ7723GoH9ErB4JGPXM=
Subject key identifier:   57:D0:D1:41:54:57:92:46:29:31:A2:81:23:06:16:82:76:75:48:BD
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer:       /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial:       019EC5CA69639032D47290B720ABF5DD8B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number:          17AB
Signing time:             Sun 14 Jun 2026 11:00:37 +0000
Manifest this update:     Sun 14 Jun 2026 11:00:37 +0000
Manifest next update:     Mon 15 Jun 2026 11:00:37 +0000
Files and hashes:         1: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: yM7jha55Ma//fEMSLhVbHz2C7wv39d+DD3FNbVgLVN0=)
                          2: c0zEfFDSZZWFy-vBS9NWpwPjwoE.roa (hash: Degy9LDZTNrQEBY/nXvirHbXKz42WXh/PcwFt1G3pj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 09:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c5:ca:69:63:90:32:d4:72:90:b7:20:ab:f5:dd:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
        Validity
            Not Before: Jun 14 11:00:37 2026 GMT
            Not After : Jun 15 11:00:37 2026 GMT
        Subject: CN=57d0d141545792462931a28123061682767548bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b0:bb:03:45:6b:9e:66:76:95:92:cd:7a:
                    d0:36:a2:d3:9f:26:e2:60:7e:3c:95:12:b2:c6:6c:
                    31:f9:b5:5d:ea:da:e4:81:17:d3:6b:de:02:35:a2:
                    7a:22:8e:94:65:c0:af:1d:d8:a8:9a:2b:9a:23:7e:
                    0f:bd:e2:89:ca:52:f8:1d:cb:e9:3e:c0:bd:c6:fb:
                    ff:a0:e5:9b:9d:42:ad:d7:53:2b:f0:ea:0e:b8:c2:
                    91:8b:a8:35:1e:3f:a0:69:3b:3a:1c:91:14:0b:48:
                    dd:3e:fb:cc:b4:c3:59:f8:34:08:56:03:f7:13:03:
                    9c:0b:d1:56:60:5e:b8:1b:1e:bd:62:7b:69:13:b3:
                    ca:c6:78:89:94:60:1c:73:71:cd:db:8b:36:08:8c:
                    09:0c:71:e9:5a:84:50:3e:78:02:98:2c:22:9b:ab:
                    65:2d:c3:ac:b6:d0:f2:e4:ad:60:a5:72:8c:3e:52:
                    2d:4a:b4:0c:cf:43:31:b3:c5:12:df:1c:7a:6a:c8:
                    67:cf:41:b4:ef:b1:e2:c3:a0:88:00:a5:75:61:09:
                    4f:c1:2e:77:12:e5:1c:eb:15:c4:b5:76:d8:d2:36:
                    ed:fa:ae:41:1b:47:c1:0c:30:b3:9a:8a:a1:6c:7e:
                    f4:da:2c:ad:f7:0b:7e:b3:9e:64:5d:7a:69:d9:04:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:D1:41:54:57:92:46:29:31:A2:81:23:06:16:82:76:75:48:BD
            X509v3 Authority Key Identifier:
                keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:75:f4:2c:c4:ec:90:d2:ac:20:ed:02:66:50:3f:d9:ad:
         37:e0:3e:e6:10:a0:b0:e3:f6:b8:7c:0b:e4:f2:15:66:97:60:
         bb:5d:68:06:ea:78:26:ec:7b:74:67:2c:f6:77:23:91:42:d3:
         2c:d5:ac:d4:54:b0:39:f5:85:b3:bd:6e:18:72:88:38:37:a1:
         4c:cd:93:90:0c:92:b6:a3:58:6e:7d:54:01:be:a8:81:13:78:
         ae:78:5c:3e:8e:99:a8:ae:6f:11:5f:be:ae:19:70:13:74:04:
         f1:1f:36:0f:29:fd:ac:c1:23:51:e7:01:ac:f8:21:52:af:a9:
         3a:25:e5:fa:8b:73:e1:ec:ef:1d:ea:5a:ff:7f:39:9b:a7:d6:
         09:08:72:5c:74:5e:4c:46:04:95:64:d4:03:e4:07:42:b0:17:
         49:f3:28:3b:f8:e5:94:d9:35:8a:9e:83:95:99:17:69:94:59:
         4b:05:7e:aa:ab:bc:fa:da:e0:0a:54:a0:f1:43:d1:79:a5:a4:
         ae:49:7a:1c:30:a6:76:5a:97:cd:5c:ed:3d:30:8f:53:1e:57:
         ef:86:cc:31:7d:97:5b:b1:df:ec:f9:81:4d:84:b2:be:a0:a4:
         ee:43:11:cc:c8:9d:a7:1a:b8:64:cf:06:2c:57:35:b7:3b:30:
         dd:41:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 15:58:45 2026 by rpki-client