Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File:                     zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier:          bz/+bLS90b87jMVjTVj5vd6z3ibJGjoFagdsnzZ7ONg=
Subject key identifier:   3F:6F:25:9E:37:5F:D5:5D:31:DE:3C:C5:57:9E:6C:63:A4:DB:6E:34
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer:       /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial:       019EC3009EF2835F6433111838B859E67404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number:          FB
Signing time:             Sat 13 Jun 2026 22:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:58 +0000
Files and hashes:         1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
                          2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: E2qWt6zHw/4KWD/t0hOW23jCI+x1eZ/5M5FwmMnFDg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:9e:f2:83:5f:64:33:11:18:38:b8:59:e6:74:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
        Validity
            Not Before: Jun 13 22:00:58 2026 GMT
            Not After : Jun 14 22:00:58 2026 GMT
        Subject: CN=3f6f259e375fd55d31de3cc5579e6c63a4db6e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:66:8c:e6:5a:a9:15:6b:75:17:f0:19:ab:
                    1a:e4:60:36:a3:35:1a:70:e6:33:aa:f2:18:d4:d4:
                    33:8b:a1:ec:93:4d:b2:30:d5:e4:8d:96:79:63:a5:
                    d0:b9:bc:5c:3e:d1:10:18:8c:f1:03:48:af:d2:b3:
                    2f:a9:50:dd:07:87:dd:92:02:e8:ec:55:64:7b:b6:
                    e9:cb:e1:03:8a:28:19:19:c4:da:1e:27:5c:95:e6:
                    e5:99:5e:13:ea:7f:f4:9e:ee:f0:6c:0a:b9:c4:44:
                    18:7b:75:9c:b3:3e:44:c2:ca:73:5c:ed:c6:b6:d3:
                    41:15:b3:80:fe:35:70:9b:59:fe:87:fb:58:54:93:
                    3b:72:ab:47:24:ed:ff:88:7b:0f:37:9f:67:9b:28:
                    1a:c3:17:88:87:0d:4a:44:e0:71:71:84:0c:0d:71:
                    52:f1:6b:04:74:58:ba:39:65:8c:2d:38:68:e9:16:
                    6d:06:fb:1b:ad:db:fa:c9:78:7e:f4:e0:5b:0a:da:
                    2d:dc:83:b2:aa:02:f5:4c:cf:31:5d:2d:5c:6b:82:
                    c9:63:2a:ad:01:0b:86:2c:c3:7e:fb:0a:b2:cd:26:
                    a9:06:df:f9:0e:bb:90:9e:2f:42:d5:75:04:b5:75:
                    de:9b:68:93:75:13:4a:2f:7b:8d:61:28:f6:66:d6:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6F:25:9E:37:5F:D5:5D:31:DE:3C:C5:57:9E:6C:63:A4:DB:6E:34
            X509v3 Authority Key Identifier:
                keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:8e:6e:86:2d:8c:e4:58:d2:61:4b:13:82:a6:5b:1c:2b:
         09:a7:db:57:2b:b5:67:dc:c8:8e:22:5f:44:29:f6:18:64:a3:
         1d:86:11:99:75:39:e9:e4:4c:78:57:7f:d0:07:45:be:97:28:
         b9:58:47:3a:39:12:ea:9c:ce:03:ee:35:6a:68:bc:74:67:84:
         46:e2:51:1c:e9:3b:ae:2d:ee:de:4b:77:4e:12:44:e8:1b:5b:
         34:e6:18:1a:ad:a9:8d:c2:67:fb:13:d7:89:97:27:ca:72:84:
         b0:27:b7:cf:35:7f:98:ca:fd:9b:c5:e9:54:d2:15:a7:fa:7e:
         0a:a0:13:ab:2a:e9:ac:ae:d0:c6:91:c8:3c:d3:fc:9f:c3:6a:
         cb:70:32:be:31:29:87:8c:c0:78:a6:b8:fd:45:0c:dd:0d:79:
         56:5a:0a:2a:49:6f:07:16:e9:4b:ed:64:c6:27:2d:a0:1f:cb:
         f1:33:17:a3:e4:73:a3:f7:3e:2f:4e:88:ae:10:03:17:88:1c:
         9b:36:43:88:07:e0:c0:15:74:0f:67:a6:f8:0f:71:ce:8f:c8:
         05:47:54:24:c5:b9:8e:50:33:26:cd:b5:5d:63:01:a1:b2:9f:
         df:94:5b:cf:21:a7:fa:1c:65:ee:62:cd:cb:7b:0a:ac:56:d3:
         21:ac:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:39 2026 by rpki-client