Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File:                     zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier:          sXejRPwUPNO/y/9ehNWgAvc4XOGLxpeAVo1kvozJXNM=
Subject key identifier:   76:5C:88:73:87:25:8F:5A:2E:48:F7:9F:7D:2A:39:50:5C:E7:3E:10
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer:       /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial:       019E92EF7BBB0A755E3A25719D1C34FD52BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number:          12C1
Signing time:             Thu 04 Jun 2026 14:00:28 +0000
Manifest this update:     Thu 04 Jun 2026 14:00:28 +0000
Manifest next update:     Fri 05 Jun 2026 14:00:28 +0000
Files and hashes:         1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
                          2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: q7LmBq2GtAlVjcBoL9WWi7bRK2PjGfsMXW38Gi+Wm+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:ef:7b:bb:0a:75:5e:3a:25:71:9d:1c:34:fd:52:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
        Validity
            Not Before: Jun  4 14:00:28 2026 GMT
            Not After : Jun  5 14:00:28 2026 GMT
        Subject: CN=765c887387258f5a2e48f79f7d2a39505ce73e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:89:6c:fe:00:3e:69:44:c5:9b:da:5a:94:
                    0e:ab:31:64:39:8d:4c:f2:f0:70:7c:a8:9a:5c:9b:
                    45:13:34:7c:27:75:7b:b1:da:3c:1d:f3:e6:f9:d2:
                    38:63:55:62:a6:dc:12:b0:77:46:5c:7f:47:7c:1c:
                    0c:f9:8f:e0:a8:f5:0d:75:11:99:d5:25:48:1a:ff:
                    58:34:83:31:c7:9b:d8:5a:4b:e8:25:11:ce:7a:54:
                    1c:21:cd:fa:e0:66:c8:33:93:44:e6:47:b2:e9:49:
                    d5:2a:f6:a7:96:1f:29:9d:52:ec:86:55:7b:03:25:
                    42:30:14:d0:f3:9c:87:31:1d:b7:6f:5a:51:97:54:
                    40:40:6e:a5:f0:ff:ff:72:be:19:04:a8:f9:f3:e4:
                    ff:fe:0f:bc:12:e0:c8:04:be:be:76:87:74:d2:34:
                    ff:ed:41:e6:cf:61:91:02:11:1a:6c:4a:6f:ff:95:
                    be:de:35:69:35:95:fb:aa:a0:71:67:fe:26:03:22:
                    79:a3:b7:0a:be:ef:94:ea:64:42:30:12:0e:28:67:
                    2b:21:4a:84:22:7d:01:05:1c:58:c3:f1:e4:8c:cb:
                    00:9a:9f:de:bc:5e:11:70:cc:ba:e4:61:80:13:eb:
                    e7:e1:50:ee:00:f9:2d:2a:af:94:e9:3a:aa:d5:8e:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:88:73:87:25:8F:5A:2E:48:F7:9F:7D:2A:39:50:5C:E7:3E:10
            X509v3 Authority Key Identifier:
                keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:8e:bf:45:31:ba:61:11:61:31:1b:6b:d3:b7:06:76:67:
         4f:57:c9:f8:29:b6:35:54:06:d8:d1:69:ec:76:29:5d:9e:13:
         6b:00:96:21:3e:9a:a0:c9:42:47:c8:3b:0c:83:f5:8d:8e:e4:
         8f:14:17:4e:b5:67:ed:bc:58:1a:da:fa:b0:b6:ee:86:dc:de:
         48:2a:88:83:46:6e:c4:8f:16:40:8d:20:8d:cd:12:bb:21:0b:
         b2:68:f0:89:20:e6:85:98:d6:8b:6b:5f:14:4a:b1:48:0f:b2:
         b1:de:00:fc:42:73:71:50:1a:f8:43:7e:0a:a9:d1:47:d3:f5:
         83:c5:ac:5c:d8:80:9d:61:5d:8a:8e:79:c0:34:87:be:a8:36:
         21:c2:55:e0:3d:c2:6f:c7:87:91:67:65:42:bb:6b:5c:5b:55:
         91:50:e6:99:6c:77:30:be:e6:d6:28:2f:66:9f:6b:64:6e:86:
         a1:ab:d8:f2:5d:24:21:7a:28:d3:71:d2:90:40:3e:dd:67:43:
         9f:0a:14:24:84:55:60:2c:80:a1:43:63:ed:c2:14:2d:f2:cb:
         65:a6:02:59:6a:31:ad:8a:b3:30:4e:87:9c:4c:3b:56:13:26:
         d0:4b:47:4f:b5:22:65:53:d5:88:16:fa:32:88:da:cb:4c:42:
         ee:7a:4d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:24:34 2026 by rpki-client