Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File:                     ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier:          uKHBB0VbHECwhyUhIswII3feftl69gTbfzt/F2Ji2MY=
Subject key identifier:   83:CE:B1:96:C5:FD:3D:3A:D5:27:8B:00:A1:5A:DE:52:1F:60:E6:19
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer:       /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial:       019EBA6B579DB0D8F9E9A02DC361B3D61F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number:          0A77
Signing time:             Fri 12 Jun 2026 06:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:57 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:57 +0000
Files and hashes:         1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
                          2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: aOklnXgXEmXqYUOxNv73rSbNxQvBbMrq13A6JnCkYeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6b:57:9d:b0:d8:f9:e9:a0:2d:c3:61:b3:d6:1f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
        Validity
            Not Before: Jun 12 06:00:57 2026 GMT
            Not After : Jun 13 06:00:57 2026 GMT
        Subject: CN=83ceb196c5fd3d3ad5278b00a15ade521f60e619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:1f:c8:b7:53:36:7e:1a:03:ea:f7:16:93:
                    4d:59:c7:41:2b:81:f3:97:86:24:98:c7:21:7e:32:
                    1b:48:81:a6:64:7a:4b:21:5d:e6:46:6b:5a:57:b5:
                    0b:a6:5d:cc:96:2d:5c:3e:bc:87:2c:03:77:a8:53:
                    76:56:fc:49:20:36:fd:8e:d9:27:7f:0d:14:51:e9:
                    32:82:89:90:99:57:4a:15:bd:5e:66:09:3e:00:af:
                    55:d8:d8:d2:28:f9:2b:ac:88:71:98:69:f8:be:20:
                    86:bc:8d:30:28:a3:48:48:f1:f4:cb:2c:cf:d0:0b:
                    f2:4b:6b:7f:3e:eb:b3:5d:7f:81:76:27:18:f3:0b:
                    ff:91:47:2d:41:79:c6:90:88:a0:f2:18:6c:ea:40:
                    91:e8:0c:e0:6c:39:00:51:8c:d3:80:ac:a4:90:cd:
                    4e:47:0e:b0:32:26:e6:9b:d7:9b:5b:2a:a2:fb:6d:
                    c5:a0:a6:f5:b1:3d:d3:08:ab:55:d4:ac:76:97:95:
                    61:98:3b:05:0e:36:54:ee:b9:06:88:a1:5f:24:fc:
                    e9:eb:5e:f0:2f:fc:5a:20:ea:a5:f1:92:8d:3d:5d:
                    92:aa:c4:4a:78:c3:8e:6b:bd:8e:fa:bb:9b:45:1d:
                    83:a7:de:51:75:e2:08:aa:71:71:46:56:4f:2f:10:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CE:B1:96:C5:FD:3D:3A:D5:27:8B:00:A1:5A:DE:52:1F:60:E6:19
            X509v3 Authority Key Identifier:
                keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:a9:27:23:15:04:30:85:47:f5:a5:8f:ed:f4:3f:51:35:
         00:29:6f:fb:c7:17:14:b7:fe:e1:b4:58:27:26:67:b2:04:d4:
         ef:c2:c8:d7:a1:2d:ed:fb:c4:9a:1a:36:f5:0e:17:21:f6:b0:
         c7:c5:38:b3:56:3a:42:b9:a9:b9:87:ce:06:e6:d6:85:44:fc:
         9e:4f:e7:8d:2e:58:2d:0e:e4:fc:7d:e7:75:80:96:61:4e:c8:
         db:31:5c:6a:1e:2e:66:5a:28:e4:9a:bd:9a:0e:3b:e7:86:04:
         f0:05:0d:9f:b9:8e:f1:f4:9a:4c:0d:66:fc:f1:59:ec:c2:d8:
         97:75:6e:51:33:56:5e:11:a1:45:25:d0:10:c3:c1:b3:c6:8b:
         03:b4:44:fa:ee:92:c4:a6:ae:60:01:50:15:2e:ab:00:e1:32:
         f1:d2:18:e4:c6:29:29:c8:38:15:f8:e4:db:85:fe:07:1f:28:
         7f:3e:de:48:d9:d3:e8:52:39:88:64:83:47:87:31:b1:3d:4c:
         b2:cb:bc:28:77:c7:94:9e:fb:6c:28:75:fb:d5:42:d2:0d:36:
         5b:5f:67:0a:37:e4:7f:a7:a7:22:ce:54:db:de:af:ea:70:86:
         08:ee:de:25:cf:7f:2d:ec:f2:14:b3:74:3f:78:e5:4d:62:ce:
         83:eb:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:46:12 2026 by rpki-client