Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File:                     zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier:          5n5wUpisXrYYajAXQY9x4YyG1aXI6Vob+Y46jzY7WCY=
Subject key identifier:   75:6E:40:A5:B1:83:EE:17:A8:B4:E1:8B:E3:90:7A:79:FA:4A:68:54
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer:       /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial:       019E917025F8EEDF75A24C77212FC7D9EE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number:          1946
Signing time:             Thu 04 Jun 2026 07:01:46 +0000
Manifest this update:     Thu 04 Jun 2026 07:01:46 +0000
Manifest next update:     Fri 05 Jun 2026 07:01:46 +0000
Files and hashes:         1: 5qgROKxHOicoj6aXRRzKoWhQEys.roa (hash: cbdLbf/a0AVWeV/g7UhTY6JncYkBe68DrZLAHz3ibQE=)
                          2: D0wGS-yddeO0xfMmRUxbHkj9wmQ.roa (hash: 1GkR1ZZ4k8rO+nd6oDot6saKoU0S85i7RRYtoQ2NVC8=)
                          3: OoheSSCa5I7EwzgFEnlfY2jnBjs.roa (hash: 4TrMNV+CUPEbrPuDX+5VWadJ22cCDdcCYltr8Dnb3+w=)
                          4: SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa (hash: uIUOOzCmCZIfAItCkWriSRWvWy1Wi25C++tLdPRufDc=)
                          5: hXDlG2G0xbowy6t6EZnHJ70Ehao.roa (hash: 3IDUKM+58lF7xSd9cxW6Agkn2PnQGt/z8nVFt8JreYU=)
                          6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: Ct9D31TphtXj3WkPAgZFPOYU9/HXFnpjKz7fvxeQODs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:70:25:f8:ee:df:75:a2:4c:77:21:2f:c7:d9:ee:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
        Validity
            Not Before: Jun  4 07:01:46 2026 GMT
            Not After : Jun  5 07:01:46 2026 GMT
        Subject: CN=756e40a5b183ee17a8b4e18be3907a79fa4a6854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:c8:de:e1:35:dc:71:30:12:81:72:fc:4f:
                    59:32:a4:50:d2:76:c1:7e:04:b9:3f:87:a9:f9:df:
                    98:69:c2:07:58:c3:57:f5:e2:4f:9a:1a:53:4d:17:
                    c6:26:0a:2d:2a:38:ae:af:12:2c:6f:c1:2a:9f:53:
                    1e:e4:66:b0:ef:e0:28:f1:a4:f0:47:8b:45:19:bd:
                    9d:aa:64:c4:f9:6e:9a:ed:47:48:f0:d2:bc:2c:c8:
                    7e:c9:3d:6b:fd:95:4c:e9:de:7e:ae:b3:93:5a:db:
                    00:e8:ae:10:15:e9:fe:17:d3:83:c6:f3:31:ce:f1:
                    8e:0d:28:eb:3a:bb:8f:5e:21:e5:2c:37:01:96:43:
                    e7:a2:cf:fc:6e:8f:4b:de:bc:fd:0f:25:7b:cb:3b:
                    4f:cc:07:e3:09:cb:d5:de:8b:43:a5:12:a4:97:03:
                    23:c5:e4:9d:e1:e0:4d:ee:5c:12:fb:8a:9e:50:d8:
                    8c:68:37:fd:18:39:17:43:93:90:82:96:ef:83:aa:
                    c1:e3:5c:f2:f8:aa:01:d9:93:a2:c7:63:47:7b:ca:
                    77:71:09:8f:26:86:91:8d:ae:e5:e2:26:bf:51:bf:
                    ad:ab:ba:7b:54:9e:8b:83:22:0b:c8:73:a9:66:a9:
                    5e:49:2f:49:38:40:27:22:b2:80:e3:7a:36:6c:94:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6E:40:A5:B1:83:EE:17:A8:B4:E1:8B:E3:90:7A:79:FA:4A:68:54
            X509v3 Authority Key Identifier:
                keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:90:c2:5e:be:03:ba:24:0b:2d:01:ef:c7:ad:7c:ca:da:6c:
         c0:cb:c2:fc:f0:df:de:44:07:ed:bb:d3:bb:f3:55:78:0a:82:
         56:47:38:ef:a6:ae:79:1a:1d:ca:46:41:0a:75:e3:9b:25:80:
         a0:43:a4:0e:46:29:e6:e6:82:7e:b7:2f:5e:56:fc:49:8a:3b:
         e4:52:b7:9f:40:6a:c4:fd:a8:fd:88:b7:56:57:39:98:2f:ec:
         c9:11:b2:5f:95:10:8f:fe:41:7d:2f:e5:3c:6e:8e:37:3b:a4:
         3b:6d:72:ab:c5:85:a4:dc:35:a4:4a:27:33:3f:78:fa:e4:de:
         b7:1a:f5:61:12:28:f9:75:7b:cb:3b:c1:1f:d3:9e:ee:bb:81:
         87:37:e4:20:b8:90:ac:20:52:2a:d3:4e:0a:c8:68:3d:79:25:
         b3:c8:b7:25:3c:b5:4d:6e:72:89:2c:6e:d5:77:0c:05:33:c6:
         d6:3e:98:37:51:5d:2a:a0:05:ae:ae:cc:ac:49:b9:51:87:41:
         2e:bf:ab:25:50:74:9d:d4:2c:ae:32:09:c7:c6:3d:a5:db:f8:
         1b:b0:04:27:cf:e1:c9:b4:a1:9e:9b:c6:c8:45:4b:7a:8c:15:
         37:78:f6:02:62:4a:39:41:21:1f:db:79:bc:88:68:47:d5:49:
         e9:48:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:16:08 2026 by rpki-client