Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File:                     Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier:          C9RnjV28r1dP/Bf1PMKhId7DV8iefqJtetZWuR48ArQ=
Subject key identifier:   3B:CF:76:C1:3E:F6:B6:65:D6:7B:32:83:5F:5F:39:D7:19:95:58:97
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer:       /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial:       019E30E0D7D24A6966225F146BAA9BC87917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number:          07E6
Signing time:             Sat 16 May 2026 13:01:41 +0000
Manifest this update:     Sat 16 May 2026 13:01:41 +0000
Manifest next update:     Sun 17 May 2026 13:01:41 +0000
Files and hashes:         1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: wLSVNdMIuz9tXCWcflCcQUFziXiCIjpbyM4EgeLGx5A=)
                          2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
                          3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:d7:d2:4a:69:66:22:5f:14:6b:aa:9b:c8:79:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
        Validity
            Not Before: May 16 13:01:41 2026 GMT
            Not After : May 17 13:01:41 2026 GMT
        Subject: CN=3bcf76c13ef6b665d67b32835f5f39d719955897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:1c:9c:eb:5d:9c:d0:fe:bb:1a:39:cd:31:
                    8b:3e:4c:cd:9b:e0:ac:0e:ad:0c:d0:a9:90:e9:60:
                    9a:fe:90:3c:d1:18:bc:73:03:85:7f:3a:32:70:52:
                    9a:31:ba:f8:44:8f:66:89:41:84:e2:9f:74:b3:6d:
                    ce:d3:19:d5:75:ab:79:54:7e:e0:19:6d:63:47:10:
                    df:6a:95:5e:c7:89:92:79:e0:99:d2:d2:bd:10:de:
                    6f:c8:f7:97:c3:ae:2a:ad:56:6d:54:48:8e:c3:83:
                    bb:8c:fd:d0:1b:23:5d:97:99:8f:d9:07:cc:03:d5:
                    6b:8b:90:07:a2:bb:80:96:ef:b2:35:ed:49:4c:de:
                    19:52:e1:b4:85:fe:32:32:bd:da:6f:b1:06:e9:be:
                    df:a5:69:9d:70:06:55:27:be:16:e1:65:ec:f3:c9:
                    ff:01:8a:20:93:a2:75:ac:39:c8:7b:6d:e6:1a:4c:
                    d7:d4:49:9b:86:b3:d0:b8:4c:d5:30:d1:19:5d:a9:
                    6f:b6:62:47:f8:10:46:af:a7:d3:f2:69:62:a7:7f:
                    b9:0c:bb:d9:a9:97:a1:3c:d7:a3:f2:cf:f0:69:28:
                    d6:b4:37:78:04:71:cc:43:23:25:37:6c:57:44:d8:
                    c2:48:e4:30:bc:8b:a7:a5:2b:b6:bd:dd:84:c1:9c:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CF:76:C1:3E:F6:B6:65:D6:7B:32:83:5F:5F:39:D7:19:95:58:97
            X509v3 Authority Key Identifier:
                keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:7b:f8:b4:d5:4a:1e:94:1a:67:9f:ec:ee:72:4f:43:f7:
         64:28:51:a7:ff:70:c8:73:cd:00:9e:f4:8a:01:7e:e3:63:ed:
         db:30:89:2b:44:d7:98:d1:4c:ed:04:07:26:40:ab:37:61:c4:
         fc:7c:4d:a2:a6:80:32:ee:c3:18:0b:8d:17:e0:5b:fe:9a:74:
         7f:83:7b:a9:eb:ff:71:57:77:32:6f:a1:ff:bb:ad:63:f9:be:
         37:49:4d:4d:85:21:d3:67:10:2b:65:9f:0d:91:1d:fd:dd:62:
         9f:6a:0f:bc:16:6e:53:fa:7c:bf:19:d9:05:84:34:75:59:e4:
         f3:39:90:6a:d6:fb:27:ce:e3:fa:ca:43:7c:87:b2:c5:b2:73:
         5f:94:4b:17:e6:ea:e1:67:f2:ea:cf:78:67:a3:b3:85:84:19:
         4d:1b:b4:55:64:d3:55:ce:da:84:a9:3b:da:3a:ff:88:d9:0e:
         27:df:49:8a:d7:de:9f:4b:aa:94:58:e4:b5:79:a4:ec:da:21:
         73:4f:4b:ab:31:b5:69:b3:c4:1b:d7:25:9c:eb:1c:f0:cc:c6:
         a0:23:c7:50:b0:ae:4f:70:07:43:2d:37:8b:7f:d2:85:25:c3:
         ab:e3:51:9f:7a:0c:46:17:ea:fc:1c:57:96:43:de:20:4e:44:
         cf:68:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:43 2026 by rpki-client