Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File:                     Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier:          ZQiYgBOeCUO98mMbjf7b0rSHzEyQbC/vx2ofIOH9pFI=
Subject key identifier:   31:7F:FE:D7:BF:02:37:C6:4B:C9:15:06:C5:03:FC:D2:C0:E7:40:59
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer:       /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial:       019EB7D7E31F53BF41086D4836F8353857F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number:          122F
Signing time:             Thu 11 Jun 2026 18:00:39 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:39 +0000
Files and hashes:         1: ZhJ5L5BrKwHCfAkrdgSHGKVEGLQ.roa (hash: LrOGWQlYoODl2o5Zz7qsJzTT29X+TmzrpsnPFdEc10c=)
                          2: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: sfTq2EKMUNqB45eMyehjRWce+KFDU4AGc+jvpPH5StA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:e3:1f:53:bf:41:08:6d:48:36:f8:35:38:57:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
        Validity
            Not Before: Jun 11 18:00:39 2026 GMT
            Not After : Jun 12 18:00:39 2026 GMT
        Subject: CN=317ffed7bf0237c64bc91506c503fcd2c0e74059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:5c:da:0e:e0:ea:82:d6:07:44:24:ec:c3:
                    91:39:3c:50:5d:04:c7:bd:9c:ff:04:13:0e:5d:5e:
                    c3:f6:4c:9b:e1:26:4f:04:55:59:c0:ae:90:8c:75:
                    d7:ee:fd:cb:66:51:67:1c:c3:8e:37:e8:17:90:c5:
                    10:a4:cc:a6:f7:89:3f:74:8a:1a:b5:85:c7:74:92:
                    16:de:ca:9d:01:1a:96:9f:85:93:78:6e:74:74:69:
                    24:e0:26:f6:fe:e2:e0:93:71:20:ee:23:66:89:40:
                    31:6a:58:31:5e:ab:18:73:e3:f8:f5:60:5e:bd:1b:
                    cf:0f:f1:60:d8:f8:70:5d:d4:b0:4d:c7:ca:10:8c:
                    1b:d1:23:a6:ad:9a:5a:cc:2a:aa:71:36:76:ed:55:
                    a3:6f:87:95:71:44:67:b5:2b:13:38:6c:4a:a8:2b:
                    ff:fc:94:6b:be:56:af:ca:6c:b8:cd:7a:81:97:ea:
                    6f:9f:09:68:04:4d:a4:25:66:31:99:41:12:97:70:
                    e3:f7:b7:8f:24:75:d0:da:14:7c:1d:70:0e:ff:68:
                    51:37:9c:98:d5:07:1f:fa:11:ac:10:00:cd:88:f3:
                    35:71:6a:8d:78:7e:bb:7b:30:34:c4:e5:5e:66:3f:
                    45:0f:6e:b6:f9:93:0e:ac:06:c7:1a:13:b8:bc:5e:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7F:FE:D7:BF:02:37:C6:4B:C9:15:06:C5:03:FC:D2:C0:E7:40:59
            X509v3 Authority Key Identifier:
                keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c4:b9:1e:4f:64:f8:32:b4:dc:1e:41:b4:3b:03:22:7e:cf:
         f2:55:b9:9c:41:c8:7b:ab:a1:5e:5a:41:3d:51:84:09:4d:35:
         06:c9:0c:92:d3:d3:3a:78:41:ff:15:5f:60:3e:83:b5:9e:7f:
         45:7b:de:f9:75:e5:7e:c6:b6:b1:78:bb:9e:dc:1b:06:e8:63:
         9e:d5:b0:ba:58:1d:35:72:b4:d1:96:d3:50:42:3a:9b:ae:f1:
         fd:3f:aa:61:ee:a5:a4:2e:fa:1c:8e:46:32:27:29:bb:ce:6c:
         5c:b9:73:6f:49:f8:12:69:38:db:f2:f1:82:42:0c:e1:e3:56:
         57:82:f3:af:34:a8:fe:89:3b:7c:95:6b:6c:52:1d:9f:e8:1a:
         e7:6d:21:11:8f:6f:12:63:ac:ba:30:d7:47:64:65:bb:07:1c:
         b5:2c:6f:26:32:55:41:19:b1:c8:ae:f5:fd:9b:71:7e:01:c5:
         03:f4:da:6f:1c:56:66:29:ce:d3:d2:23:c6:51:58:09:34:8e:
         f6:fc:65:b8:07:3c:94:07:15:e5:39:a7:f5:6f:ce:29:04:ec:
         30:51:94:6b:f7:2e:59:c0:ac:c8:25:c6:ea:39:a0:2c:d8:03:
         a7:5c:17:65:03:14:b0:70:c8:ed:85:ed:99:c3:fe:d0:bb:12:
         45:1c:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:47 2026 by rpki-client