Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File:                     zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier:          KVyyltvaq+eQkYVNCbEOGgd+NGWPfznQzH1+DI9XaTQ=
Subject key identifier:   13:C5:8B:43:FE:10:5B:B0:83:72:1B:63:27:A5:81:6F:52:B2:DD:B4
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer:       /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial:       019EB9C5E18D6AB47809FC3C924D95E2E318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number:          056A
Signing time:             Fri 12 Jun 2026 03:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:13 +0000
Files and hashes:         1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
                          2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: AtkXqJOeiQ5EAxKxHj8GOxya6hJFJevm/MOWHFiG1jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c5:e1:8d:6a:b4:78:09:fc:3c:92:4d:95:e2:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
        Validity
            Not Before: Jun 12 03:00:13 2026 GMT
            Not After : Jun 13 03:00:13 2026 GMT
        Subject: CN=13c58b43fe105bb083721b6327a5816f52b2ddb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:5d:2b:20:b0:34:7f:3b:46:48:6e:b8:a8:
                    34:95:4b:67:fd:9d:e2:46:3d:aa:c6:6f:b3:27:8a:
                    7c:d6:62:c5:9a:4a:0b:d0:4b:83:fa:7d:bf:5e:46:
                    1f:cc:79:b4:d7:fb:9d:2a:71:87:57:6b:58:89:9f:
                    96:31:98:a1:96:5f:4a:55:3f:8d:77:9d:80:f2:28:
                    57:ec:24:53:f2:6a:dd:b3:fe:d4:97:f7:65:2d:95:
                    7a:5a:7d:5a:14:64:67:04:83:68:06:a8:8a:c6:32:
                    52:4b:94:d6:15:67:d0:70:3a:91:88:08:83:e0:f5:
                    c6:40:9f:03:05:85:72:4f:59:9d:16:12:67:7a:d6:
                    8e:f9:ca:5c:a5:01:c1:01:97:ae:ce:1d:47:8a:96:
                    b9:d3:7c:f6:df:5b:e2:fb:0e:1b:fb:56:dd:28:a2:
                    ac:da:b9:65:16:81:46:76:c8:61:ac:d8:8b:e5:21:
                    e4:91:09:1b:f3:22:b3:9c:83:40:88:18:c1:90:a7:
                    12:87:16:cc:c1:a9:2f:55:b8:8d:b4:e4:ec:26:16:
                    cc:fd:5e:72:3b:9d:4f:1a:b8:72:94:2a:ba:86:20:
                    54:db:d2:d4:64:69:32:2e:c7:ca:bd:b1:6f:dd:5f:
                    56:1d:82:11:60:d4:2a:d1:9d:a9:87:d6:0e:a8:58:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C5:8B:43:FE:10:5B:B0:83:72:1B:63:27:A5:81:6F:52:B2:DD:B4
            X509v3 Authority Key Identifier:
                keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:e6:72:fb:a6:8b:40:28:bd:f6:5f:b6:f2:02:01:d6:f9:
         eb:71:f0:dc:6c:0a:88:54:51:da:fb:e8:76:79:4f:a2:3c:64:
         bb:9c:65:18:97:42:00:36:33:44:a7:5e:a1:70:b3:cd:fb:b3:
         a2:a2:f7:6d:99:ba:13:dd:0e:b9:b8:85:3b:cd:a9:bd:8f:2b:
         12:2b:01:74:0d:e5:ed:23:5e:8f:32:44:a9:c8:11:01:a1:b6:
         cb:38:7b:c6:8c:9c:8f:7e:6d:08:d2:86:1b:7d:e8:75:85:5e:
         e4:7b:8d:c8:eb:cb:2b:f0:d9:ca:05:ec:89:77:7e:6f:89:9c:
         ae:79:9c:f1:7f:3c:fe:e0:e4:e3:a0:8b:fd:0e:96:6b:4f:ca:
         26:c7:aa:0b:d4:e5:6d:f9:57:44:21:1e:01:f2:ec:90:62:57:
         ed:9a:07:86:9c:a0:45:bd:0d:aa:05:f1:f7:cc:a8:9b:ec:d5:
         48:ee:15:6e:37:33:8b:cb:d7:64:a4:41:af:99:45:7d:a8:cb:
         0f:a7:9c:f5:14:79:39:e1:60:8c:03:c8:9b:3b:39:85:4b:c8:
         b1:0d:30:f3:f0:ca:15:68:de:4b:ee:6b:3c:f9:58:7b:db:3a:
         90:a6:7a:16:9d:3d:5e:4d:25:5f:69:0a:ff:b9:bd:63:57:3a:
         05:24:e7:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xeGNarR4Cfw8kk2V4uMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm
OTM4MjcwHhcNMjYwNjEyMDMwMDEzWhcNMjYwNjEzMDMwMDEzWjAzMTEwLwYDVQQD
EygxM2M1OGI0M2ZlMTA1YmIwODM3MjFiNjMyN2E1ODE2ZjUyYjJkZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKVdKyCwNH87RkhuuKg0lUtn/Z3i
Rj2qxm+zJ4p81mLFmkoL0EuD+n2/XkYfzHm01/udKnGHV2tYiZ+WMZihll9KVT+N
d52A8ihX7CRT8mrds/7Ul/dlLZV6Wn1aFGRnBINoBqiKxjJSS5TWFWfQcDqRiAiD
4PXGQJ8DBYVyT1mdFhJnetaO+cpcpQHBAZeuzh1Hipa503z231vi+w4b+1bdKKKs
2rllFoFGdshhrNiL5SHkkQkb8yKznINAiBjBkKcShxbMwakvVbiNtOTsJhbM/V5y
O51PGrhylCq6hiBU29LUZGkyLsfKvbFv3V9WHYIRYNQq0Z2ph9YOqFiWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPFi0P+EFuwg3IbYyelgW9Sst20MB8GA1UdIwQY
MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt
ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm
LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfPmcvum
i0AovfZftvICAdb563Hw3GwKiFRR2vvodnlPojxku5xlGJdCADYzRKdeoXCzzfuz
oqL3bZm6E90OubiFO82pvY8rEisBdA3l7SNejzJEqcgRAaG2yzh7xoycj35tCNKG
G33odYVe5HuNyOvLK/DZygXsiXd+b4mcrnmc8X88/uDk46CL/Q6Wa0/KJseqC9Tl
bflXRCEeAfLskGJX7ZoHhpygRb0NqgXx98yom+zVSO4Vbjczi8vXZKRBr5lFfajL
D6ec9RR5OeFgjAPImzs5hUvIsQ0w8/DKFWjeS+5rPPlYe9s6kKZ6Fp09Xk0lX2kK
/7m9Y1c6BSTnVA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:05 2026 by rpki-client