Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File:                     Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier:          XhJ71VkfJ/BIQdFOOj51NZjlrA5DOWze6IyeTvmg0fU=
Subject key identifier:   58:54:F8:AA:6D:2F:6F:BD:F9:FA:70:66:F7:E0:4C:91:C3:DF:DE:35
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer:       /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial:       019EB8EAA87D0EEFF56D9C93328B684BF400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number:          195D
Signing time:             Thu 11 Jun 2026 23:00:46 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:46 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:46 +0000
Files and hashes:         1: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (hash: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI=)
                          2: Z2S57soliueMTVEyGovf75orajw.crl (hash: nOjc6j/zAbry19aJRIAXzku5Vg7YHa7EyIG93YDdkmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:a8:7d:0e:ef:f5:6d:9c:93:32:8b:68:4b:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
        Validity
            Not Before: Jun 11 23:00:46 2026 GMT
            Not After : Jun 12 23:00:46 2026 GMT
        Subject: CN=5854f8aa6d2f6fbdf9fa7066f7e04c91c3dfde35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:02:38:eb:df:5a:3b:0e:cc:92:e7:a3:a8:
                    d2:b3:37:0e:aa:a2:44:de:e0:c1:49:14:5c:4f:45:
                    a0:df:9a:5d:41:d2:d2:26:cf:3d:66:ba:35:56:97:
                    5b:6f:5a:0c:77:5f:21:25:cf:ba:83:01:dc:f3:87:
                    e4:a7:e9:65:34:de:16:4f:ad:d1:1d:a6:ac:47:c6:
                    f8:47:4e:ba:2f:db:80:cf:42:e4:9f:bc:13:23:d1:
                    c8:68:b2:85:da:e9:f0:27:3c:18:d4:ca:e4:12:4a:
                    e6:ec:52:ea:57:1a:bd:0c:ba:e9:5f:c9:aa:6c:0c:
                    90:ff:69:a3:21:ae:f9:2a:a8:ad:03:63:16:b2:de:
                    06:73:1c:68:b0:0d:1a:d9:34:33:5d:ce:19:0b:e7:
                    ed:c1:43:61:c6:67:0d:fd:c2:c6:42:38:58:47:be:
                    42:d3:13:cd:74:28:e6:fc:1b:5b:a7:e4:2a:ed:54:
                    f3:dd:82:be:01:e3:20:17:7b:39:f4:16:1b:88:ff:
                    ed:d1:f2:e1:fc:5d:37:61:7c:3d:4c:06:bd:ad:6f:
                    8d:38:65:ed:fa:07:b2:51:eb:d9:61:62:37:94:4c:
                    12:e9:97:ac:76:03:b1:de:10:36:bd:97:43:08:fe:
                    d0:25:83:28:a8:5e:f7:64:fc:98:01:f0:1f:27:af:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:54:F8:AA:6D:2F:6F:BD:F9:FA:70:66:F7:E0:4C:91:C3:DF:DE:35
            X509v3 Authority Key Identifier:
                keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:89:d4:c8:93:f0:65:d3:30:30:e7:6c:0c:bd:6f:0c:23:2e:
         e0:d7:dd:e1:2c:96:b3:73:7b:0a:af:9b:e4:fa:b7:01:aa:3c:
         1e:84:1b:ec:1e:bd:ca:64:68:9f:e4:cd:5b:f3:01:02:7c:27:
         1b:e7:9c:c5:15:90:86:6e:0d:59:7c:ea:57:ac:ca:0b:55:34:
         54:e0:09:08:f8:ea:bd:01:ef:97:59:0d:a6:cb:58:39:2b:95:
         fa:e1:fe:0a:82:d8:01:be:96:1b:cc:77:37:7b:53:b6:ac:f0:
         d8:9a:b0:c0:e8:da:a1:58:7b:5c:45:1e:f5:eb:ea:98:50:68:
         6f:1e:ba:a4:a1:89:23:cb:bc:03:4b:39:da:78:ed:af:ab:e0:
         fe:55:fa:55:c7:43:1e:e8:33:6c:6c:ba:a5:df:3c:10:00:5a:
         bc:81:c1:a3:6d:54:10:fe:c4:ad:e7:60:59:6f:c2:86:8c:c9:
         a5:e2:b9:b4:50:ec:d2:d5:ae:81:c7:43:07:c1:62:d1:e7:2b:
         aa:31:ad:ce:20:39:7c:b7:b4:b1:4f:d0:f7:83:41:a8:21:59:
         79:2f:fd:d0:24:54:0b:64:e4:55:66:d5:af:e2:93:17:ae:02:
         83:43:d4:a9:3d:53:8b:67:28:fa:d6:d1:5c:3a:fa:31:b2:9f:
         f0:f0:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:18:31 2026 by rpki-client