Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File:                     ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier:          lm8hbU/SO0jg46E6IvIbYI5z1wOmYHlf+2xLMw8GtFM=
Subject key identifier:   E9:2D:60:DA:87:C5:B4:36:F7:42:49:34:C6:17:CE:3C:3F:FB:B2:18
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer:       /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial:       019E8F811F8B8F1F7FA784DF1E30B4411C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number:          18D3
Signing time:             Wed 03 Jun 2026 22:01:04 +0000
Manifest this update:     Wed 03 Jun 2026 22:01:04 +0000
Manifest next update:     Thu 04 Jun 2026 22:01:04 +0000
Files and hashes:         1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
                          2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: 93c6nx63jsC3kdO68ETJS7cYOoHIdkAdwhF8qAme+cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:81:1f:8b:8f:1f:7f:a7:84:df:1e:30:b4:41:1c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
        Validity
            Not Before: Jun  3 22:01:04 2026 GMT
            Not After : Jun  4 22:01:04 2026 GMT
        Subject: CN=e92d60da87c5b436f7424934c617ce3c3ffbb218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:b7:9c:60:f9:07:07:f2:cf:2e:53:33:50:
                    52:2d:bd:40:8a:f8:2e:fe:18:88:e6:e1:04:6d:ee:
                    e4:a4:02:c8:13:80:6c:be:9f:bf:67:ec:6e:43:ba:
                    92:c5:3a:55:53:8a:a8:96:58:86:b2:1b:e5:f7:af:
                    4a:5d:d5:4d:8a:c3:88:d0:fe:eb:94:03:11:6d:9f:
                    0d:29:cc:1d:1d:2c:38:55:09:df:07:b5:2e:c0:97:
                    c1:38:78:64:b6:73:26:09:8e:42:ab:34:83:19:69:
                    5a:af:6f:d6:03:1a:01:6f:e0:28:22:be:d6:d3:c0:
                    51:86:cd:1f:14:c9:12:f7:ea:88:a8:cf:df:e2:84:
                    20:87:4c:13:08:ba:40:07:a2:99:04:1b:a6:63:14:
                    f6:84:86:73:1a:27:e3:e4:fb:f4:b7:af:18:7d:24:
                    85:9d:40:1e:bd:4a:f0:74:2b:fc:0a:ae:3a:63:24:
                    87:75:cc:d1:ed:e3:46:2e:21:65:5f:98:6a:f3:e0:
                    1f:54:f4:05:59:45:92:d1:e8:e9:27:35:18:fe:4f:
                    6a:d3:ff:d9:e1:45:48:27:3d:6b:cb:f8:c7:0d:03:
                    5a:e4:e6:3f:11:29:55:81:40:60:fa:12:cd:b8:88:
                    19:1e:a4:a1:26:d6:ae:1a:0d:c2:aa:60:34:ee:77:
                    47:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2D:60:DA:87:C5:B4:36:F7:42:49:34:C6:17:CE:3C:3F:FB:B2:18
            X509v3 Authority Key Identifier:
                keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:e8:62:db:85:18:6d:fb:3d:0e:9d:01:52:f8:8e:cb:ff:74:
         a3:2d:a3:6a:b4:ae:e4:52:b4:aa:36:6a:41:7b:a2:93:c7:e6:
         16:cf:44:ef:24:28:ba:52:5e:b0:b3:5f:33:d4:c3:fe:36:c3:
         32:91:5e:86:31:55:df:71:c4:04:78:4c:cb:3e:a3:99:1e:1c:
         aa:ea:15:67:a8:87:a0:b6:3a:1b:c3:3d:bf:cc:05:1f:7b:84:
         f0:75:67:4a:f1:31:e6:9f:71:4b:e4:3d:9e:8a:84:e3:79:94:
         ae:1a:ff:78:4b:95:de:12:d9:23:f1:aa:8b:58:b0:17:8c:17:
         9b:8c:6a:ef:71:0d:65:c7:67:e3:4e:79:02:19:7c:d2:7f:90:
         cf:be:60:aa:0d:cf:ed:5a:ec:36:08:1b:6c:78:c7:77:b8:40:
         e9:20:51:b9:63:c7:94:5d:75:3e:56:50:57:e9:fb:6d:6a:27:
         44:9d:16:d0:aa:bd:57:2d:fb:0a:cb:e9:de:90:06:4d:f8:d9:
         2f:6a:d1:47:bc:7d:32:2a:05:d3:00:46:df:d5:1c:ac:d0:91:
         13:b4:f5:af:00:6f:41:f8:3c:12:e1:33:bc:9c:95:a4:46:5d:
         ac:9a:62:48:e2:d7:78:6b:da:11:44:b9:1a:e2:8d:d0:20:fb:
         09:b4:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:43 2026 by rpki-client