Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          bXu+5GnSUBswG2rK7sr7jd+OSbTpznn+1qkZzE6TbCo=
Subject key identifier:   3F:94:B7:71:EC:06:D3:80:75:55:78:6F:ED:29:FA:83:0F:E4:92:12
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       019E910207C234D0C8EE0C397B15FD08228E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          0989
Signing time:             Thu 04 Jun 2026 05:01:29 +0000
Manifest this update:     Thu 04 Jun 2026 05:01:29 +0000
Manifest next update:     Fri 05 Jun 2026 05:01:29 +0000
Files and hashes:         1: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (hash: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k=)
                          2: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (hash: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q=)
                          3: aFesnPDh7CxN2CqxODqrdmrSUuk.roa (hash: x5ilgl/10IUgJ6jnlwharE+K/9xapRQ9JBmeLGM6YOI=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: 2LILskqzQnUNEWcJ6X1nw3MBWKU3hLl0sbb4JETLKzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:02:07:c2:34:d0:c8:ee:0c:39:7b:15:fd:08:22:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Jun  4 05:01:29 2026 GMT
            Not After : Jun  5 05:01:29 2026 GMT
        Subject: CN=3f94b771ec06d3807555786fed29fa830fe49212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:95:41:f3:52:f6:8c:55:ad:ff:bf:46:18:
                    89:82:e9:81:0e:49:4e:48:a8:d1:5f:aa:a9:3c:84:
                    32:0a:54:54:ed:9f:37:a8:23:26:94:9d:20:2b:0d:
                    7e:3f:6e:69:13:d2:a4:6b:92:68:23:96:35:ad:9c:
                    c6:78:53:1b:fc:91:00:95:3f:9f:20:b9:a8:a5:16:
                    2f:d1:1b:01:76:7b:83:90:9b:cc:da:45:d5:f4:52:
                    94:65:fd:6c:82:13:15:ad:31:e0:a5:24:80:e2:a9:
                    e1:5b:2c:22:3f:c1:cc:36:52:b9:95:25:7b:00:1f:
                    bc:c9:80:a9:c2:51:0e:36:0c:0b:2e:af:0f:08:42:
                    c7:24:15:56:16:c2:a7:b4:d0:53:3e:6f:50:5a:60:
                    2c:34:ce:df:7b:8d:14:e3:31:77:34:04:a3:62:9c:
                    a7:21:7a:ab:ac:54:10:16:2c:37:42:9d:41:3e:5c:
                    e8:59:60:61:ea:32:48:8e:56:83:a2:46:b1:a4:bb:
                    fd:80:f0:27:2c:b3:ea:11:e3:a9:6a:3c:fb:ae:b1:
                    77:83:e8:90:a6:86:b3:49:28:ce:89:39:d5:f8:b5:
                    cf:31:89:9f:71:a6:fc:ef:2b:9a:7f:11:e8:e8:d9:
                    29:ba:6c:54:8a:21:72:b7:e1:43:82:85:1d:fc:3e:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:B7:71:EC:06:D3:80:75:55:78:6F:ED:29:FA:83:0F:E4:92:12
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:2f:c6:0b:bb:4c:5d:1b:41:dc:2a:08:e0:41:bd:2d:2b:
         c3:3b:46:f2:4b:19:e9:e3:6a:a1:e3:df:b8:b5:0d:3a:e3:94:
         c0:bd:d9:4b:3c:93:63:64:df:2a:a8:1e:ac:9a:f4:2d:ca:03:
         98:7c:e1:d0:77:31:73:48:9d:88:2c:b4:4e:1c:2b:1b:78:6d:
         a5:54:f1:e0:65:7f:10:62:de:09:8d:08:d5:04:56:d7:73:0f:
         d5:b1:b5:6b:c0:72:7b:ed:fe:7b:cc:08:8b:8d:50:37:e5:00:
         d9:a1:de:f2:68:c5:c1:43:f5:34:37:1c:bb:0d:ad:c3:0d:05:
         03:d0:f1:17:8d:54:42:04:f5:58:2a:6e:6b:26:91:c0:1e:ca:
         cf:5c:51:af:b6:6d:a4:78:23:9c:4e:08:56:f5:5d:63:bd:ae:
         8e:9a:52:30:85:79:d3:79:f3:b7:46:14:b1:c9:9b:85:11:ee:
         4b:59:ca:84:70:51:58:80:82:56:b3:59:d1:2e:fa:e1:2d:33:
         18:b8:de:f9:27:c0:39:10:18:c8:5e:f0:b2:c1:33:58:33:c6:
         e1:d2:c7:b2:39:30:1a:eb:5c:a3:be:81:75:2f:99:31:71:2c:
         26:8b:21:9a:ab:3e:56:d7:91:df:be:4b:23:e5:8f:cb:82:f1:
         66:48:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:21:00 2026 by rpki-client