Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          5WuVvIxz8b59P+Bhz6rYFidZ0GEf+plXOLT0HFhekWU=
Subject key identifier:   0F:C0:B9:A3:99:7D:7E:40:87:AD:0C:7F:E2:C0:76:5F:F4:AD:63:72
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       019EE5C3AF102D55127492A5FC60119FA096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          0392
Signing time:             Sat 20 Jun 2026 16:01:07 +0000
Manifest this update:     Sat 20 Jun 2026 16:01:07 +0000
Manifest next update:     Sun 21 Jun 2026 16:01:07 +0000
Files and hashes:         1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=)
                          2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
                          3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
                          4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=)
                          5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
                          6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
                          7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: muXYkshx2xjNzyfpQgTbOVYGBAjLwU3EUA53+h2I0tY=)
                          8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
                          9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=)
                          10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e5:c3:af:10:2d:55:12:74:92:a5:fc:60:11:9f:a0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Jun 20 16:01:07 2026 GMT
            Not After : Jun 21 16:01:07 2026 GMT
        Subject: CN=0fc0b9a3997d7e4087ad0c7fe2c0765ff4ad6372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:63:73:37:d5:f2:00:b7:b5:3b:15:6a:d6:
                    97:c9:ed:25:a4:12:73:8f:02:63:cf:18:da:01:3f:
                    84:5b:fa:34:33:60:de:20:71:7b:e6:f3:8d:2a:7c:
                    20:c9:03:9c:ad:fa:83:2b:31:9d:ab:6c:06:af:34:
                    cc:32:73:97:59:90:21:ff:ca:42:5a:89:6c:29:1f:
                    be:f9:76:0f:c9:54:ca:8c:18:2b:cd:a5:c5:b9:af:
                    c3:c9:ca:06:3d:ef:af:bc:2c:c5:d9:da:cc:39:8d:
                    58:28:21:c8:49:2a:cf:76:b8:94:eb:8d:09:2f:04:
                    b0:70:95:38:50:f9:d6:93:ec:22:f5:e5:1f:42:79:
                    8a:0b:b4:8d:33:b7:25:c8:0a:46:3f:b7:67:9f:62:
                    9c:76:2b:b6:0a:3b:79:de:e7:d8:8b:24:6a:a4:37:
                    b4:74:ad:01:f7:b4:72:fb:d8:d5:29:88:35:95:67:
                    85:77:27:ee:98:81:e5:96:19:84:57:79:b2:36:eb:
                    da:3d:65:9e:31:ea:e1:a2:dd:9b:60:44:02:34:14:
                    56:78:2e:b8:a9:b3:a9:68:2e:89:24:52:4d:42:94:
                    64:cd:51:96:7c:10:9d:e2:38:cf:96:d7:91:c7:03:
                    48:42:97:30:5a:73:1c:78:44:d8:97:7c:9a:f3:90:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C0:B9:A3:99:7D:7E:40:87:AD:0C:7F:E2:C0:76:5F:F4:AD:63:72
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:2f:58:fe:77:a6:bd:34:7b:fc:2f:ad:eb:93:ed:79:78:
         b5:8a:2a:51:ce:1e:6c:a4:f5:5b:b3:36:ed:ab:50:5b:82:7f:
         26:05:52:bb:d3:4a:17:dc:97:f3:5c:ce:11:ca:c7:99:28:d5:
         00:53:da:a6:55:8e:37:8a:c5:4f:8a:45:c0:62:5c:02:b6:f7:
         46:ba:e2:f7:c3:ce:9f:8a:d9:a7:1c:be:da:93:8f:e2:5b:e8:
         8d:47:89:05:d2:7b:c9:f7:b9:fd:81:4d:ba:39:7e:09:aa:2e:
         d3:cc:d0:fa:73:ee:80:e5:03:81:c0:c7:c8:5a:c2:e5:35:fb:
         7c:af:84:35:2c:72:2f:cb:95:bc:c2:8d:66:53:b1:17:94:46:
         f7:ca:63:1e:40:1f:0f:e4:43:82:58:ce:b2:d4:62:1b:62:9e:
         13:98:35:c5:56:71:79:34:7d:f1:49:19:f6:ec:65:13:58:7b:
         89:fe:e5:b2:e0:15:74:26:2a:aa:58:d7:13:63:c5:52:21:f0:
         f3:08:6e:bc:c1:4a:de:80:7c:da:99:b5:42:59:00:ef:cd:81:
         c9:dd:40:0e:92:92:10:43:1b:4f:00:c7:92:1d:ef:45:95:47:
         7c:61:79:5f:8b:50:61:18:84:83:ef:bf:4a:42:e4:a6:d0:6a:
         25:18:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:02:08 2026 by rpki-client