Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File:                     ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier:          siz2cyCP54T5nnCc7ULSnksHf+RMnJRA59UGxKJYLiw=
Subject key identifier:   2C:AA:63:FC:D9:D5:22:D1:4D:D1:6F:4D:1F:8B:74:7F:B8:DE:09:0A
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer:       /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial:       019F18D68D7CA0E4DE8A9C3C387A0E1D6CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number:          191C
Signing time:             Tue 30 Jun 2026 14:02:21 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:21 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:21 +0000
Files and hashes:         1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
                          2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: 7SXhXYKp5Y0LryDAK+yJOenzqFzt1saTKGMtAhPhPnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:8d:7c:a0:e4:de:8a:9c:3c:38:7a:0e:1d:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
        Validity
            Not Before: Jun 30 14:02:21 2026 GMT
            Not After : Jul  1 14:02:21 2026 GMT
        Subject: CN=2caa63fcd9d522d14dd16f4d1f8b747fb8de090a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:93:2e:17:f5:89:a5:2c:13:ec:82:7a:11:
                    2f:c1:27:fc:7e:f0:f9:87:73:bf:4d:11:60:f9:50:
                    a9:39:ef:f7:a3:c8:cf:25:57:c4:4c:89:c0:e4:50:
                    50:0f:ac:ec:02:8a:af:60:09:ab:db:ab:f5:e9:6e:
                    ef:03:d1:5d:f1:7d:5f:ef:4f:ad:1d:27:25:31:d0:
                    0d:13:4c:12:98:1c:cd:00:93:e8:82:45:bc:92:ae:
                    11:1c:7d:05:63:44:65:06:5d:8f:a2:07:0e:60:a0:
                    bf:69:72:ab:c4:cd:f2:a2:e9:89:14:b1:54:f7:74:
                    f7:eb:da:43:bc:5c:35:e9:49:14:e7:6a:33:aa:07:
                    72:68:b2:43:8a:19:e5:73:66:6f:95:11:f1:dd:4e:
                    1f:0c:1d:e9:58:52:67:ab:65:7d:35:0d:64:60:0f:
                    07:bd:ed:aa:a2:62:2f:77:65:e2:63:22:d1:8f:83:
                    89:83:fc:98:08:d5:da:14:28:b6:04:57:cc:52:6a:
                    24:a8:f0:9c:83:a3:56:f0:50:44:ec:73:87:98:8c:
                    2f:e1:c0:4a:e7:67:2f:78:42:aa:0a:4b:25:87:b6:
                    5e:d4:36:08:c6:7e:2f:60:3c:cf:3c:9f:d6:cf:81:
                    fe:ed:00:2b:4d:66:bd:ad:0e:e5:1e:ae:72:8e:0f:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:63:FC:D9:D5:22:D1:4D:D1:6F:4D:1F:8B:74:7F:B8:DE:09:0A
            X509v3 Authority Key Identifier:
                keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:25:07:1f:15:64:72:04:dc:1e:9c:83:b8:6d:8e:4e:19:aa:
         1e:58:24:f6:d4:c9:82:90:6e:78:e5:e0:b0:5b:b4:f2:21:41:
         03:1e:96:e9:fd:b3:10:43:e1:0b:be:cd:d6:2f:a7:dd:2a:2f:
         ab:0d:50:6e:f0:bf:48:4b:ca:60:95:34:f8:32:6e:bc:b4:d8:
         c7:5f:7e:e7:ea:03:88:f7:8c:16:3b:10:89:5f:d2:eb:9d:31:
         b0:e8:52:b4:04:a2:7a:b7:24:86:0e:a5:a6:41:1f:ad:2f:97:
         ac:5b:b7:bd:a7:67:ec:50:3f:ed:a4:cc:7c:ba:e9:7c:96:f9:
         c0:5e:73:09:2c:61:6d:9d:91:16:e2:2a:81:42:29:0b:10:8a:
         4d:08:27:01:b9:bb:46:f9:3b:34:12:81:88:ac:22:d8:2a:fc:
         f4:8f:b3:d1:bb:05:63:d3:aa:15:f8:b0:22:fe:ee:c9:d0:b8:
         3b:79:e6:bd:5e:a4:92:12:99:e7:15:b1:65:12:f1:75:e0:a6:
         18:0c:82:40:3f:f6:c0:c8:eb:7a:51:1b:c6:4d:6f:4e:9d:ea:
         53:e3:bf:68:f3:f4:b8:a5:e4:5a:54:98:ed:3f:f2:2c:33:59:
         9f:71:bd:dd:85:b3:32:43:7c:bf:de:27:b4:66:3d:6d:d3:b1:
         ea:b7:40:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1o18oOTeipw8OHoOHWzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh
MzkwZTkwHhcNMjYwNjMwMTQwMjIxWhcNMjYwNzAxMTQwMjIxWjAzMTEwLwYDVQQD
EygyY2FhNjNmY2Q5ZDUyMmQxNGRkMTZmNGQxZjhiNzQ3ZmI4ZGUwOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDmTLhf1iaUsE+yCehEvwSf8fvD5
h3O/TRFg+VCpOe/3o8jPJVfETInA5FBQD6zsAoqvYAmr26v16W7vA9Fd8X1f70+t
HSclMdANE0wSmBzNAJPogkW8kq4RHH0FY0RlBl2PogcOYKC/aXKrxM3youmJFLFU
93T369pDvFw16UkU52ozqgdyaLJDihnlc2ZvlRHx3U4fDB3pWFJnq2V9NQ1kYA8H
ve2qomIvd2XiYyLRj4OJg/yYCNXaFCi2BFfMUmokqPCcg6NW8FBE7HOHmIwv4cBK
52cveEKqCkslh7Ze1DYIxn4vYDzPPJ/Wz4H+7QArTWa9rQ7lHq5yjg917wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyqY/zZ1SLRTdFvTR+LdH+43gkKMB8GA1UdIwQY
MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt
ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1
LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISUHHxVk
cgTcHpyDuG2OThmqHlgk9tTJgpBueOXgsFu08iFBAx6W6f2zEEPhC77N1i+n3Sov
qw1QbvC/SEvKYJU0+DJuvLTYx19+5+oDiPeMFjsQiV/S650xsOhStASierckhg6l
pkEfrS+XrFu3vadn7FA/7aTMfLrpfJb5wF5zCSxhbZ2RFuIqgUIpCxCKTQgnAbm7
Rvk7NBKBiKwi2Cr89I+z0bsFY9OqFfiwIv7uydC4O3nmvV6kkhKZ5xWxZRLxdeCm
GAyCQD/2wMjrelEbxk1vTp3qU+O/aPP0uKXkWlSY7T/yLDNZn3G93YWzMkN8v94n
tGY9bdOx6rdALg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:44 2026 by rpki-client