Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File:                     ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier:          AwlgE44ImWD70jkBTVWMsA1t72aHYR3w7B07lp+nq54=
Subject key identifier:   C9:69:61:6F:22:BB:C9:C0:A7:8C:F7:19:B8:F2:ED:45:30:CE:EF:06
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       019EB6206D0A2871549214DD7A4027621AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 10:00:38 +0000
Manifest this update:     Thu 11 Jun 2026 10:00:38 +0000
Manifest next update:     Fri 12 Jun 2026 10:00:38 +0000
Files and hashes:         1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
                          2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
                          3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
                          4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: fP1roqSOVM10ZOLqpGa8kOYWZN8syt3ge7p61E3db0M=)
                          5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:20:6d:0a:28:71:54:92:14:dd:7a:40:27:62:1a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Jun 11 10:00:38 2026 GMT
            Not After : Jun 12 10:00:38 2026 GMT
        Subject: CN=c969616f22bbc9c0a78cf719b8f2ed4530ceef06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:ca:b5:31:d6:59:f2:9d:f4:77:e5:b1:26:
                    b6:da:e6:62:4b:88:71:1d:22:ec:9f:3b:75:65:8a:
                    f4:1d:b9:2b:42:f3:22:93:9f:a6:62:96:28:5c:ee:
                    91:33:22:ed:93:a5:51:2d:16:d7:d2:fa:27:ef:83:
                    d0:85:7a:94:a1:15:43:b5:39:8e:f4:ba:cf:7d:72:
                    14:46:28:e3:ff:b8:ba:93:cb:2e:0b:9c:8e:4f:cc:
                    d9:10:d1:ab:b2:94:92:b0:56:a6:fa:e8:f2:74:a3:
                    23:83:1d:fa:c7:91:4d:12:7c:3a:9b:2e:28:aa:3c:
                    ce:f3:f2:71:e6:59:f8:5c:74:d7:70:32:65:50:9c:
                    20:d1:f2:1c:02:32:b2:4a:9e:b2:51:a4:24:72:8d:
                    03:6f:62:77:38:36:bc:75:bf:90:e4:75:5a:56:46:
                    f7:f2:72:90:20:01:79:14:99:a7:27:2f:c7:86:fd:
                    1f:e0:92:0c:7f:ef:a2:79:e1:d6:90:ff:b1:d8:21:
                    cd:48:1a:2d:11:2d:75:6f:51:a7:ea:06:1a:5b:7d:
                    45:e1:1b:a8:34:1e:95:04:52:6e:62:22:61:20:36:
                    2e:a2:f9:ea:a5:35:95:34:a4:4b:59:ed:b5:f9:f7:
                    e8:97:bb:61:28:b5:66:9f:36:04:f1:c1:31:d5:c6:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:61:6F:22:BB:C9:C0:A7:8C:F7:19:B8:F2:ED:45:30:CE:EF:06
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:ca:66:8f:6e:11:db:86:d7:73:92:c1:6c:78:b7:d6:fd:
         5d:41:91:47:e9:90:3e:c1:1e:98:ae:f9:84:60:41:6d:1b:34:
         93:db:ff:4f:6b:66:63:f8:94:88:7f:a9:04:ff:cb:ed:03:a8:
         f6:1a:68:10:49:b8:d4:67:a4:80:57:ea:b6:03:bd:cc:2c:77:
         f9:be:34:6b:35:8c:42:a8:4f:12:b7:7e:20:47:80:c9:40:a1:
         21:f7:d2:da:5e:1b:93:2c:0e:dc:fb:c8:db:3e:64:66:86:8a:
         cd:39:3c:c7:9a:ac:37:9a:98:4d:ec:8f:60:9a:96:51:54:a0:
         9a:9b:08:03:2d:2e:cc:8e:4c:e0:cf:44:b0:c5:7f:4a:c1:a1:
         8c:f7:de:fd:42:c0:86:6f:07:07:e4:0f:af:4f:27:27:02:fa:
         f2:32:00:c9:91:01:b2:4d:02:06:79:77:63:2e:13:12:c1:10:
         4c:f3:c7:2b:9b:2e:9f:3a:8c:7b:c2:8e:85:4b:bb:35:c0:ce:
         23:61:87:c6:4a:49:97:bd:ab:45:bf:d5:b6:81:0c:1b:a0:d4:
         8f:67:7a:90:a4:1f:b9:02:17:cb:22:d9:8e:33:03:0e:2b:71:
         29:db:16:59:44:5e:ac:c9:17:b8:e5:1a:33:48:f5:e3:86:01:
         2b:07:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:36 2026 by rpki-client