Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File:                     ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier:          l3zLE941Qs0VhPLBp56fKvXezE4QrhHuAD9wMLc68f4=
Subject key identifier:   F1:79:13:79:59:EE:4B:C3:E0:6B:13:C4:AF:8F:F7:80:52:27:E1:2D
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer:       /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial:       019EB9C69F7726C0192E563A000AE7002C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number:          103B
Signing time:             Fri 12 Jun 2026 03:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 03:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 03:01:02 +0000
Files and hashes:         1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: B/uOOMr1ORF4hNNnWKhfu+qRjNax7EchsX0UDi4tmD8=)
                          2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:9f:77:26:c0:19:2e:56:3a:00:0a:e7:00:2c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
        Validity
            Not Before: Jun 12 03:01:02 2026 GMT
            Not After : Jun 13 03:01:02 2026 GMT
        Subject: CN=f179137959ee4bc3e06b13c4af8ff7805227e12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:98:5f:2c:2a:01:39:98:35:b6:bc:26:30:
                    f0:9f:d2:a9:db:06:2e:e1:ba:64:69:da:ae:f5:7a:
                    16:ff:87:27:8a:ab:17:24:bc:d8:99:c4:27:45:f6:
                    ec:39:a4:40:90:cb:09:5a:cc:bb:d0:97:a1:77:30:
                    76:c0:66:95:ee:e6:85:b0:cc:97:08:f3:26:da:fd:
                    f0:f3:ed:fc:12:60:93:b1:61:00:59:5c:c1:fc:bf:
                    6d:4e:48:15:30:b4:57:d4:ff:68:34:ef:d6:04:e5:
                    35:0a:ed:26:07:d0:d9:41:fc:f6:be:9b:5e:94:03:
                    62:64:95:1e:ad:7d:23:fb:52:d5:28:78:4e:d4:fd:
                    76:8c:17:7f:2b:81:b6:92:a2:80:9e:5e:98:e5:9c:
                    a3:0c:a8:6a:0b:66:2b:ac:fe:0f:49:02:3d:54:fc:
                    38:e0:5a:66:6f:76:50:12:61:14:19:d9:ad:57:34:
                    d2:df:5e:d8:5b:14:94:e5:46:a6:81:7d:43:eb:86:
                    86:fc:66:a8:77:33:92:7b:3b:27:4d:5d:fa:c7:36:
                    b3:8e:a7:e7:7e:ba:bc:4b:bb:8b:8b:5d:4e:3f:1a:
                    ba:45:1e:d3:9a:59:d4:02:59:57:ff:77:c5:cb:a9:
                    a3:48:1f:7d:d2:98:63:d1:09:9b:e8:95:da:ec:54:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:13:79:59:EE:4B:C3:E0:6B:13:C4:AF:8F:F7:80:52:27:E1:2D
            X509v3 Authority Key Identifier:
                keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:a6:be:0d:28:25:75:b2:2b:96:43:d9:17:aa:8f:eb:db:
         ce:e5:38:21:f6:92:d2:4f:72:b7:2a:05:73:63:a4:b4:be:da:
         22:d0:5b:0a:15:b4:e1:a4:af:42:73:0c:12:cc:2a:b7:d4:f5:
         04:e8:4e:96:7e:19:97:7a:5f:9a:a1:ec:59:34:3e:64:ec:aa:
         30:a8:3e:c7:cb:73:ad:89:a1:7e:41:23:42:03:a2:fd:bb:1f:
         78:5b:61:fa:fd:49:79:db:d0:48:98:a2:ea:a7:b9:02:7b:25:
         c4:1d:5f:ee:51:58:3e:03:cd:ec:2a:59:4a:d0:30:e9:bb:15:
         b6:48:64:51:a9:e2:5b:1d:83:d8:b9:44:ad:d6:c2:3d:57:a0:
         5d:bd:42:71:37:55:77:ff:b2:6c:7c:f0:d9:92:d9:ab:50:ca:
         ed:de:b0:18:f1:37:5e:26:80:84:57:e1:5d:65:9b:96:3d:47:
         f2:73:b2:97:aa:5a:f1:e5:fb:69:f8:b6:e4:b3:1f:74:76:91:
         59:04:77:2d:9e:dd:04:1e:d5:9b:5d:da:b6:76:0b:86:f8:66:
         44:b8:3c:8a:e4:7e:58:6a:10:1e:2e:63:2d:2f:f1:7a:d4:d3:
         5f:59:e2:fd:50:1d:57:8c:0a:06:71:d3:51:d5:4f:7f:52:4c:
         5a:04:2c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xp93JsAZLlY6AArnACwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MDg5OTEzMzMyOWZhYTViNTcxNmIxYzk1ZmJhZjkzMDIx
ZmJjNjEwHhcNMjYwNjEyMDMwMTAyWhcNMjYwNjEzMDMwMTAyWjAzMTEwLwYDVQQD
EyhmMTc5MTM3OTU5ZWU0YmMzZTA2YjEzYzRhZjhmZjc4MDUyMjdlMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GaYXywqATmYNba8JjDwn9Kp2wYu
4bpkadqu9XoW/4cniqsXJLzYmcQnRfbsOaRAkMsJWsy70JehdzB2wGaV7uaFsMyX
CPMm2v3w8+38EmCTsWEAWVzB/L9tTkgVMLRX1P9oNO/WBOU1Cu0mB9DZQfz2vpte
lANiZJUerX0j+1LVKHhO1P12jBd/K4G2kqKAnl6Y5ZyjDKhqC2YrrP4PSQI9VPw4
4Fpmb3ZQEmEUGdmtVzTS317YWxSU5UamgX1D64aG/GaodzOSezsnTV36xzazjqfn
frq8S7uLi11OPxq6RR7TmlnUAllX/3fFy6mjSB990phj0Qmb6JXa7FTa2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF5E3lZ7kvD4GsTxK+P94BSJ+EtMB8GA1UdIwQY
MBaAFGYImRMzKfqltXFrHJX7r5MCH7xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iZDc1YjEtMTc0Yi00MTdjLTg3NTAt
ZWI4YTQ1M2JjNTZlLzEvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iZDc1YjEtMTc0Yi00MTdjLTg3NTAtZWI4YTQ1M2JjNTZl
LzEvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ+mvg0o
JXWyK5ZD2Reqj+vbzuU4IfaS0k9ytyoFc2OktL7aItBbChW04aSvQnMMEswqt9T1
BOhOln4Zl3pfmqHsWTQ+ZOyqMKg+x8tzrYmhfkEjQgOi/bsfeFth+v1JedvQSJii
6qe5AnslxB1f7lFYPgPN7CpZStAw6bsVtkhkUaniWx2D2LlErdbCPVegXb1CcTdV
d/+ybHzw2ZLZq1DK7d6wGPE3XiaAhFfhXWWblj1H8nOyl6pa8eX7afi25LMfdHaR
WQR3LZ7dBB7Vm13atnYLhvhmRLg8iuR+WGoQHi5jLS/xetTTX1ni/VAdV4wKBnHT
UdVPf1JMWgQsQg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:57 2026 by rpki-client