Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          6AI/Mg4uo98NrHoHX/fv19orUKFSyLM+FgFNFlj0sSY=
Subject key identifier:   9A:44:A6:88:16:43:51:23:6A:C7:81:AF:A6:45:7D:0E:8B:3B:46:4A
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       019EB8EAE05C9E9F3E94051E287CC149F671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          1981
Signing time:             Thu 11 Jun 2026 23:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 23:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 23:01:00 +0000
Files and hashes:         1: AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa (hash: 0umZskah+CEr8ip186+RE27wIFvtLRl5c7E3qXa1bJA=)
                          2: C2VLEg7n0tawM_YjuKM0EwCOIdU.roa (hash: YkJt5/I0ermqnHQNrdy2/02bafN5wEDvzpqYuCqnw2s=)
                          3: ED4SThrzQXYcrC-AEArSen9tJXk.roa (hash: 7Cm2n+7edQ/TSDNLB06WjyawgEuLOZa4VST/mcq8bUM=)
                          4: c39N67bVxmJiemTHJXkT_8LO_Jc.roa (hash: aB4P6VURUO7PJEhrDe97gwqnhvifkhr4AJMJpATFX6E=)
                          5: xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa (hash: Pww3BJWwUmNPj1/iW/aWXYB7NNqY6jVB3VyHrlLqwhA=)
                          6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: 0C5Chd5/Tjr2+MJP8HMaG1hI0fSLOVZM8cJw2+t4PYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:e0:5c:9e:9f:3e:94:05:1e:28:7c:c1:49:f6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Jun 11 23:01:00 2026 GMT
            Not After : Jun 12 23:01:00 2026 GMT
        Subject: CN=9a44a688164351236ac781afa6457d0e8b3b464a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:9f:f0:f4:f5:17:16:b0:25:95:33:4d:0c:
                    56:7f:d8:ee:e0:f4:f8:c2:b0:1e:0c:a0:64:f6:38:
                    cb:08:e6:b9:61:3a:88:1d:2c:02:ca:0b:43:c2:9b:
                    97:07:d1:20:b6:e2:fd:03:38:4c:7b:bb:1a:bc:d7:
                    0d:5f:27:41:f7:0d:19:e9:db:c0:70:a1:65:09:78:
                    36:9e:bd:c3:78:9a:77:c1:22:47:6f:f9:3f:96:4d:
                    57:8a:ca:a9:e9:f3:55:38:8c:34:ff:e1:b8:dd:24:
                    f1:11:63:b3:f6:c1:a7:76:5c:b5:d8:03:94:fe:74:
                    92:55:41:12:1c:83:93:19:e2:b4:15:ab:8d:a7:2d:
                    d3:b9:94:f1:42:9b:a2:28:77:a8:74:aa:d1:b4:0c:
                    f7:7a:7f:80:13:50:16:1a:a4:f2:12:c9:b4:52:75:
                    6a:06:68:8f:37:5c:02:a6:c0:83:48:de:82:28:ee:
                    e6:6d:8a:ce:8d:59:41:9c:37:fd:17:cd:8e:c9:e1:
                    b8:be:78:b8:06:5c:3c:01:28:a4:ff:1b:51:d1:e1:
                    11:62:f1:49:0e:f4:7a:e2:90:da:95:05:77:a2:9d:
                    f2:44:e7:16:e5:74:a9:4b:4d:91:3d:27:c3:5e:5e:
                    bf:39:ff:74:3e:31:bc:33:1a:4f:58:b5:e5:5d:cd:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:44:A6:88:16:43:51:23:6A:C7:81:AF:A6:45:7D:0E:8B:3B:46:4A
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:75:a6:f2:af:d0:af:aa:0f:44:b5:2a:e3:fd:31:d8:d8:
         a7:0b:3a:0a:ba:33:7b:48:09:53:0e:02:14:b8:f3:73:7b:67:
         3d:49:28:a6:54:33:94:53:bc:f9:61:a3:33:b8:b6:63:35:71:
         2b:fa:87:91:c0:b1:94:b9:31:d1:ee:5d:86:d2:7e:59:e2:58:
         48:1f:6c:bc:7d:35:f9:47:0c:d1:93:58:42:df:b2:56:1a:41:
         48:00:9f:66:90:7a:6f:ec:5a:2b:11:ce:f4:79:d9:7f:e1:17:
         fc:a8:63:61:34:3c:db:18:91:1e:ca:8a:5a:97:4e:69:ba:24:
         0f:a3:d9:6a:a5:b4:19:86:7c:0b:a7:94:37:0f:e2:97:52:23:
         fa:21:03:e6:8a:da:0b:89:d0:e8:bd:94:c8:e8:e9:bc:04:da:
         52:46:a6:f8:25:b9:5f:78:c7:fa:ce:5a:14:65:7f:c8:9c:ba:
         59:b4:f6:81:30:20:91:a8:30:b0:97:b8:62:3d:0e:f9:f5:b7:
         ff:ad:b1:21:35:41:49:0c:be:f0:f1:e4:7f:6c:4b:8f:51:61:
         8c:cd:48:95:5c:65:9f:46:ef:eb:3d:64:96:ec:7a:92:9f:45:
         5e:17:69:53:d1:10:50:07:88:fd:e0:70:9d:3d:d2:d5:20:a3:
         45:04:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:57 2026 by rpki-client