Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File:                     znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier:          0J1KmEEKmTrFsxiREbLzD0lGT7wGpg9C1u8digbEatM=
Subject key identifier:   DC:B6:C8:4D:FB:BB:FB:D5:56:E0:3B:15:95:AE:16:6E:37:6C:F7:5C
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer:       /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial:       019EB7D79F7AAB7F360F67411A1F10B07C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number:          15FD
Signing time:             Thu 11 Jun 2026 18:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:21 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:21 +0000
Files and hashes:         1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
                          2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
                          3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
                          4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: gdeN7RszN2kUhrWRoD6st03WOdhPxCEI23sDx1ELUgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:9f:7a:ab:7f:36:0f:67:41:1a:1f:10:b0:7c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
        Validity
            Not Before: Jun 11 18:00:21 2026 GMT
            Not After : Jun 12 18:00:21 2026 GMT
        Subject: CN=dcb6c84dfbbbfbd556e03b1595ae166e376cf75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:39:e1:01:47:01:32:ca:76:9a:f6:5c:6f:
                    50:7a:69:f2:96:cb:07:d2:70:29:0c:cb:6a:8c:51:
                    38:50:22:f0:7d:76:ea:34:c3:48:29:40:6e:78:2f:
                    76:db:bf:f2:68:7d:0f:35:0c:c4:cf:d4:ef:d7:5f:
                    c7:87:62:47:78:b0:90:c3:e8:e3:5d:0a:ec:50:73:
                    0a:95:63:49:d2:53:f1:de:6f:db:58:bf:b2:69:34:
                    19:70:63:10:ed:c8:5a:32:ae:38:1c:2d:0f:0d:bb:
                    f9:44:a2:86:44:65:f3:34:b9:6e:bd:b1:de:8e:6a:
                    51:d5:ab:b0:9d:f2:88:cc:24:7d:27:e7:55:7f:3c:
                    a4:dd:13:1b:25:d4:66:0c:83:42:f5:c7:23:d1:f2:
                    ad:cb:bb:e2:87:9e:f1:4b:ba:52:ef:54:82:3b:5f:
                    6b:7b:53:ee:dc:ea:fe:17:de:13:71:6a:85:1d:e3:
                    ec:f1:e5:64:be:91:0a:0a:1d:b7:39:19:ec:46:72:
                    92:53:bc:fc:95:cf:49:1a:a8:ca:41:07:c5:4c:90:
                    6a:df:ae:e7:01:7b:21:62:cf:96:69:60:6f:3a:47:
                    b7:3c:14:4a:14:ec:cf:18:9d:87:6b:f9:4c:a6:b1:
                    60:19:51:ac:04:20:47:a0:19:10:3b:5e:36:47:2f:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:C8:4D:FB:BB:FB:D5:56:E0:3B:15:95:AE:16:6E:37:6C:F7:5C
            X509v3 Authority Key Identifier:
                keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:7f:25:bd:cb:6a:b1:28:9f:27:c3:b1:f7:0a:5f:26:cb:
         a7:3d:2d:71:0d:3f:bc:87:03:24:16:32:3a:8c:78:7c:3b:75:
         71:01:05:d7:a0:c5:74:7f:a5:1f:33:97:39:94:fc:e6:b9:6e:
         8b:f5:d9:94:f2:d9:b7:4d:3e:3a:51:57:40:01:40:ff:00:1d:
         0f:ec:d6:f9:e2:72:0a:38:06:e0:1c:be:88:18:3f:d6:e8:c4:
         fa:8e:26:3e:d1:7f:ed:98:16:3d:6c:e9:ec:98:30:2c:1f:50:
         5e:56:8f:1d:e0:97:e7:83:3b:10:96:c8:27:54:47:4a:86:80:
         4c:6f:d1:de:39:e9:52:b5:3e:44:9d:b2:a8:a3:c5:af:3c:74:
         4a:b6:88:3c:b4:71:fa:85:da:3b:52:30:74:1a:50:9b:57:69:
         7a:e3:8f:bf:79:67:8f:b3:4f:0c:22:9e:bf:b6:7c:0e:a2:85:
         0f:04:0b:cd:c2:6c:ec:e5:ce:a7:00:53:8f:dd:60:3e:b9:d5:
         1e:8c:a7:46:2b:a7:9a:09:c2:5e:30:92:61:66:1a:38:f1:98:
         dd:00:55:6b:c6:91:15:a9:17:41:0c:b9:32:c4:fe:3b:3b:bf:
         76:63:5e:93:d5:0d:d9:31:8a:93:90:a6:55:00:bd:75:6f:50:
         22:5b:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:51 2026 by rpki-client