Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          pW3Dkmk7DrO9fcyMouKSSxzdzDG4x339xXJ7mZv0kOw=
Subject key identifier:   C9:39:CA:49:24:48:C1:CD:71:33:4E:7B:E9:66:8A:AA:10:CC:10:8E
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       019E99CD2374D6A9F6AD2E090334706493E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          13AF
Signing time:             Fri 05 Jun 2026 22:00:18 +0000
Manifest this update:     Fri 05 Jun 2026 22:00:18 +0000
Manifest next update:     Sat 06 Jun 2026 22:00:18 +0000
Files and hashes:         1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: 23EKeusDTXiFPRBQlkmnvBNjcakKRsj8ijwUR+xGmps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:cd:23:74:d6:a9:f6:ad:2e:09:03:34:70:64:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Jun  5 22:00:18 2026 GMT
            Not After : Jun  6 22:00:18 2026 GMT
        Subject: CN=c939ca492448c1cd71334e7be9668aaa10cc108e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4a:18:9f:2e:a7:1f:bf:f9:4c:6e:21:7a:18:
                    29:c2:85:8d:39:58:be:3c:4b:18:19:56:9a:1c:b2:
                    a9:73:fc:4d:70:ba:64:86:43:3f:24:1e:e5:33:a2:
                    aa:62:71:63:f0:56:0e:2c:d1:5f:a7:fc:57:b5:96:
                    93:14:15:b8:a3:88:33:a2:5d:0a:47:59:d4:ce:97:
                    83:e3:cd:1a:18:9f:68:85:38:8d:85:28:29:41:c9:
                    55:1a:39:33:35:b2:1f:7b:25:18:b3:da:36:83:63:
                    ac:e2:6c:4d:86:28:3d:09:64:19:43:70:d3:df:e7:
                    d8:89:8a:91:af:80:2d:c6:87:2e:be:9b:23:fc:1c:
                    90:d7:79:b8:ef:c5:c8:ee:74:ce:dd:73:ab:0b:c7:
                    e5:a6:e8:2c:91:c8:8d:f5:3b:07:06:ee:77:cc:c2:
                    71:74:22:8c:92:5a:99:72:5c:4d:4c:00:34:5e:11:
                    f9:85:53:19:98:f5:69:82:f9:26:99:4b:6b:8b:26:
                    46:78:35:4e:06:23:b0:df:4c:a6:51:c9:49:c3:6c:
                    73:3c:74:fe:0a:bb:e5:bb:5f:9b:5d:46:11:c7:00:
                    56:7f:62:f9:c5:2c:2c:bb:7a:a9:3d:a4:cd:00:1a:
                    a8:d8:4e:c4:e9:8c:51:9c:60:1b:e5:96:80:44:9a:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:39:CA:49:24:48:C1:CD:71:33:4E:7B:E9:66:8A:AA:10:CC:10:8E
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d3:96:7a:56:47:a4:b1:1c:da:25:95:ce:bd:13:8d:5f:6e:
         e8:db:7d:b3:17:8b:26:7d:be:e9:28:4e:ef:32:be:64:c1:52:
         fc:f3:b9:99:72:59:f3:29:38:d4:56:09:15:4d:a4:05:25:66:
         55:95:1c:71:6c:6d:c6:86:94:13:82:0b:ce:22:65:d1:4e:8a:
         40:38:d5:e3:26:7b:86:f7:8b:04:70:78:ca:9f:a1:6e:14:26:
         b4:1a:07:e7:0c:1b:ee:b5:e7:d6:6b:cd:ae:f6:bd:e6:e7:eb:
         34:55:24:ff:1e:bf:61:01:a6:91:3a:95:f3:7c:b4:f2:8f:2a:
         9a:9c:84:b7:a4:30:d1:f1:b7:e8:9d:4b:b6:63:70:92:ca:15:
         a3:89:2d:a7:0f:fe:a4:02:43:47:0f:46:6e:18:6e:1f:4b:6b:
         59:50:2b:67:9b:b5:5c:9e:82:6e:de:29:d9:4e:4f:ce:30:26:
         8c:00:7c:c7:24:68:37:7c:a6:37:94:8b:92:ef:e7:88:7c:16:
         1b:bc:05:66:cc:3a:0b:4c:cc:69:db:78:48:fa:5b:8c:de:0c:
         b1:57:98:34:8d:05:02:c9:12:b0:b5:79:86:5e:4b:6c:79:fa:
         46:19:c6:4e:bb:fa:e3:2e:13:e1:66:c2:d4:2e:63:58:f4:46:
         fc:9e:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:13:35 2026 by rpki-client