Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          9Envrls2G3o/fbo+DDsd0Pc/3Nd6vIIIo7bM1+OZHzs=
Subject key identifier:   98:09:A8:FA:DD:93:5D:E6:9F:39:E9:4A:4A:AA:26:F7:44:A3:0F:A9
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       019E9BBB829B90286B674C1525B46AB52307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          13B0
Signing time:             Sat 06 Jun 2026 07:00:17 +0000
Manifest this update:     Sat 06 Jun 2026 07:00:17 +0000
Manifest next update:     Sun 07 Jun 2026 07:00:17 +0000
Files and hashes:         1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: FzO2yRPGxi4MKXmcqcS3iOG0+Iet4l8+bMTmsqWwrxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:bb:82:9b:90:28:6b:67:4c:15:25:b4:6a:b5:23:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Jun  6 07:00:17 2026 GMT
            Not After : Jun  7 07:00:17 2026 GMT
        Subject: CN=9809a8fadd935de69f39e94a4aaa26f744a30fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:37:32:4b:2b:c1:72:5e:19:91:ce:94:58:
                    4f:b3:f8:19:01:cd:30:6b:64:fb:7d:04:5c:54:63:
                    8b:12:fe:0a:88:ae:00:89:37:31:da:75:ba:c9:b8:
                    7f:07:36:55:31:5c:d8:0f:9c:98:c7:44:f5:a2:ab:
                    9f:c3:33:82:3e:a1:1f:09:9c:3c:74:52:e9:fb:80:
                    84:cc:b3:64:f3:b4:49:ee:bf:e4:30:de:f8:69:1e:
                    1c:b2:91:0a:ef:0a:0b:2f:97:a1:98:81:79:1f:f3:
                    f5:45:a4:b2:36:9a:68:00:fc:92:e5:ad:6b:62:d6:
                    52:f2:cd:f2:b3:4e:53:2d:57:5c:99:e4:eb:bc:93:
                    95:56:1c:ed:f3:ca:e8:d5:33:de:2f:c2:1a:3b:f9:
                    ed:da:ca:da:d8:aa:40:75:9b:bb:36:7e:3f:08:b5:
                    48:d5:98:5d:3b:ab:e1:75:69:ab:f0:d4:e1:dd:a4:
                    0a:d5:b8:2f:01:32:62:c7:8a:9c:52:16:98:5d:2e:
                    ce:5e:b4:56:46:df:02:72:6b:fe:5a:f1:31:54:b9:
                    23:a8:ed:d5:ef:ed:7d:df:06:9c:39:77:31:78:4b:
                    2b:d5:6d:99:42:36:d2:5d:ee:2e:36:db:0a:fd:73:
                    a3:7a:2d:6a:30:4f:dd:c1:cf:fc:c6:47:14:50:51:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:A8:FA:DD:93:5D:E6:9F:39:E9:4A:4A:AA:26:F7:44:A3:0F:A9
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:62:67:20:f3:f6:22:72:3c:cb:e7:70:f1:55:b9:8e:6a:
         33:08:36:b1:c1:f4:d9:42:6a:0a:73:cd:09:f8:97:98:02:74:
         35:3b:76:44:95:79:c4:2d:94:ae:3d:13:4b:c9:89:77:82:d5:
         6d:9d:30:0a:03:7c:a0:24:46:68:a0:10:4a:ce:c7:7e:45:c7:
         ff:35:09:d5:e4:12:0b:c8:d9:c2:08:14:c4:b2:4f:a2:c7:06:
         ee:0f:cf:02:77:b1:df:4a:15:35:08:e2:9c:0d:1b:40:59:42:
         ef:c8:f7:53:1e:39:12:7a:ef:8c:ef:af:af:49:47:18:a4:2f:
         d9:fd:4f:29:bc:f3:50:4c:f5:d7:0d:bc:e7:d5:16:2e:2b:d6:
         97:7d:a4:a1:10:e7:00:bc:54:de:7b:7a:e6:48:3b:4c:8b:9f:
         57:22:0d:01:f8:53:4f:0a:61:73:83:cf:ab:48:ee:cf:a2:f4:
         66:66:aa:1a:bc:dd:b7:e2:db:54:c6:0c:a8:08:34:31:60:8e:
         7b:fb:ec:13:0d:cc:64:9a:c4:4c:d4:dc:66:61:11:6c:aa:0d:
         ea:95:ae:d6:5f:94:cf:36:03:04:9d:a4:0a:9f:88:89:33:43:
         95:af:05:7a:84:e0:49:23:61:60:37:06:57:a0:d1:13:b8:30:
         2f:56:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:28:51 2026 by rpki-client