Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File:                     ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier:          c12N3xXf4+D+Zl18HvxkeE8BOaOqFjoHEhnN4IBssVM=
Subject key identifier:   A3:60:3C:85:CB:F1:74:86:17:67:3D:FA:15:D7:DD:F6:A3:8A:F4:CC
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer:       /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial:       019EB7D784A20B3F6C33BD2B941478BFE3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number:          04F5
Signing time:             Thu 11 Jun 2026 18:00:15 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:15 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:15 +0000
Files and hashes:         1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=)
                          2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: LPIldfAE85YFjdZMwkylxfu+LDnkHpxrfkFw72V9RQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:84:a2:0b:3f:6c:33:bd:2b:94:14:78:bf:e3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
        Validity
            Not Before: Jun 11 18:00:15 2026 GMT
            Not After : Jun 12 18:00:15 2026 GMT
        Subject: CN=a3603c85cbf1748617673dfa15d7ddf6a38af4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:d1:ad:42:65:9f:34:96:ae:b4:d1:fd:a8:
                    d4:8b:39:27:c9:ad:76:08:3e:a2:0e:23:48:46:98:
                    43:aa:7f:d3:b5:86:1c:31:55:66:86:cd:50:d5:56:
                    8a:2a:7c:67:a9:7a:31:00:3a:cc:92:d7:71:21:3b:
                    e5:1c:2e:97:7c:4e:47:1a:a8:06:05:7a:b4:7b:95:
                    60:e0:91:92:93:fa:38:fe:22:e5:98:93:30:c3:85:
                    1f:5b:1e:3a:43:37:10:16:ba:a6:f7:02:6c:e4:1d:
                    07:5f:64:da:91:9f:d8:3a:8a:f4:bd:a6:9a:98:98:
                    57:bc:1d:6b:2b:b3:1f:f0:27:86:53:22:43:14:84:
                    bd:45:d5:2a:d0:f6:ee:83:fc:5c:e2:ef:51:32:08:
                    ab:c2:33:bc:dd:e5:42:ea:5f:02:c8:96:34:65:7b:
                    53:6f:77:96:ac:d1:62:4f:b2:84:e8:c3:52:f2:76:
                    0f:b2:78:f5:4b:af:11:dd:29:d9:20:07:52:d0:6e:
                    44:a6:5b:7e:c4:2d:d0:1e:66:4f:c8:c4:6f:7b:8d:
                    03:3d:88:52:d9:36:3b:cd:db:ff:d9:34:8b:47:7c:
                    78:36:8b:2b:62:a8:8b:50:ec:4f:11:e8:a1:de:f0:
                    bd:fc:45:50:99:f9:eb:c9:bc:25:b2:04:26:d9:29:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:60:3C:85:CB:F1:74:86:17:67:3D:FA:15:D7:DD:F6:A3:8A:F4:CC
            X509v3 Authority Key Identifier:
                keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:0e:10:d7:a1:46:07:3d:c1:3e:74:8b:27:7d:7a:f4:ea:
         f3:d8:d3:12:5f:69:5e:8a:1a:d2:e6:6d:17:21:77:ac:6d:c8:
         36:de:f4:0d:39:ad:9d:ef:9a:13:4e:b0:86:41:0f:84:e5:7a:
         e0:29:00:6c:d0:91:e2:17:20:f1:bf:b0:f9:29:14:51:ae:95:
         ad:ea:bd:a6:05:60:a2:89:4a:fb:ed:4f:b9:af:a4:43:4d:ac:
         bb:c3:88:c9:10:96:81:35:73:64:0b:2c:9c:cd:29:17:ae:bd:
         e9:09:b8:13:b9:f7:cf:87:61:c9:8b:04:3e:dd:c3:6c:15:38:
         d9:e6:84:92:7a:af:d5:a8:5c:bf:cf:2c:3f:ff:cb:56:d2:4b:
         64:ac:a1:06:2e:9b:70:21:31:92:a3:50:25:9f:1b:23:17:4c:
         2d:3e:77:53:e1:a3:c4:7e:d1:75:fc:7d:65:1e:0a:60:26:54:
         71:bf:be:da:b3:e7:bb:5d:7e:52:13:96:94:d4:f8:1a:86:38:
         ad:50:2f:f7:af:2a:aa:3f:99:f8:c1:be:ac:8e:30:1b:ad:11:
         33:de:80:c3:d2:fe:7a:20:4d:cd:d9:29:6e:30:ed:79:3a:89:
         4a:ad:24:e9:37:87:74:20:d1:13:07:de:59:ce:83:f1:2b:40:
         35:81:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:28 2026 by rpki-client