Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File:                     Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier:          a2v0FHO/OrF19NQFO/UWbcqLtBNfsGRP0DwPFtFiSfQ=
Subject key identifier:   C5:FA:C7:F0:03:4C:76:94:06:4F:0F:E8:6D:9B:DA:26:29:8D:6B:2F
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer:       /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial:       019EB8B3C4640BF1FA6B67980EAC42636CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number:          105F
Signing time:             Thu 11 Jun 2026 22:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:49 +0000
Files and hashes:         1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: RHIRCdcOKrsG85TLFdE6ArBX+5G421GQ5MUGULTWf4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:c4:64:0b:f1:fa:6b:67:98:0e:ac:42:63:6c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
        Validity
            Not Before: Jun 11 22:00:49 2026 GMT
            Not After : Jun 12 22:00:49 2026 GMT
        Subject: CN=c5fac7f0034c7694064f0fe86d9bda26298d6b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:ad:f0:54:68:05:22:e8:b3:a0:4d:20:89:
                    59:97:eb:26:60:26:20:f3:d7:30:ab:2c:3a:c7:ab:
                    8a:43:6c:2f:d0:ed:cf:8e:f4:df:c1:39:ff:10:2b:
                    7c:fe:25:7e:71:8b:22:09:6f:74:39:a4:cb:2d:83:
                    36:68:45:f4:b3:ec:26:2d:f9:5b:3e:d5:99:88:52:
                    d9:dd:b0:63:b8:b6:37:5b:30:9a:ba:ee:33:fc:6e:
                    f4:44:13:cf:e5:e3:a3:ac:f9:e2:ff:17:66:48:0d:
                    6f:93:7e:63:ff:15:af:f9:1f:28:6f:5d:35:ab:8f:
                    44:2f:a1:00:cb:a6:dc:4e:a6:cc:fb:7d:ac:18:98:
                    7d:53:ea:94:d7:bb:af:a9:e4:43:22:ee:0a:36:f4:
                    59:cf:2b:d3:24:26:72:e0:7e:36:25:36:22:cd:a2:
                    ff:3f:ee:d5:7c:c5:96:32:e7:ad:42:74:74:8f:3f:
                    99:d8:4a:e2:07:a4:a7:58:71:10:80:cc:64:7b:cb:
                    c5:d3:a3:7a:c5:28:86:72:9f:2d:f7:80:d0:1b:a1:
                    7e:14:32:88:3b:78:93:d9:5f:25:e6:03:b7:ad:1a:
                    cf:95:59:bd:71:a9:66:dd:0d:d5:a5:59:89:8a:01:
                    cc:a4:26:76:b8:da:35:99:97:aa:2f:a5:3a:3b:09:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FA:C7:F0:03:4C:76:94:06:4F:0F:E8:6D:9B:DA:26:29:8D:6B:2F
            X509v3 Authority Key Identifier:
                keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:a8:eb:e7:6f:4f:0e:16:11:1b:d1:c9:ea:da:20:b5:de:
         49:04:d9:94:36:8a:0a:e0:cd:47:a0:b4:f7:64:84:2f:1b:06:
         9c:11:68:8a:26:e2:fe:f1:7d:16:1c:55:cb:7b:2e:8c:d8:29:
         63:70:c1:51:95:47:50:b9:60:a5:dc:f7:f5:86:79:0c:09:b5:
         ac:64:46:52:25:f0:05:65:e3:03:bb:65:ed:31:f3:49:5b:ac:
         3f:d1:2b:3b:bd:6b:0c:c1:d9:70:0d:72:7a:25:52:3d:39:73:
         a3:9b:96:bd:65:9e:d3:5b:c3:2a:90:a4:8f:83:80:03:ad:57:
         35:f3:98:2d:fa:17:ae:0f:68:6e:e0:e6:98:78:dd:db:94:05:
         4e:45:4e:26:e6:22:d6:ba:31:2d:bb:8b:62:97:70:9c:59:08:
         8c:a0:f4:7c:e0:1c:83:21:a2:8b:92:9f:70:ed:ff:9d:3b:64:
         fc:e4:85:01:60:0d:02:b5:51:98:3d:05:56:44:b0:ba:6b:a0:
         30:45:dc:5c:e8:ad:66:28:19:79:81:f4:3a:87:ce:71:d2:c6:
         86:c7:28:d4:b8:3e:2e:ab:78:0c:48:1c:ff:bf:ca:6c:8c:ba:
         72:2d:26:54:1b:eb:e1:50:2e:39:4e:66:d1:c0:98:c5:f1:37:
         0d:a0:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:30 2026 by rpki-client