Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File:                     Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier:          poT9D6WNn/wBq7unNYKa1MMiWa9+QjaAGflE2xwDTVs=
Subject key identifier:   54:30:26:3D:7E:24:2C:8C:B8:60:20:AC:7E:A8:A4:A5:8B:C9:C8:B5
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer:       /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial:       019F197A9A6AEBDE5D138FBE7B108FA229D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number:          0E41
Signing time:             Tue 30 Jun 2026 17:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:32 +0000
Files and hashes:         1: CUuCv8yUGO5kzdNG-LcqlTW9-Gw.roa (hash: pVICflN/XXSbn0ha6nAv/rKKeN2icslh3J8MLWXAR5M=)
                          2: RkG3qch8pEJIDv3JOGIWd52X2iU.roa (hash: M5MoWtPVqA3Ex0e6k8hDbIXhQvvVk+rf1YW1Yh7X0/M=)
                          3: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: uZdatyqOyEo9xDZY7NVWkY1R7XVUzSMAFTFSRPhJ6mk=)
                          4: dc9xd7P00DdFJQf-A3nQhrQ5AFw.roa (hash: L1i0JRO7qbrA6QVK9ZBM3Dv/eB/asOSRW10wtAZmW+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:9a:6a:eb:de:5d:13:8f:be:7b:10:8f:a2:29:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
        Validity
            Not Before: Jun 30 17:01:32 2026 GMT
            Not After : Jul  1 17:01:32 2026 GMT
        Subject: CN=5430263d7e242c8cb86020ac7ea8a4a58bc9c8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:c4:5d:75:12:8f:c0:ea:45:1a:2c:c8:88:
                    52:d9:70:ea:2e:f2:99:a0:a0:70:ae:b0:f5:fd:b4:
                    22:31:51:72:2a:3a:41:b2:9d:0d:80:3d:e4:ea:2d:
                    7d:e8:37:37:15:d0:0c:a1:0e:50:d1:55:87:2a:8a:
                    b7:06:d5:5d:9a:27:31:4f:67:24:46:47:f8:5d:e0:
                    08:1e:a9:af:53:8c:49:f1:5f:9d:f1:d5:ea:1b:f6:
                    62:5f:0b:eb:ef:16:2f:2b:f6:07:46:1d:53:d3:d1:
                    76:f5:8e:5a:14:f8:30:a4:be:21:2f:93:19:37:90:
                    1c:59:66:fa:d3:2d:aa:7f:c3:35:99:da:05:29:18:
                    4f:dc:2c:1c:fa:b6:55:62:b0:73:b7:3d:29:e2:77:
                    0d:cc:bd:59:44:34:6a:73:3e:29:e8:2e:29:03:68:
                    46:54:38:8a:67:d5:48:02:d9:2c:52:16:3d:f9:23:
                    79:1f:93:62:3e:84:79:a0:0f:83:dc:2f:79:38:22:
                    77:3c:3f:5a:84:49:33:8c:47:05:f6:46:92:5f:ed:
                    26:ee:48:aa:5b:08:33:46:31:d6:9e:cc:e0:b7:34:
                    55:2f:93:23:45:da:51:d5:5a:ae:02:3a:6b:36:3f:
                    f3:6e:14:a7:cd:0a:79:60:d3:70:f5:60:be:36:a2:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:30:26:3D:7E:24:2C:8C:B8:60:20:AC:7E:A8:A4:A5:8B:C9:C8:B5
            X509v3 Authority Key Identifier:
                keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:e9:31:34:04:15:39:bf:bd:1a:0b:e4:e6:99:f3:87:38:
         2c:6a:ab:b4:13:ee:b9:04:3a:5c:33:46:26:60:88:0a:97:69:
         7f:02:fe:fe:86:d1:ab:1d:9d:aa:98:94:b6:ad:75:f9:b4:29:
         d8:77:f7:be:65:bd:3d:5d:0d:b7:69:36:95:f5:93:33:62:54:
         80:f7:80:ae:b2:98:ad:8c:10:5c:ea:d0:e5:75:d0:ad:17:cc:
         32:3f:8c:e5:c0:0a:d6:4f:c3:86:d2:e4:f9:8d:7b:06:d6:78:
         73:73:c5:c1:15:a2:61:3f:55:17:4e:9f:12:dd:5f:32:ba:2a:
         fb:0a:83:8a:b7:71:14:7f:6a:f6:43:d3:1f:a3:6e:c9:d9:88:
         1c:85:44:e6:65:78:05:c5:d4:e6:02:30:d1:d5:d4:11:6c:dd:
         a6:43:9d:e0:19:e1:ee:b1:67:14:76:24:de:ce:b7:f0:0f:67:
         83:cf:78:13:d2:db:fb:f4:cf:82:58:35:f9:6b:ad:74:4a:7b:
         62:63:6c:53:d4:ff:06:7d:70:7b:62:15:8a:b7:13:93:a6:2b:
         0c:f1:5b:08:4f:a0:6e:9e:d8:39:92:31:b2:2d:29:92:79:f9:
         cd:a2:61:b5:46:6f:c8:55:12:71:5b:c4:0e:de:1d:b4:1a:a4:
         f8:a8:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:38:33 2026 by rpki-client