Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File:                     ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier:          R0xm1gn7iRAZ3te67jfEsBUB0X5ydz9wNg91ZVK+fKY=
Subject key identifier:   B2:7F:89:52:43:A0:0B:68:45:A7:39:73:87:9F:41:5D:9B:BA:DA:23
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer:       /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial:       019EE40CE4A116C71DD7FEE283B6E9D5F244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number:          08E6
Signing time:             Sat 20 Jun 2026 08:01:50 +0000
Manifest this update:     Sat 20 Jun 2026 08:01:50 +0000
Manifest next update:     Sun 21 Jun 2026 08:01:50 +0000
Files and hashes:         1: X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa (hash: r5fWgTPjjmB31St0AmzLTssy0JP6/zDB0uGldcQoQt0=)
                          2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: 3QB2YCJn+3Uos/tT1CM/6JsMeakGGK3wOr42SPKF40o=)
                          3: tU70CLv_FnaoDz0xj6FPiJvGn-k.roa (hash: G4YFrMOaB3YYQfWSQNKXIK2SLKAYNELC+w3hU94N7bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e4:0c:e4:a1:16:c7:1d:d7:fe:e2:83:b6:e9:d5:f2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
        Validity
            Not Before: Jun 20 08:01:50 2026 GMT
            Not After : Jun 21 08:01:50 2026 GMT
        Subject: CN=b27f895243a00b6845a73973879f415d9bbada23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:f3:64:a9:18:f6:4e:7b:e5:b7:48:40:7c:
                    15:4e:0a:b8:b0:6b:2b:17:f0:b4:b7:9b:da:a7:01:
                    56:5a:aa:89:fc:2b:c2:12:b2:73:3a:de:6c:e0:e4:
                    34:ac:09:10:fc:d8:05:3b:81:41:16:d8:15:43:3a:
                    02:15:38:df:a9:42:41:0c:e0:d5:ea:34:06:71:80:
                    36:8d:d4:eb:3e:4c:a4:76:51:7b:a1:6f:a4:b3:97:
                    02:9c:31:da:cb:8f:1b:ae:6a:e6:69:c4:9c:0a:e1:
                    fb:51:a3:8f:ee:2b:bd:79:9f:d4:6b:98:14:ea:33:
                    76:41:4f:53:c0:6c:8a:f9:f6:0e:f4:cb:67:1c:d8:
                    91:dd:32:d4:db:3f:02:30:97:02:ab:9e:d3:1f:fa:
                    84:ed:9d:45:80:98:35:95:cb:b4:c6:b7:f7:f9:3e:
                    a0:23:ef:26:37:2b:86:e0:03:97:8a:d9:80:57:a4:
                    ea:ea:9a:91:45:94:aa:6e:06:da:d1:5b:bb:d9:6a:
                    5d:0a:72:e6:94:11:50:67:93:d0:30:3d:db:cc:79:
                    33:9e:6b:e9:77:fa:33:ef:12:a4:eb:06:7f:c6:5d:
                    ac:a3:66:be:67:a5:e3:38:0b:b4:a2:4c:9e:e4:d9:
                    28:6d:b0:0f:8b:81:69:ce:65:47:59:13:22:01:16:
                    39:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:89:52:43:A0:0B:68:45:A7:39:73:87:9F:41:5D:9B:BA:DA:23
            X509v3 Authority Key Identifier:
                keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:b3:ba:ff:5a:10:e8:b8:6f:da:cd:03:ec:63:91:c1:de:
         d1:2b:cb:87:1d:a4:5e:64:ee:7f:93:26:9d:d6:36:94:1d:a3:
         04:de:c4:f5:27:19:fc:a5:cb:34:31:43:7d:f4:21:5c:57:64:
         fe:60:f8:e4:68:68:85:16:84:be:47:3f:95:e9:04:0e:c3:df:
         3c:a3:cc:9d:9d:8f:ea:5a:c8:5e:f5:b3:9c:27:7b:14:9f:cf:
         83:80:47:18:60:50:8a:24:5d:bb:2b:86:07:b5:7f:8a:f8:d9:
         5b:92:02:c0:d7:6b:0c:4d:38:51:e4:0d:10:85:6d:7c:1b:11:
         45:f5:f6:22:cf:18:f7:2a:6c:99:b1:6a:80:59:b2:fb:73:64:
         7d:1b:e4:e7:fb:bb:9b:66:e9:d2:f2:3d:3c:f1:45:3f:6f:c8:
         3f:c3:57:fe:3c:6a:7a:50:f2:8d:8e:16:76:11:8a:50:70:4c:
         16:c7:45:23:0f:fd:7b:2b:cf:92:ed:28:70:99:dd:1d:b5:6b:
         f7:8c:fb:b6:56:e7:46:7e:97:d7:e3:71:be:56:e6:7a:ac:68:
         65:cd:6c:f7:4d:88:7b:65:55:dc:e0:47:b1:55:dc:ee:00:fd:
         77:ea:8c:28:0a:73:c4:90:3b:3b:8e:80:4c:09:2a:17:f6:dd:
         d6:9d:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:26:09 2026 by rpki-client