Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File:                     zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier:          ynNcOj75BGNJDPB1iqiWx400EbPl5y53CT5J3UMSMnU=
Subject key identifier:   DA:26:96:90:5A:69:77:32:B4:DD:FC:5A:EE:C8:DF:BA:8B:EB:01:4A
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer:       /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial:       019EB921F940B27584A9ABC5EC8D35E47D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number:          034C
Signing time:             Fri 12 Jun 2026 00:01:11 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:11 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:11 +0000
Files and hashes:         1: Hv6nIX8HVFeyFg4uQleXqqT5MWI.roa (hash: HIwiJMcqVUyXLS/mAM0+jLz/PX0Vv8ko69oawzAsSDQ=)
                          2: gu4GPTRfWQO75vY7xSH9xzSoqQY.roa (hash: odhJabg6AJqtqcZtfP2GyOkQsROVO1GzPGrLF/Q0sqM=)
                          3: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: Z+xHKgZKPN8IzptxbhxssYD5P3DjpypAi9cRZChoPOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:f9:40:b2:75:84:a9:ab:c5:ec:8d:35:e4:7d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
        Validity
            Not Before: Jun 12 00:01:11 2026 GMT
            Not After : Jun 13 00:01:11 2026 GMT
        Subject: CN=da2696905a697732b4ddfc5aeec8dfba8beb014a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:66:0e:40:b7:24:33:fc:3f:b3:88:9c:91:
                    04:09:7e:33:7f:e6:46:8e:7d:3f:76:1b:9e:ec:e9:
                    9c:d6:6f:53:48:14:bb:ce:b2:2d:95:7e:63:b3:24:
                    33:59:5d:9c:e3:5d:bc:7e:ec:5b:2a:2a:70:64:a7:
                    9e:bc:c9:b0:63:dc:89:bf:38:50:4b:8c:29:da:20:
                    8a:ff:fa:14:6a:38:7d:bb:82:9d:ea:cd:18:07:85:
                    ac:eb:cb:d2:b0:3b:fc:ca:8c:69:0c:14:14:43:b3:
                    47:4c:33:b9:cf:19:88:dc:42:89:25:79:df:7f:a3:
                    01:70:75:e9:e1:21:c5:62:8f:d3:f5:50:28:2d:b3:
                    b5:cd:9c:9f:7d:66:2c:d0:7c:cc:b4:c7:b2:80:e6:
                    ef:f3:2f:ef:b3:cb:40:33:05:b2:37:aa:d2:33:40:
                    b9:54:ef:70:e2:ce:fc:3d:9c:96:c8:fc:96:69:88:
                    42:f0:ab:b0:4a:db:e8:e4:07:ef:b1:07:0a:48:91:
                    cc:e0:54:6b:4a:be:7b:5c:5e:8b:a3:03:0f:62:03:
                    80:c4:f4:54:99:e8:b9:20:87:76:e9:42:2c:dc:80:
                    32:b7:69:37:47:1f:3a:cc:c5:ef:85:d0:c0:78:67:
                    c8:66:e3:05:a9:f9:00:0c:63:38:7d:e4:ca:a8:66:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:26:96:90:5A:69:77:32:B4:DD:FC:5A:EE:C8:DF:BA:8B:EB:01:4A
            X509v3 Authority Key Identifier:
                keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:c0:8b:28:93:5a:d1:2f:cc:85:ec:c1:d7:38:8a:4e:03:
         67:34:9e:8d:bc:b9:11:93:c5:1b:40:89:a9:89:31:5b:1d:2b:
         a4:42:24:9d:ec:e0:dd:dc:89:52:e6:6f:18:55:b9:3b:ca:d5:
         1d:28:a6:b5:cb:2d:fd:d1:4e:98:48:39:40:5d:ec:55:2e:23:
         47:38:c6:e2:a8:76:37:02:1e:ec:16:44:85:ff:0b:a5:94:fb:
         6d:86:a1:07:e8:09:b7:18:0a:b0:98:20:1e:12:e6:ad:7c:b0:
         3f:68:1b:84:47:b1:92:8e:13:29:c9:49:66:11:5d:78:6c:26:
         02:aa:36:70:b5:f7:9f:16:9a:a4:61:e0:0c:2b:3f:e2:40:0d:
         52:e8:9c:4f:a9:1c:e3:90:5a:ba:28:15:b6:ad:80:9e:e0:aa:
         ff:30:92:ad:81:f0:b3:8a:4a:01:27:bb:98:7a:0d:4f:c9:7d:
         ca:ac:48:28:19:3b:14:89:81:00:94:0e:ee:1d:55:a4:f2:ca:
         7b:28:b4:a7:01:a4:1e:cb:31:6d:a5:51:28:c6:8c:6c:d6:e3:
         df:d8:af:12:5c:3f:3d:36:3a:d7:77:de:d1:d4:ff:df:c1:39:
         44:29:ff:ba:26:49:d9:dc:f7:33:24:41:b2:01:91:8c:76:06:
         10:e1:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:49 2026 by rpki-client