Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File:                     ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier:          JP0NR+ObNTycsjjR91WKAZOIBS1q+qBrApHcDjywdMo=
Subject key identifier:   74:55:2D:DB:36:74:47:B3:6A:AA:B2:E6:15:99:85:49:55:B2:7B:0D
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       019F122E6B6D940F4D0FA6E10DE6FA3BAACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number:          12F3
Signing time:             Mon 29 Jun 2026 07:00:59 +0000
Manifest this update:     Mon 29 Jun 2026 07:00:59 +0000
Manifest next update:     Tue 30 Jun 2026 07:00:59 +0000
Files and hashes:         1: Cmjf0diDBjMpXK9Rg283uLnjsa4.roa (hash: 3GF0sphnOBAsl682z8e9nrFNXKLn18jG5JHQOBCJ7qE=)
                          2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: yTOP59WY+NoE7zktk2ITQU2iwBs5vfMgmuHTRxhovOQ=)
                          3: moqlfmKaE2Btn3qkc70wanITJss.roa (hash: b78qrODXBzetBQGVOPaslkoF1rHcqGwC5Req+zJKsno=)
                          4: z7Q7Uc4sfRearIOg2fguIub7LO8.asa (hash: 8s++qk0Ww4g7wtu1bl1zax9iy1ShimKiVPRsQryJkyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:6b:6d:94:0f:4d:0f:a6:e1:0d:e6:fa:3b:aa:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: Jun 29 07:00:59 2026 GMT
            Not After : Jun 30 07:00:59 2026 GMT
        Subject: CN=74552ddb367447b36aaab2e61599854955b27b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:ec:e8:67:20:e6:93:60:1f:0b:f8:9c:b5:
                    b2:91:40:6b:cd:c2:7e:10:4f:75:56:8f:01:23:f4:
                    d2:3c:0d:d4:2d:93:60:04:e1:6b:02:fb:8d:bb:9d:
                    d7:da:12:70:f9:61:0d:d8:fb:e9:af:e6:6a:c6:0a:
                    12:4d:1c:6e:7f:8d:2d:10:bb:c4:4a:ae:49:95:ae:
                    ea:5a:e7:cd:d6:55:75:42:0e:41:70:02:08:dd:3f:
                    6a:9f:7d:f0:5e:20:cf:5f:8b:79:2b:2b:4e:13:cc:
                    c4:0b:b0:e2:a8:82:09:1b:a3:38:fb:de:45:d1:f0:
                    ef:b1:9e:6c:e7:85:b4:9c:7e:67:e3:72:f8:06:df:
                    a8:da:a2:f7:8a:3f:ea:65:8d:88:b7:a0:91:af:86:
                    e5:3e:9b:9b:c8:6c:da:b2:06:48:50:27:01:df:09:
                    a2:64:7a:92:23:72:1c:99:98:58:37:5c:25:8b:4c:
                    f5:be:bc:b9:e5:85:98:e5:ad:56:f1:21:20:39:be:
                    10:95:9c:5a:72:9f:38:67:89:46:dc:80:09:5b:87:
                    b1:9e:3e:bf:e0:d3:5b:9c:e2:98:3d:17:cf:63:33:
                    53:ea:42:14:67:1c:3e:b1:22:b9:79:99:78:40:7e:
                    a8:74:96:ce:12:e6:f5:f8:23:11:46:cf:7d:d0:06:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:2D:DB:36:74:47:B3:6A:AA:B2:E6:15:99:85:49:55:B2:7B:0D
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:eb:4d:0a:5e:6f:09:70:c7:38:1f:12:f7:04:57:65:64:88:
         95:40:76:7e:3b:8a:bf:b5:18:33:2d:65:04:b3:37:c3:e9:f6:
         5a:1d:6a:0f:4e:ab:8b:ee:c8:74:eb:f7:45:8b:2c:47:f9:a9:
         18:68:4e:fe:07:11:c9:c9:e2:4e:5f:9e:ae:b0:9f:d6:a4:da:
         a7:89:16:ec:fa:83:86:8d:b6:c5:79:f3:bf:d1:5f:f4:de:97:
         d1:39:19:f1:7e:d9:e1:1b:c1:f9:b2:fd:e1:a3:fe:01:9c:82:
         1e:3f:25:9d:ef:5d:da:67:e7:b5:b6:16:88:36:25:05:c2:33:
         8f:b7:ab:d6:b5:47:36:51:92:23:e7:41:74:2e:21:5a:66:2c:
         c6:71:4e:9a:b8:f5:7e:d7:d3:d8:de:0c:1b:81:da:b4:5e:69:
         ac:a2:e6:fb:d1:a9:09:32:61:33:e2:28:84:29:fc:d5:89:64:
         b7:f0:f3:35:f3:19:3b:67:61:8a:2d:3e:e1:c7:48:75:f3:3e:
         12:62:16:1c:d8:c5:a9:21:b7:f4:10:99:34:37:60:a1:c3:d2:
         3f:28:e5:e7:58:d5:cf:50:c1:52:e6:23:cc:82:b6:48:b6:4f:
         8b:2d:55:84:7e:46:fe:5f:00:a2:f9:be:91:c4:c4:bc:d5:9f:
         fd:80:61:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLmttlA9ND6bhDeb6O6rOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YmE4ZDY0ZTkwMWIzOWI1MDFlZDM2OTNlYzI3NDMwNzEz
ODg2ZTMwHhcNMjYwNjI5MDcwMDU5WhcNMjYwNjMwMDcwMDU5WjAzMTEwLwYDVQQD
Eyg3NDU1MmRkYjM2NzQ0N2IzNmFhYWIyZTYxNTk5ODU0OTU1YjI3YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwvs6Gcg5pNgHwv4nLWykUBrzcJ+
EE91Vo8BI/TSPA3ULZNgBOFrAvuNu53X2hJw+WEN2Pvpr+ZqxgoSTRxuf40tELvE
Sq5Jla7qWufN1lV1Qg5BcAII3T9qn33wXiDPX4t5KytOE8zEC7DiqIIJG6M4+95F
0fDvsZ5s54W0nH5n43L4Bt+o2qL3ij/qZY2It6CRr4blPpubyGzasgZIUCcB3wmi
ZHqSI3IcmZhYN1wli0z1vry55YWY5a1W8SEgOb4QlZxacp84Z4lG3IAJW4exnj6/
4NNbnOKYPRfPYzNT6kIUZxw+sSK5eZl4QH6odJbOEub1+CMRRs990AYKsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRVLds2dEezaqqy5hWZhUlVsnsNMB8GA1UdIwQY
MBaAFGa6jWTpAbObUB7TaT7CdDBxOIbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEt
MGIzZTdlYmU0YWMyLzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEtMGIzZTdlYmU0YWMy
LzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAputNCl5v
CXDHOB8S9wRXZWSIlUB2fjuKv7UYMy1lBLM3w+n2Wh1qD06ri+7IdOv3RYssR/mp
GGhO/gcRycniTl+errCf1qTap4kW7PqDho22xXnzv9Ff9N6X0TkZ8X7Z4RvB+bL9
4aP+AZyCHj8lne9d2mfntbYWiDYlBcIzj7er1rVHNlGSI+dBdC4hWmYsxnFOmrj1
ftfT2N4MG4HatF5prKLm+9GpCTJhM+IohCn81Ylkt/DzNfMZO2dhii0+4cdIdfM+
EmIWHNjFqSG39BCZNDdgocPSPyjl51jVz1DBUuYjzIK2SLZPiy1VhH5G/l8Aovm+
kcTEvNWf/YBhIw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:11 2026 by rpki-client