Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File:                     ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier:          MYReclJady8MorRBv85RbSk5vYr7sA1CtE1TtSGlMCo=
Subject key identifier:   1C:D1:B9:0B:70:F8:E4:28:1E:D2:85:6E:A5:81:82:2A:43:1A:56:D4
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer:       /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial:       019EB733949B25D0EE8C51A9491386F16B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number:          1896
Signing time:             Thu 11 Jun 2026 15:01:11 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:11 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:11 +0000
Files and hashes:         1: USooHDGW_QeqYRyqa6kck-Wwdw8.roa (hash: VauOA3CJ0j4kbwlbCKNmu8qN0LtwGSRo+52ifzBfLcs=)
                          2: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: 9fKHrLWrz0cLz5OymxPzvT5WmHpi9QcGl+DAOQoR/6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:94:9b:25:d0:ee:8c:51:a9:49:13:86:f1:6b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
        Validity
            Not Before: Jun 11 15:01:11 2026 GMT
            Not After : Jun 12 15:01:11 2026 GMT
        Subject: CN=1cd1b90b70f8e4281ed2856ea581822a431a56d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:8e:6b:cf:fc:ab:85:98:c1:3c:56:e9:5a:
                    9e:bb:99:68:82:af:eb:a2:8f:12:71:b6:40:e4:92:
                    11:93:2c:84:23:72:e5:f6:58:f1:c8:11:39:b8:dd:
                    f9:02:5e:88:74:1b:f6:e2:84:5d:f5:82:2a:96:51:
                    81:7b:1c:cb:bf:07:31:78:38:34:70:6d:48:a6:46:
                    af:0e:c9:97:1d:32:44:17:c2:a5:ad:f3:1b:d3:63:
                    09:3f:43:81:5e:49:0f:ae:d1:67:c2:6a:8e:15:60:
                    5f:0b:8c:d1:16:7b:46:1e:f4:9b:49:d4:73:ee:a2:
                    4d:7d:8e:43:d7:7d:63:21:67:8d:77:c3:ff:af:c8:
                    3e:ac:4a:54:dd:98:86:19:c0:9a:a3:24:09:c5:b1:
                    bc:85:bf:0b:2b:11:5a:56:fb:c0:cb:b0:42:7d:bf:
                    e0:37:f9:e9:6e:52:df:22:22:f1:bc:f6:59:26:32:
                    cc:05:7a:fb:c6:2b:7c:f2:e3:fd:b9:99:32:69:40:
                    a2:4f:d3:4c:08:54:1a:c0:f7:83:a4:f0:53:43:f1:
                    c9:50:66:47:45:15:e4:0e:f7:68:fb:10:d9:3a:19:
                    ba:21:5f:53:c9:5d:55:7f:45:f5:89:c9:de:06:78:
                    b4:fb:27:38:6a:fb:b6:5e:be:af:f1:30:43:c2:41:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D1:B9:0B:70:F8:E4:28:1E:D2:85:6E:A5:81:82:2A:43:1A:56:D4
            X509v3 Authority Key Identifier:
                keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:b6:77:6e:5e:3e:78:6f:34:de:5f:5d:f2:18:e3:8b:b6:
         0f:98:c9:6e:3d:a7:ec:7e:d6:38:2d:96:5f:00:6b:40:19:ba:
         cb:80:95:21:db:54:6b:00:d1:29:20:57:f1:71:da:61:e8:b9:
         13:7c:31:1c:ff:0d:75:46:61:57:49:fd:aa:5c:90:3c:f5:db:
         bd:e8:34:c2:a9:f5:ce:11:52:cd:05:2c:53:19:1c:7f:6f:fc:
         e7:3d:9d:cc:aa:ac:08:9c:c3:2b:5e:72:bb:9c:64:6e:02:f8:
         92:72:1a:a7:07:17:95:37:b7:17:37:ba:76:50:86:e6:74:0b:
         3f:fb:ca:c6:20:e8:d2:d1:e9:50:ac:5f:ba:2f:13:0b:83:a5:
         79:fa:53:22:87:81:85:07:c6:6d:bc:1b:0a:18:93:23:ba:d1:
         c6:7a:44:25:27:9d:20:0a:20:ab:73:6d:4d:9e:10:9c:e7:ff:
         2f:02:02:1a:b5:71:f1:a6:df:9b:47:ab:fa:b8:ad:01:2d:6f:
         a7:18:f5:f9:b5:02:b3:0b:f7:19:7c:0b:22:9b:20:fc:1b:db:
         c7:92:ab:69:db:1f:cd:1f:45:a1:2f:40:ce:0e:8c:e3:5c:00:
         b4:f1:16:12:38:e2:b4:7d:18:a2:cf:e0:a4:5c:ef:83:19:b1:
         45:ac:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:15 2026 by rpki-client