Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File:                     ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier:          EdY5nv/dONFTF0qxX2QiIkrvTcmrvO3j4s9LyjJciyM=
Subject key identifier:   7F:1A:96:88:84:70:AB:D8:B5:5C:74:40:6D:E4:15:AB:C5:67:22:9E
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer:       /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial:       019EBA3466C9572E7C204DA11EE02BBA9194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number:          120C
Signing time:             Fri 12 Jun 2026 05:00:56 +0000
Manifest this update:     Fri 12 Jun 2026 05:00:56 +0000
Manifest next update:     Sat 13 Jun 2026 05:00:56 +0000
Files and hashes:         1: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (hash: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps=)
                          2: QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (hash: eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=)
                          3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: 1+lZ5Agt7YS8L1wLeHG0jbSa1xlexwYk8dZk92rcRuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:66:c9:57:2e:7c:20:4d:a1:1e:e0:2b:ba:91:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
        Validity
            Not Before: Jun 12 05:00:56 2026 GMT
            Not After : Jun 13 05:00:56 2026 GMT
        Subject: CN=7f1a96888470abd8b55c74406de415abc567229e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:6c:16:4b:ae:51:84:d7:63:bc:f7:75:a7:
                    aa:af:f7:2e:9c:60:d9:2f:87:cb:96:3d:d2:21:33:
                    62:44:57:27:3c:9a:1f:6e:af:1c:37:22:25:81:f5:
                    87:b5:ab:46:70:35:62:93:45:b7:df:32:a3:95:b2:
                    46:2a:88:8c:d6:2c:66:b3:ea:e8:6f:56:cb:c8:fd:
                    e7:50:0b:08:f9:5c:e0:19:0e:3a:01:74:5f:92:e3:
                    dd:00:7d:ef:46:b2:fd:8a:8b:f7:2c:59:ed:f1:3c:
                    9b:ff:fe:27:29:c8:c0:ed:67:9c:46:90:9a:f9:ac:
                    4e:62:4b:9f:03:e5:08:b8:d3:1a:3e:bd:26:a6:fd:
                    c2:d2:a5:3d:07:0c:62:63:56:2b:49:e3:5e:7b:09:
                    0b:8e:e1:76:d6:2e:9c:53:65:87:33:a7:59:c0:cd:
                    4e:b3:c2:17:6c:0c:e8:2f:99:28:79:db:30:8d:8c:
                    92:a9:31:4c:a4:fe:94:5b:d4:de:d3:2c:04:70:49:
                    14:47:cc:7a:aa:73:1c:49:f7:04:7e:b1:0b:92:8f:
                    c6:d0:b3:98:ba:ed:17:66:9a:ba:9b:e7:5d:3a:7d:
                    84:af:22:95:f0:9e:ab:82:31:60:b5:4e:0c:a2:97:
                    71:f3:40:ee:ab:ed:4b:bf:b5:ba:02:36:50:16:40:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1A:96:88:84:70:AB:D8:B5:5C:74:40:6D:E4:15:AB:C5:67:22:9E
            X509v3 Authority Key Identifier:
                keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:a8:1c:bc:04:65:e4:ea:da:c8:ff:d3:41:04:d7:33:d9:
         d0:aa:25:6b:72:0c:d7:17:a2:09:a4:63:71:b0:cd:54:00:cc:
         50:57:5d:11:67:99:1c:32:4f:5c:05:70:92:6b:ac:68:7d:af:
         f0:60:2f:6c:e2:da:57:6e:08:da:4f:a1:83:b1:6a:25:08:2e:
         ef:13:ed:66:ec:07:71:3d:00:20:16:36:7e:f9:e4:e7:c0:88:
         80:50:4a:7e:b7:f2:72:d2:76:20:ec:c6:de:81:4f:3f:64:df:
         3d:b9:f9:38:ea:5d:1a:6a:17:9c:5b:51:17:9c:c8:6a:54:95:
         1c:19:c9:a1:3e:39:3d:cb:7b:bb:8e:fc:20:46:df:2a:3a:d3:
         9e:13:9a:b0:ff:f7:2f:fb:64:2f:40:af:bb:c1:11:eb:16:47:
         da:7a:38:e8:f9:84:15:57:3c:7d:aa:13:ea:75:cb:5c:a8:1e:
         46:63:1a:66:af:16:24:b7:dc:d4:a1:fb:26:72:32:49:99:01:
         a4:3a:6a:1f:ee:fd:6a:84:df:4a:7e:30:f3:f0:a1:e9:db:f0:
         ab:65:d9:ee:be:7b:d8:65:cb:f5:cf:af:8e:17:7e:ef:47:6d:
         40:9b:03:e3:a1:f5:d1:06:5a:44:e1:8f:ca:38:fa:da:14:4b:
         b9:dc:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:51:45 2026 by rpki-client