Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          vlPFLI7R7SbIeaeadO+dM/+EkSKY846MLmoSJwlHcsg=
Subject key identifier:   09:42:DE:40:6F:76:74:EC:09:9C:D7:DB:7C:99:17:30:4E:A8:BD:E2
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       019EB98F143D0BE9D983F4FC8190E1566139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          0892
Signing time:             Fri 12 Jun 2026 02:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:22 +0000
Files and hashes:         1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
                          2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: xggJC9uz1/FKN26Fg/aeEESDDRsoxrnd3VO3LU5Rrrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:14:3d:0b:e9:d9:83:f4:fc:81:90:e1:56:61:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Jun 12 02:00:22 2026 GMT
            Not After : Jun 13 02:00:22 2026 GMT
        Subject: CN=0942de406f7674ec099cd7db7c9917304ea8bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:fe:a7:38:83:1f:04:2e:95:7e:67:7e:3e:
                    1d:59:ea:20:67:8c:b7:fe:6a:a9:a7:da:af:12:8d:
                    d7:6a:bf:0d:74:58:8e:0e:98:89:6b:5a:d3:89:b0:
                    45:c6:5b:d1:9c:a1:86:5b:34:4a:45:b3:47:e5:60:
                    be:f3:41:cd:1f:a3:a7:55:c3:41:90:ef:b3:db:4e:
                    08:96:9b:b1:a5:eb:d3:c4:63:66:1c:67:85:c3:8c:
                    97:f8:73:f9:59:84:eb:36:58:90:db:00:c2:ba:16:
                    38:ab:4a:b4:eb:c8:7a:80:eb:0d:51:da:4b:4e:ab:
                    cc:4b:b7:d7:a1:24:4d:ff:e0:89:af:33:80:d2:16:
                    00:32:86:46:95:cc:0c:c7:cb:ca:0c:3f:c7:70:68:
                    a4:6e:d6:cd:9f:27:82:94:4d:82:49:39:2a:9b:ae:
                    6a:45:b2:ba:4c:fc:0b:8a:f2:a5:b8:2d:84:0f:d9:
                    38:94:79:fa:7a:a2:22:31:c7:af:b9:ef:d4:e9:51:
                    c1:7e:db:15:23:d0:d3:eb:cb:31:d7:3b:7b:87:a3:
                    54:23:7c:21:45:49:d1:fc:9e:f6:e2:50:54:05:23:
                    4f:f6:f4:de:c5:20:bb:90:8a:f0:81:6a:b6:28:9d:
                    10:34:94:0f:e1:25:c0:ff:63:8a:0f:38:aa:1b:41:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:42:DE:40:6F:76:74:EC:09:9C:D7:DB:7C:99:17:30:4E:A8:BD:E2
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:fb:1a:6e:ca:55:ac:1e:c1:e7:01:11:fd:c3:84:37:91:
         0a:12:4e:78:97:54:e8:cc:58:83:7f:d5:ef:65:a9:88:7c:c0:
         f9:c0:e5:4c:e8:28:19:02:92:26:0b:55:30:3e:a1:43:85:57:
         a8:95:a3:55:94:f0:03:b8:9c:46:ad:7e:78:c1:9f:8e:89:b9:
         83:9a:6a:fb:17:2b:c5:a6:3a:3e:3c:1e:e9:d7:f3:bc:57:4a:
         ad:4e:e1:1e:49:6c:d0:85:b2:40:ca:eb:56:97:c7:be:b4:36:
         f3:45:56:f8:88:e0:f3:4d:a8:d7:93:40:36:fb:12:5d:d2:81:
         2d:f5:7b:48:20:e8:64:ce:46:03:c5:e9:28:b3:85:a7:f5:ad:
         09:49:11:9b:3e:77:3d:16:23:c0:f8:52:8f:33:33:15:b7:6b:
         67:09:1e:16:ac:e8:19:dc:98:5c:0d:77:1d:2a:99:2f:b5:02:
         4e:b1:83:9d:62:6a:37:f7:3b:c0:52:42:16:e4:0e:44:3a:11:
         0e:2f:9c:b8:91:9d:88:9c:4b:19:f5:c8:7d:81:20:4b:d4:28:
         7f:0f:2e:c8:68:c1:fe:10:7d:53:d3:2e:e3:90:8f:98:4e:91:
         78:45:dc:82:9d:12:1f:c1:25:a2:49:4c:a5:cc:ea:bf:66:99:
         30:31:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:58:47 2026 by rpki-client