Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File:                     Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier:          ajiMY1l5w4AxtZoDjAG7VpxCNHgbJHNRkspKra6guYM=
Subject key identifier:   8C:7B:59:7D:A5:B6:B4:BB:D2:84:75:F5:E1:4D:FF:2A:6D:87:CF:5A
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer:       /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial:       019EE69FC36EE1B688B34E5E8C7DF903D2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number:          16BF
Signing time:             Sat 20 Jun 2026 20:01:30 +0000
Manifest this update:     Sat 20 Jun 2026 20:01:30 +0000
Manifest next update:     Sun 21 Jun 2026 20:01:30 +0000
Files and hashes:         1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
                          2: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
                          3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: VQGfYsSg1z3oOvUZAX5ByXMBVJv6LHYGcjE3vZ2RkrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e6:9f:c3:6e:e1:b6:88:b3:4e:5e:8c:7d:f9:03:d2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
        Validity
            Not Before: Jun 20 20:01:30 2026 GMT
            Not After : Jun 21 20:01:30 2026 GMT
        Subject: CN=8c7b597da5b6b4bbd28475f5e14dff2a6d87cf5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:4f:35:2a:c9:fd:97:9a:b1:70:42:d9:f4:
                    26:92:70:3e:58:6d:f9:fc:e8:fb:5e:1a:62:4e:5d:
                    eb:9b:47:b3:3d:ea:b2:58:43:23:df:eb:44:0c:e0:
                    a8:0f:87:dc:7d:90:4b:d9:31:0b:a3:4c:41:bf:34:
                    2f:ea:96:99:f8:19:9f:84:e7:3b:fd:32:46:7a:04:
                    23:e0:49:8a:19:42:0e:4a:ce:8f:2c:cf:5d:74:0a:
                    de:5c:78:38:40:4c:90:a6:e7:d5:d7:91:50:d0:75:
                    59:79:3c:31:6d:a0:77:86:02:8a:22:bb:fa:0d:06:
                    e5:d3:22:18:36:04:84:e8:0b:9a:a8:c6:b9:00:a3:
                    cb:64:82:2f:b8:40:77:8c:e3:61:42:87:23:ff:98:
                    ef:f1:f5:a7:38:da:c4:23:e5:e3:1d:7c:04:5c:f8:
                    64:11:2a:28:5d:8b:7c:c7:01:92:83:05:3e:74:fb:
                    90:6e:90:56:c2:59:e9:96:fb:e1:56:fa:6f:e3:11:
                    c3:b0:fd:98:8e:67:aa:f5:23:a4:d7:d5:7a:0f:55:
                    52:8c:c5:8a:33:35:8d:c0:94:39:b0:e9:23:e3:5b:
                    6f:7e:4b:4a:09:96:d7:f9:e7:bb:7f:4a:13:2b:9e:
                    e6:ce:68:c3:2a:8f:2b:75:6e:87:8e:1f:10:95:b9:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7B:59:7D:A5:B6:B4:BB:D2:84:75:F5:E1:4D:FF:2A:6D:87:CF:5A
            X509v3 Authority Key Identifier:
                keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:d6:f5:fa:68:ba:c6:ff:63:9d:4f:98:b2:1e:33:65:b8:
         d3:af:b1:92:4b:90:5e:1d:bf:12:d2:a7:f5:38:38:b2:cc:8a:
         50:8d:05:25:35:67:31:62:7f:ad:ca:f5:39:83:b8:86:fe:86:
         44:6c:47:8e:2b:e3:82:98:da:71:bd:5f:65:fb:df:0a:f8:3b:
         08:e6:90:44:6b:3a:c7:42:c3:b3:4d:3d:e2:e1:27:2d:aa:40:
         50:1d:e0:09:a8:83:89:f9:79:88:ec:b8:a9:a5:66:63:45:b6:
         82:73:f0:26:dd:03:50:22:0b:5f:fb:89:2f:f5:a1:77:95:42:
         81:d3:19:9b:ce:1e:65:9f:10:35:c4:8c:26:62:b6:9e:8c:80:
         91:e1:3d:40:b4:4b:ca:23:fb:76:ea:54:c2:a9:33:c5:59:0d:
         3b:66:e6:38:fc:53:9b:48:e5:26:28:56:cb:80:09:30:af:ba:
         57:33:85:6a:8f:4c:d9:59:8e:a8:a9:ec:d4:f8:83:f8:f0:96:
         63:07:f2:36:9f:3b:1c:53:d2:07:63:09:a6:19:15:a6:ce:3f:
         c5:14:69:9f:82:5d:e0:93:64:c8:4d:16:69:c3:5f:0e:f4:fa:
         57:42:26:16:93:a2:16:a1:6e:3e:96:52:72:6f:ca:fc:8c:bd:
         db:b4:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:09:00 2026 by rpki-client