Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File:                     zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier:          GcuuMG6+DtaKwflMXrHPOaUutzeFlttXsUJhgczb7mI=
Subject key identifier:   8E:38:7B:CD:AC:06:7F:AD:59:F5:4D:3A:C5:E0:12:FE:33:C0:BF:DC
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer:       /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial:       019F19B1A44EA23230894C79CA7B52DA5948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number:          12DC
Signing time:             Tue 30 Jun 2026 18:01:39 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:39 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:39 +0000
Files and hashes:         1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
                          2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: yXhOFBt4JXhKaHBFTa1ntvWCOLdjdnR+zZ0oNViUSAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:a4:4e:a2:32:30:89:4c:79:ca:7b:52:da:59:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
        Validity
            Not Before: Jun 30 18:01:39 2026 GMT
            Not After : Jul  1 18:01:39 2026 GMT
        Subject: CN=8e387bcdac067fad59f54d3ac5e012fe33c0bfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:11:25:06:1a:de:8b:1b:cf:0f:a4:e6:f2:
                    6b:ae:64:2e:2b:78:20:83:28:eb:a0:2a:fa:c3:cf:
                    83:85:11:1e:f4:45:0c:47:5e:bd:2c:04:95:38:48:
                    66:60:fb:e9:b4:fa:e6:e9:b5:be:60:e3:93:e9:40:
                    14:f8:7d:5f:a1:4c:df:54:e9:13:c5:7e:a0:34:70:
                    92:d2:e3:74:7d:d0:d5:a1:41:21:2f:26:51:5a:65:
                    ff:a6:05:eb:7a:c3:c5:9f:1d:40:77:22:9b:60:9b:
                    ad:7c:97:fb:43:3d:d8:57:8c:55:ba:b3:9d:ce:33:
                    f4:cd:fb:6e:0b:f1:c0:7d:b5:fc:47:1d:3c:43:ba:
                    b8:8f:82:1f:ea:7a:2c:c4:96:3c:97:bc:35:a3:4b:
                    1f:55:30:0b:f6:33:50:8a:c8:b4:b2:d7:78:3d:47:
                    d3:70:3f:79:50:56:60:04:78:db:40:f0:dd:cd:5e:
                    59:ee:98:35:62:e5:da:ef:93:ab:14:73:e0:19:ec:
                    ac:7c:bb:39:76:a4:33:2f:e6:ef:b0:4f:a5:b1:7d:
                    cb:8e:09:d2:62:1e:ee:9e:b0:1b:ed:05:5a:f8:38:
                    a4:17:a3:1c:ab:e7:19:59:af:6e:fa:3a:c2:83:25:
                    03:09:97:18:22:64:11:09:c0:c8:41:39:10:ac:4d:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:38:7B:CD:AC:06:7F:AD:59:F5:4D:3A:C5:E0:12:FE:33:C0:BF:DC
            X509v3 Authority Key Identifier:
                keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:05:b2:dd:af:ca:f6:38:c0:7e:b5:75:7d:d8:16:0a:c7:4a:
         67:b3:3b:e5:55:b6:4e:4c:16:06:4e:a4:15:80:98:60:a5:80:
         66:f6:82:50:b1:0e:9b:7e:d9:ba:5f:42:22:bb:a0:ed:76:bd:
         cf:5b:1f:fc:d8:07:19:be:4f:ed:da:24:c2:c6:a5:de:c2:74:
         ab:d7:ad:62:1d:db:dd:84:a7:07:45:ad:df:0c:c7:2f:b8:71:
         d6:54:8a:3a:75:87:c3:b2:8e:a5:dc:88:31:57:27:48:2e:4a:
         52:b6:8c:a1:20:5f:e6:df:49:c4:63:ec:d9:c5:ea:74:f6:03:
         85:12:88:1b:f7:d3:5a:6c:13:c8:40:d4:2d:cb:12:02:f0:ed:
         6d:51:57:3a:08:ee:1a:64:45:96:0c:b8:41:57:35:1d:6f:b6:
         65:95:5c:3f:68:1b:0a:66:07:f9:25:7b:32:59:9d:bc:ff:41:
         b9:a4:d3:19:6b:7f:41:8c:4b:93:6b:89:60:e2:75:18:31:41:
         56:45:a8:7b:eb:ac:7c:9e:85:0e:aa:4a:6d:eb:c0:76:d2:e1:
         0f:24:f1:2f:71:b1:20:7e:d8:87:16:a5:f4:24:86:03:f4:4c:
         96:4e:26:89:40:07:c5:2a:9f:0d:53:e7:b3:56:1b:da:61:ae:
         4e:30:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:31 2026 by rpki-client