Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File:                     znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier:          RZnVJ/hvOuWtT7jWIcJ1QtOqtBlprfF0nTFCZvxy0fo=
Subject key identifier:   A4:58:23:0D:71:18:CD:85:F0:15:03:7D:AE:24:E8:20:3F:FF:EA:EC
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer:       /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial:       019EB9C6924D3021D78C302B1CA5A135DF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number:          0F4B
Signing time:             Fri 12 Jun 2026 03:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:58 +0000
Files and hashes:         1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
                          2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: GlPg2BxvWBTucTbMJc4VLSsuvoIotvEUQWbbOd2qhZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:92:4d:30:21:d7:8c:30:2b:1c:a5:a1:35:df:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
        Validity
            Not Before: Jun 12 03:00:58 2026 GMT
            Not After : Jun 13 03:00:58 2026 GMT
        Subject: CN=a458230d7118cd85f015037dae24e8203fffeaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:b2:fb:e8:1c:e6:30:34:71:b9:8e:29:de:
                    a1:15:be:e3:da:d9:98:ca:61:78:d9:54:ca:7f:38:
                    56:07:08:bf:49:9e:da:06:8c:25:1f:99:fb:3c:71:
                    6d:c6:39:94:42:d5:e7:f9:24:f4:4c:c6:57:f5:25:
                    de:4a:c0:dd:99:38:de:2c:b6:f5:5b:35:46:3c:43:
                    f6:85:4a:b5:84:fe:b0:34:54:4d:f6:db:9e:06:e5:
                    aa:55:4e:fc:14:50:13:4c:46:51:aa:b4:73:78:01:
                    ef:f1:74:1e:6f:ec:85:5b:66:b0:c6:a1:62:59:29:
                    10:c0:aa:41:66:88:ba:76:3f:b8:97:54:42:a9:97:
                    f0:89:e4:6d:db:8c:cc:d1:9a:7d:05:ca:0c:c2:b1:
                    7e:0b:99:51:45:a4:60:c7:60:53:73:13:00:c7:c9:
                    eb:9c:03:44:06:39:f0:8f:a9:01:3e:2c:c7:57:2d:
                    4a:66:45:34:b9:87:0f:d4:86:3a:c3:a7:a7:fe:65:
                    86:c8:e9:a2:e4:5e:a6:55:11:aa:90:d2:91:93:72:
                    48:50:bb:7a:4e:17:b8:b5:68:c4:14:d4:a7:2e:96:
                    90:40:66:6d:5d:5d:7e:e8:07:ce:03:a6:c4:df:84:
                    e2:10:2e:11:87:82:00:f2:5c:48:0d:7d:d8:91:88:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:58:23:0D:71:18:CD:85:F0:15:03:7D:AE:24:E8:20:3F:FF:EA:EC
            X509v3 Authority Key Identifier:
                keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:72:f5:8a:53:04:2a:a1:d5:da:fd:35:11:bd:32:39:c1:
         1d:d4:d7:22:07:9a:b2:af:1c:fc:64:5d:b9:fa:a1:95:77:e6:
         bb:95:f5:a6:4e:d3:e7:e1:e4:2c:5a:8b:3d:8e:19:bb:3f:f3:
         60:38:be:28:8c:64:23:bf:14:bf:0f:94:d2:c1:be:7d:04:10:
         26:7e:d6:f8:c0:dd:a4:b2:56:59:a4:e4:20:20:16:d6:cd:c9:
         42:76:ac:e8:94:68:19:2b:f7:35:cd:2d:b0:80:b7:e3:65:07:
         f2:b7:bd:4f:39:d0:7f:7a:4d:fa:44:d0:2c:a3:7b:dc:50:b9:
         cd:7c:5f:fa:73:6e:b8:b5:2c:9e:0e:86:72:cf:40:96:a2:76:
         a8:55:aa:99:1f:d7:65:24:0b:9e:37:2d:b9:95:24:91:3b:fc:
         d8:16:dd:5b:4c:59:e1:3e:9f:ec:15:86:dc:0a:af:5a:43:63:
         88:ec:fe:25:15:b0:a1:3d:06:3e:8d:93:c4:ee:2d:e3:95:de:
         2e:6e:b0:3b:4c:8a:36:6a:4a:5d:ae:65:28:8a:cb:67:65:ac:
         07:a4:70:74:e0:49:7c:12:5d:1e:18:63:56:c9:f3:06:06:26:
         a0:06:28:9d:75:9e:9d:3d:4e:0c:c1:9d:57:7b:68:cc:9c:3c:
         38:55:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:21 2026 by rpki-client