Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          34XPRm8zBNnYl+E2DKOQTnwFfSqmDA5UIN+ZE3DdDt8=
Subject key identifier:   8B:BF:7C:67:67:C7:31:19:55:03:0B:14:E5:BF:D6:38:B7:CB:3D:7B
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       019E9B17F583124E5CFA959D27A15848AD91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          1658
Signing time:             Sat 06 Jun 2026 04:01:39 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:39 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:39 +0000
Files and hashes:         1: C7f6La2RHnovZkVXPsCMvF_ZrpU.roa (hash: vor63A+KF0/+NLo3bRvMmDXK5iRB2pgk/JSZQYxp0os=)
                          2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: RsGwj9tqUq3j4lVvvNu/eIWfS8tVoJaPofeya5wdkKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:f5:83:12:4e:5c:fa:95:9d:27:a1:58:48:ad:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Jun  6 04:01:39 2026 GMT
            Not After : Jun  7 04:01:39 2026 GMT
        Subject: CN=8bbf7c6767c7311955030b14e5bfd638b7cb3d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:d1:84:31:67:6e:11:38:d5:a6:96:bd:86:
                    ff:8d:68:b9:8c:ed:d5:1f:3b:84:28:92:af:4d:38:
                    30:a8:8f:1f:fd:d1:e2:66:ee:b1:e1:a4:94:ac:da:
                    75:a1:4f:42:a7:a3:9f:bd:ab:46:ea:ad:0a:cc:a3:
                    1f:16:ea:f6:55:04:73:8e:57:fb:15:d3:c6:9f:e3:
                    48:9b:1a:05:8f:7d:98:0f:7d:3d:e5:e7:56:1b:7a:
                    1d:8c:5f:99:90:9f:9d:ea:3b:f2:fc:d1:60:42:15:
                    44:b5:31:99:87:22:b5:0a:2d:8a:1b:96:55:37:56:
                    bb:eb:57:18:35:ba:26:17:71:3b:07:b7:7b:76:f8:
                    9c:ea:9a:4f:35:99:ae:f0:c7:86:13:45:f6:37:3a:
                    2f:b6:8f:e3:c2:d2:69:72:b2:c6:0f:16:57:76:c8:
                    47:92:b0:82:d3:8e:71:a4:03:32:59:34:3e:e2:7a:
                    f1:85:20:99:1f:90:f8:e9:c3:7b:27:44:7c:b2:c5:
                    e6:48:42:7f:67:9b:4d:5a:14:1e:b3:f3:d7:a5:59:
                    82:02:51:a1:8b:53:2b:90:44:66:10:70:cc:51:a1:
                    18:77:77:0e:5d:98:4a:61:07:90:bf:54:b8:71:46:
                    8d:9d:60:39:47:d5:f4:52:2f:3c:96:cb:10:71:2d:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BF:7C:67:67:C7:31:19:55:03:0B:14:E5:BF:D6:38:B7:CB:3D:7B
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:2c:c7:1d:ab:0e:23:24:6a:82:7e:00:85:0a:67:2f:e4:
         35:62:a8:e0:f2:91:d5:46:e4:2c:ea:af:f5:91:6a:a0:95:68:
         e2:93:24:05:a3:06:54:24:d3:f7:e4:02:ab:66:50:5c:5e:77:
         70:65:10:a1:10:ca:1a:98:3e:47:bf:05:82:56:c0:38:d6:b8:
         fc:ed:7e:0b:3c:fb:cd:96:83:bd:61:71:ef:f1:9d:01:58:77:
         44:1a:b4:43:0c:5b:97:18:5d:3f:b6:70:bf:98:9b:11:ff:59:
         e7:81:ca:df:60:67:6e:c3:2f:12:23:49:34:e7:06:b7:b5:00:
         15:79:f3:8e:f0:68:8a:70:9c:69:ef:bc:b2:81:b5:39:8e:36:
         34:17:22:32:7f:47:e8:f0:4e:c1:7d:57:6d:d3:1d:ac:b0:bd:
         57:85:33:b0:a2:48:9a:b0:d5:69:33:0b:80:94:b2:20:7c:9a:
         59:62:dc:93:bc:6c:28:51:c0:3d:5a:34:4b:2a:0a:81:02:44:
         c9:f2:4a:12:73:6c:0a:07:4f:b2:1b:a4:87:e3:13:ca:0a:1b:
         fa:fa:40:5d:7c:e9:f6:9c:24:56:c7:07:f8:11:84:25:df:ae:
         1a:e6:91:06:ad:22:e4:1d:f4:03:7f:88:ae:76:63:e4:11:b4:
         5f:c4:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:35 2026 by rpki-client