Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          wCg4eyttloWKubpQpoAdD9pbFqx6KRiwN0lboDsPAik=
Subject key identifier:   6B:98:78:8E:DE:D6:52:9B:51:3A:68:38:72:7C:3A:37:76:85:CE:DE
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       019E924AB6AC31F947ACC2C7BE1AA2C79CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          1951
Signing time:             Thu 04 Jun 2026 11:00:30 +0000
Manifest this update:     Thu 04 Jun 2026 11:00:30 +0000
Manifest next update:     Fri 05 Jun 2026 11:00:30 +0000
Files and hashes:         1: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (hash: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M=)
                          2: PpOYs6t43PH4GR9qIThOE1vaAks.roa (hash: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY=)
                          3: YwlkzOh40N4SzqCHKWcC97MEiGo.roa (hash: 1LCHJNlMLpepR4sv2pj3j5D9S9GvMti3zGg5V/TMwP8=)
                          4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: tRz/T8eKpPj+dRQfBQcSEMDPIR9XihUfZzspt4xlXgo=)
                          5: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (hash: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo=)
                          6: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (hash: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU=)
                          7: ioECjT17G0_6OLgmor7_dptRVdE.roa (hash: 4GHJcy1NEQdNT4tM6/0vR+b78HpLI+Kdh82ajfi8C4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:4a:b6:ac:31:f9:47:ac:c2:c7:be:1a:a2:c7:9c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Jun  4 11:00:30 2026 GMT
            Not After : Jun  5 11:00:30 2026 GMT
        Subject: CN=6b98788eded6529b513a6838727c3a377685cede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:f1:4f:e7:3e:00:ee:86:6a:1c:7e:19:5b:
                    99:3e:60:17:f4:40:e1:e4:2d:40:5d:3e:2d:e7:45:
                    34:4d:21:42:b2:0f:1e:9a:05:a9:d5:83:f1:67:24:
                    1d:55:12:19:1d:95:3e:d1:3f:04:f3:72:93:2e:d6:
                    28:de:77:30:d0:0f:d7:72:0f:27:fe:3e:c7:ac:58:
                    94:5b:6c:e0:b7:f7:00:20:06:fd:ef:20:ab:87:0d:
                    e9:86:58:13:66:25:6e:99:28:a4:fa:50:0c:74:9b:
                    e1:24:b0:c8:bc:23:49:9e:8f:34:18:9a:71:27:1b:
                    7a:08:00:09:b9:e5:45:f2:42:5e:3f:ce:a4:3b:f6:
                    42:ca:9f:8f:b9:fe:c2:28:39:b9:0d:0a:b1:8f:a5:
                    62:9d:36:5f:3a:78:bf:ab:1e:fe:37:48:e1:fe:68:
                    88:f9:7c:3f:da:ef:11:17:6b:49:1c:43:d0:b0:36:
                    2f:79:d7:09:11:8b:a3:58:f4:bc:d8:d0:35:6e:d3:
                    ae:77:5b:38:35:df:a2:63:38:84:1e:d2:5e:25:00:
                    8b:b0:2f:05:84:ce:e1:55:1e:f6:b5:51:10:3e:65:
                    08:7a:ae:59:ef:80:cb:b8:7a:fe:78:77:66:01:a9:
                    79:80:39:61:51:36:71:64:db:c5:b5:1e:67:7f:db:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:78:8E:DE:D6:52:9B:51:3A:68:38:72:7C:3A:37:76:85:CE:DE
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:a1:c4:ff:37:70:13:26:13:0d:31:dd:f2:7a:eb:ea:62:
         10:48:3f:96:11:3c:65:b7:0f:b5:11:7e:72:92:1d:43:62:08:
         9d:8d:99:df:ed:c8:4b:5e:0d:27:1e:42:bf:0d:bf:b4:53:28:
         8a:02:7c:cb:55:22:6a:04:35:23:2d:96:35:51:5e:c7:33:35:
         d5:e8:b3:ac:6a:69:21:87:2e:b4:ce:ca:1d:41:8b:ec:69:45:
         99:c6:4d:25:5e:09:af:fc:af:bd:a8:da:ea:b7:c4:d2:8c:3b:
         22:94:23:59:c5:de:fd:1b:be:bc:f1:2f:87:8f:b0:8e:f2:25:
         1d:ed:41:bb:3e:ae:77:b2:0f:3e:bf:28:53:da:77:a1:76:42:
         d6:51:40:a7:27:ea:aa:70:51:71:d2:96:1f:37:35:20:5d:44:
         10:42:50:c6:1b:b5:66:01:69:75:bc:08:e0:cc:d5:3a:c7:41:
         85:fa:03:24:37:b9:6e:8e:10:9b:16:cd:17:84:d4:12:af:60:
         c9:16:94:4c:37:ad:19:e1:28:af:72:5c:1e:81:38:46:30:8d:
         6f:63:e3:cc:ec:49:bd:cc:c9:dd:9d:6c:47:c1:ba:c4:51:da:
         9c:52:20:85:74:29:3b:46:51:c1:5f:7f:5b:7f:e6:9b:c5:7c:
         37:22:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:07:47 2026 by rpki-client