Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
File:                     ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft (raw, json)
Hash identifier:          vG4ig60oz2q7AYeOPYO0vA8E2TFF4V896syTEhPDYjU=
Subject key identifier:   3D:D6:0F:79:FB:30:82:58:E0:5D:03:CD:CC:F1:44:6F:67:98:A0:F5
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Certificate issuer:       /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial:       019EFCF276DE96631E3184C6C9D88FEBFD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
Manifest number:          F3
Signing time:             Thu 25 Jun 2026 04:03:29 +0000
Manifest this update:     Thu 25 Jun 2026 04:03:29 +0000
Manifest next update:     Fri 26 Jun 2026 04:03:29 +0000
Files and hashes:         1: Stua-bI85s_Qjcis9xg3M4eoMT0.asa (hash: P9r1AQ6O3K6feHqh5gbLCxcbf2Aonowkyk/Ljn2V6bU=)
                          2: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl (hash: 4hB4C0GMUe/00x9I2kzr+nioy6ZUvjYekFn1+MjiK2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:f2:76:de:96:63:1e:31:84:c6:c9:d8:8f:eb:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
        Validity
            Not Before: Jun 25 04:03:29 2026 GMT
            Not After : Jun 26 04:03:29 2026 GMT
        Subject: CN=3dd60f79fb308258e05d03cdccf1446f6798a0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:bf:60:84:53:d1:d5:b3:b1:41:80:5a:04:
                    d4:9d:6c:d4:d2:de:b7:b8:be:6e:10:2a:a7:fa:cd:
                    27:94:7b:8d:13:aa:d6:d7:fb:e6:fb:81:bd:56:06:
                    37:76:47:db:43:05:61:55:1e:25:68:42:80:ac:b9:
                    61:c7:ff:4e:95:60:22:68:1c:65:fe:fa:48:fa:b2:
                    23:05:50:a1:6e:3e:16:98:d1:44:d6:e1:8e:e9:f2:
                    14:b8:a0:ea:b5:a3:21:2d:c8:77:e2:4b:e1:9d:1e:
                    45:46:3f:ce:39:af:1c:22:e6:7b:3d:99:84:39:9b:
                    91:43:ba:81:eb:90:ba:42:2c:5e:72:a7:bb:23:92:
                    f5:2c:8a:45:ea:e3:05:d7:9f:24:24:61:3f:ea:86:
                    2d:7d:ca:84:8f:ab:f7:52:a4:aa:ca:34:3e:b0:03:
                    6c:39:9e:7a:0b:49:9c:6f:06:be:98:cd:df:99:ef:
                    4f:e5:56:69:0b:e0:02:da:08:bd:03:43:27:43:ea:
                    70:53:af:69:3a:da:29:24:86:99:d8:07:8e:a0:78:
                    ff:71:af:ec:aa:62:68:ec:e4:fe:e9:8e:df:d3:d0:
                    fa:40:de:0e:3a:1a:a4:63:60:38:d4:eb:60:fc:d9:
                    1e:77:ab:69:11:75:24:d4:4c:24:d0:90:34:da:c1:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D6:0F:79:FB:30:82:58:E0:5D:03:CD:CC:F1:44:6F:67:98:A0:F5
            X509v3 Authority Key Identifier:
                keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:58:a6:36:65:da:16:84:61:5a:9e:96:a3:43:47:ac:d4:
         d5:64:fa:d3:29:50:b9:a7:14:4e:14:14:9c:e8:49:ec:da:c8:
         a5:a0:7d:a0:ff:71:c8:05:fe:ff:98:9f:0c:7a:18:34:d2:c9:
         09:00:95:b9:e1:6d:bd:ad:44:95:ab:18:66:76:2d:74:e4:e2:
         db:65:07:cf:9f:b5:fb:ee:f4:88:6e:85:44:c6:10:68:db:21:
         74:c4:83:6a:81:fa:39:94:a8:ea:6d:10:5c:5c:dd:30:41:46:
         f2:46:da:86:38:01:d1:42:a6:bb:75:21:e5:e4:fe:73:7d:bf:
         46:d3:6d:e8:11:17:52:93:3b:80:98:e7:49:11:54:5b:da:d0:
         39:96:29:a8:92:2b:9b:9a:71:66:ca:49:f8:3c:80:30:d6:63:
         ed:ce:ff:d1:92:68:f4:c2:d6:85:3a:fb:ef:d2:59:0b:03:bf:
         cc:4e:c8:7f:b4:a9:20:e1:ca:17:8b:16:c6:cb:9d:38:90:6d:
         83:cc:ab:4f:a7:2d:22:1e:a6:71:f6:8b:dc:a8:eb:1e:c7:8c:
         c4:52:ea:7b:0e:4c:a5:db:30:5a:46:66:05:b9:c7:60:f4:69:
         1d:b3:97:65:c2:5a:8b:76:96:45:f7:a8:67:14:e3:d5:07:90:
         c9:33:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:31:38 2026 by rpki-client