Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          +Lb3YInd5AkJcLdPml3DF5FDCY5BkhMuV7CZdTcYQC0=
Subject key identifier:   26:8B:A9:B2:7B:21:10:B7:83:2A:2A:DC:82:8A:A1:AA:35:EF:5A:27
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019E9C97299C7610045E562127E334C8A3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          09E4
Signing time:             Sat 06 Jun 2026 11:00:12 +0000
Manifest this update:     Sat 06 Jun 2026 11:00:12 +0000
Manifest next update:     Sun 07 Jun 2026 11:00:12 +0000
Files and hashes:         1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
                          2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
                          3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
                          4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
                          5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: 4IfMkMh5nvLOTkpsedxjEq9OdaPi636SM2oZdd4QMk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:97:29:9c:76:10:04:5e:56:21:27:e3:34:c8:a3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Jun  6 11:00:12 2026 GMT
            Not After : Jun  7 11:00:12 2026 GMT
        Subject: CN=268ba9b27b2110b7832a2adc828aa1aa35ef5a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:85:4b:e2:72:0f:88:f3:a8:b9:da:5e:90:
                    3c:f6:1e:9b:d4:7a:cd:60:03:b0:65:d6:fa:56:a3:
                    26:72:fb:be:fb:27:b0:e2:61:88:09:aa:71:6f:88:
                    c4:1a:8d:02:05:b5:e6:86:3a:01:09:88:2b:07:f9:
                    dd:88:43:7f:51:68:66:15:08:a0:97:eb:8f:3c:a9:
                    72:a0:61:e7:ff:bc:15:01:4a:04:37:a3:8d:ac:20:
                    5e:dc:4d:8b:fb:60:9d:ca:29:51:b5:1a:cb:c5:46:
                    39:74:a3:21:68:1f:0b:00:d5:43:51:75:38:d8:04:
                    a4:c7:d0:a6:b2:09:be:33:6d:0c:d2:e4:79:14:cd:
                    bc:61:b4:c4:5a:79:27:b8:00:85:8d:69:6e:69:89:
                    d8:98:23:69:26:1f:33:63:39:59:d6:99:46:3f:a8:
                    58:fd:63:d1:c3:58:e6:0f:81:07:29:ca:1b:00:e9:
                    72:f1:12:58:5a:60:7e:9f:ce:ac:a9:d1:2f:a1:6e:
                    b7:0b:fe:8f:99:ad:d7:16:49:b8:d3:42:af:58:d2:
                    d1:d2:44:f1:e8:16:ea:84:9f:42:d4:f8:17:47:0d:
                    54:1e:34:ac:20:04:a4:1c:a1:ab:5c:c2:fb:8e:1f:
                    ad:f8:85:eb:45:e4:11:fb:da:65:b3:8f:f4:91:34:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:A9:B2:7B:21:10:B7:83:2A:2A:DC:82:8A:A1:AA:35:EF:5A:27
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:68:f8:ed:cb:0a:9a:20:b8:1b:c2:88:3a:11:d7:a8:00:c0:
         c6:f4:d2:da:d5:ef:0f:05:21:4f:76:b6:6d:44:45:64:24:2e:
         b3:17:56:a5:f4:34:23:5f:60:3b:28:82:9c:41:92:90:4d:70:
         33:ff:73:3a:d6:f2:d0:30:97:c4:65:19:05:d8:0c:f3:51:36:
         9f:73:da:83:c0:fc:a0:ca:b5:ef:9b:7c:38:f6:de:fc:4b:ad:
         77:7d:e3:1f:95:93:74:8e:3c:d1:1c:29:26:68:20:7f:e5:6e:
         29:01:f5:68:a0:e4:7d:a0:8c:59:bd:4e:22:05:64:01:b2:c0:
         d6:59:90:38:df:2a:2f:ce:cc:f5:d4:2e:13:bf:d4:cb:dd:ad:
         82:6f:3b:4c:27:21:6f:dc:a3:71:f8:54:2f:85:4e:9a:1a:1d:
         66:65:e2:e4:13:2d:e9:8b:50:d4:9f:ec:73:5c:66:e9:cd:45:
         0b:04:52:ad:97:82:47:12:5a:8a:e6:5f:9b:21:52:d1:70:21:
         31:89:b1:9f:44:5f:f7:c3:8a:71:61:ab:bc:2b:83:3c:ea:c7:
         87:05:7f:bf:36:db:1d:fd:e5:54:0d:98:86:d4:60:12:4d:6a:
         1b:d0:d5:60:4c:01:42:9f:7e:55:5e:48:05:eb:d1:86:ed:27:
         c5:d6:f7:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6clymcdhAEXlYhJ+M0yKPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjYwNjA2MTEwMDEyWhcNMjYwNjA3MTEwMDEyWjAzMTEwLwYDVQQD
EygyNjhiYTliMjdiMjExMGI3ODMyYTJhZGM4MjhhYTFhYTM1ZWY1YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq32FS+JyD4jzqLnaXpA89h6b1HrN
YAOwZdb6VqMmcvu++yew4mGICapxb4jEGo0CBbXmhjoBCYgrB/ndiEN/UWhmFQig
l+uPPKlyoGHn/7wVAUoEN6ONrCBe3E2L+2CdyilRtRrLxUY5dKMhaB8LANVDUXU4
2ASkx9Cmsgm+M20M0uR5FM28YbTEWnknuACFjWluaYnYmCNpJh8zYzlZ1plGP6hY
/WPRw1jmD4EHKcobAOly8RJYWmB+n86sqdEvoW63C/6Pma3XFkm400KvWNLR0kTx
6BbqhJ9C1PgXRw1UHjSsIASkHKGrXML7jh+t+IXrReQR+9pls4/0kTQM1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaLqbJ7IRC3gyoq3IKKoao171onMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGj47csK
miC4G8KIOhHXqADAxvTS2tXvDwUhT3a2bURFZCQusxdWpfQ0I19gOyiCnEGSkE1w
M/9zOtby0DCXxGUZBdgM81E2n3Pag8D8oMq175t8OPbe/Eutd33jH5WTdI480Rwp
Jmggf+VuKQH1aKDkfaCMWb1OIgVkAbLA1lmQON8qL87M9dQuE7/Uy92tgm87TCch
b9yjcfhUL4VOmhodZmXi5BMt6YtQ1J/sc1xm6c1FCwRSrZeCRxJaiuZfmyFS0XAh
MYmxn0Rf98OKcWGrvCuDPOrHhwV/vzbbHf3lVA2YhtRgEk1qG9DVYEwBQp9+VV5I
BevRhu0nxdb3WA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:31:39 2026 by rpki-client