Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File:                     ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier:          xwZ9Bx+vaXHrxGQdGN5lsednZKhrk93QDfRx/86qvzo=
Subject key identifier:   0D:CE:01:6E:AA:1D:87:03:79:C2:02:D0:7B:E1:2E:44:BD:BF:3A:52
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer:       /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial:       019EB9FD50C28DDC0FEBFA3EF210C4F91185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 04:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:46 +0000
Files and hashes:         1: 3SjeUFC4YP2hmea4QgynnyCGUKg.roa (hash: eN1xEmiUCaEx82o/WrnNDgoT+UPc2qHAHANZVD640yc=)
                          2: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: xg5J37IhoVnWWZQKSvSscFCRt7y+bAcmSHyB6oicXHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:50:c2:8d:dc:0f:eb:fa:3e:f2:10:c4:f9:11:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
        Validity
            Not Before: Jun 12 04:00:46 2026 GMT
            Not After : Jun 13 04:00:46 2026 GMT
        Subject: CN=0dce016eaa1d870379c202d07be12e44bdbf3a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:69:a7:f9:28:84:9d:9a:4f:a8:16:89:a3:31:
                    8f:e7:f3:f4:ff:15:74:bb:0d:80:67:b4:f5:8c:bf:
                    35:fb:d3:2b:18:03:9d:04:bb:1f:91:43:77:fc:a0:
                    41:3d:46:61:70:08:22:74:19:91:cf:02:96:e8:26:
                    48:7f:5f:e0:b1:75:a5:75:03:88:a8:89:e8:92:54:
                    60:34:98:6b:cf:0a:52:a8:41:7b:f8:0f:29:19:9a:
                    54:95:7b:ab:24:89:7c:04:22:55:d6:cd:a8:dd:38:
                    7f:56:cf:a7:7a:46:a8:99:d5:70:f0:c1:c0:e9:f6:
                    ff:8b:c7:d1:d9:c5:51:19:76:19:72:25:b2:38:4e:
                    3a:e7:3c:31:a6:f3:b7:ba:6d:36:a1:a4:a1:d9:37:
                    a4:de:5e:84:fb:b2:04:d4:06:67:b2:69:25:a7:f1:
                    e9:3a:43:96:3e:59:e5:4f:4a:6d:37:24:42:5d:09:
                    8a:f9:f2:e3:cb:66:0d:d8:0f:42:bd:69:c0:47:95:
                    9f:32:75:1e:75:62:60:50:1e:30:27:f5:e2:4e:d5:
                    b8:e1:cf:e4:96:3a:00:4c:f9:c9:1f:7e:a8:34:66:
                    57:cd:17:8f:e7:17:b9:6e:26:73:6e:ba:ee:46:b4:
                    99:e7:7d:55:b7:74:a9:b1:ec:bc:fc:e7:04:3f:7a:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:01:6E:AA:1D:87:03:79:C2:02:D0:7B:E1:2E:44:BD:BF:3A:52
            X509v3 Authority Key Identifier:
                keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:7b:c6:43:d8:a9:79:96:2d:12:59:3c:c5:2a:53:a0:a7:
         14:38:69:b6:a7:d2:17:b7:e2:aa:80:12:c8:78:e3:ac:83:d0:
         83:7d:01:01:40:f4:f6:f7:86:c2:d9:27:fd:83:98:24:59:98:
         e4:f2:dc:96:a7:15:57:78:63:cf:5d:2c:8e:a1:23:58:82:d7:
         5f:87:53:76:52:2e:52:16:d3:04:f4:c0:08:7c:b8:81:43:94:
         df:c5:0e:6e:32:d3:e8:96:ac:c0:6a:45:94:58:12:7a:cb:6a:
         91:84:9a:9f:96:68:cb:4c:06:ba:49:ba:ca:e4:81:90:2c:64:
         93:02:b3:16:a1:a5:b9:52:57:ea:3e:45:ad:e7:7e:bb:cb:4f:
         a3:af:b7:96:9f:b5:11:a2:1e:fd:13:28:b0:e7:bd:39:72:85:
         b5:6f:6f:fd:5e:ce:3d:f2:65:fa:e9:48:1a:c0:7d:56:10:86:
         81:60:ae:34:97:f6:25:1b:5a:55:db:35:ea:b9:03:27:8f:c4:
         61:6e:21:14:92:05:93:70:22:bb:fa:53:3a:60:e5:7e:44:36:
         60:13:b2:1a:5e:d7:16:3a:41:55:ee:c9:f2:a1:b1:de:6e:55:
         82:65:dd:58:4e:a7:d7:30:f5:1a:f6:8e:e4:9a:db:c1:7d:c4:
         e4:68:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:08:26 2026 by rpki-client