Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File:                     zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier:          TO3M4UDuzavizk333Sjj6hFuArCG9AYdX8vehbX6iSI=
Subject key identifier:   64:60:96:A2:A2:A2:F1:6D:99:05:8E:56:88:EE:24:0A:DC:F5:D0:03
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer:       /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial:       019EBAA1EF4E4D27F3C9C3DB2DC907CB6943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number:          092C
Signing time:             Fri 12 Jun 2026 07:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 07:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 07:00:35 +0000
Files and hashes:         1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
                          2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: /cl5msHjmF4eOWaATYjljjrNEWFNaGi4htDoUBNbFQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a1:ef:4e:4d:27:f3:c9:c3:db:2d:c9:07:cb:69:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
        Validity
            Not Before: Jun 12 07:00:35 2026 GMT
            Not After : Jun 13 07:00:35 2026 GMT
        Subject: CN=646096a2a2a2f16d99058e5688ee240adcf5d003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:b3:f2:ee:d7:8b:c6:60:46:80:a6:81:47:
                    db:3b:4f:f1:e7:92:39:38:0b:33:01:b5:22:ba:5f:
                    b1:4e:ed:94:f4:61:a8:ea:9a:26:85:6b:d5:53:a3:
                    b0:2a:38:38:33:f5:13:ec:38:2f:fb:65:7c:ca:6c:
                    cf:b0:4a:b0:de:cc:de:a7:e8:f0:4d:0a:58:71:47:
                    57:02:b1:1e:0a:3e:ba:06:b8:9a:74:aa:3a:b3:09:
                    ee:ec:e1:cd:05:e9:27:59:35:a9:9d:0d:90:bd:0e:
                    c7:7c:a9:1c:b0:f2:64:9f:fb:24:a7:f0:76:d1:b2:
                    e9:a1:e2:c0:6c:fc:dc:46:86:23:c0:8c:c3:c9:ba:
                    0c:99:6c:fa:59:de:c3:c3:6d:09:48:9f:9f:d8:50:
                    9b:43:fe:37:81:19:20:1a:f0:86:01:01:50:13:ff:
                    a6:f3:64:b0:d3:c5:9b:63:50:e2:81:fc:e7:9b:11:
                    d7:3e:b7:cc:2f:16:28:16:88:e7:0a:3a:5a:f5:c8:
                    53:99:52:8d:a1:e0:54:52:12:3a:0a:be:2f:a1:4a:
                    3d:c1:81:0f:ef:0e:3a:14:8b:9b:5b:7c:a7:8f:35:
                    72:cf:c6:dd:72:31:ad:e3:eb:a0:54:dd:42:81:e8:
                    5d:6b:d0:1e:14:f6:a8:38:be:8b:14:f4:8a:69:99:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:96:A2:A2:A2:F1:6D:99:05:8E:56:88:EE:24:0A:DC:F5:D0:03
            X509v3 Authority Key Identifier:
                keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ce:1f:a0:de:01:e3:c4:5f:f6:12:f9:c1:19:eb:e8:63:ee:
         8b:53:58:2e:e7:d5:b2:cd:05:e2:e7:6c:85:64:03:0e:a9:37:
         b7:aa:34:28:30:9d:93:fe:ba:92:c5:38:44:0a:07:d3:89:15:
         33:f6:ba:6b:34:70:83:83:85:a1:77:97:e4:90:60:51:44:b3:
         08:82:29:2b:00:10:22:8e:c7:03:0a:22:df:3d:3c:0d:f0:19:
         33:a8:5a:d4:98:31:59:37:92:6f:cf:f3:e5:cf:50:87:9a:c8:
         9f:f8:df:88:0a:db:a3:08:33:07:03:ba:d5:b7:cd:c0:2a:62:
         03:c0:e2:63:b1:ee:a1:1b:89:10:b5:83:46:07:ca:19:f2:5d:
         43:9b:58:41:23:72:cf:b1:7c:df:d1:da:43:55:e8:57:46:96:
         e3:40:f1:4f:85:67:e1:0b:c9:0f:35:ee:87:0a:94:0b:03:ac:
         29:b2:84:0e:05:63:11:7e:1e:57:ee:31:42:b6:7a:3e:2e:0d:
         1f:20:f9:a7:fd:16:85:f8:5d:f8:3f:b4:52:e0:a6:29:18:8a:
         0a:93:2c:42:bc:17:a4:44:b0:01:a8:16:37:6e:1e:ac:3f:36:
         a8:72:31:7c:eb:dd:2f:4f:9e:00:d9:53:86:a3:b6:77:ea:b4:
         43:88:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:08 2026 by rpki-client