Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File:                     z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier:          q8jUJEht/rzfK9vMKgO+6yMzagXOV65NBI8iRdQx9QQ=
Subject key identifier:   ED:05:8A:AF:93:DF:F2:0B:5C:06:64:FD:9D:52:4B:91:41:31:26:21
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer:       /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial:       019F12659B1288AE6A5673310218C0A68564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number:          19D0
Signing time:             Mon 29 Jun 2026 08:01:16 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:16 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:16 +0000
Files and hashes:         1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
                          2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
                          3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
                          4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: 3ZqSYHxoC02bBRU4RVkMvrJOjJfOGJ3ujsosW9G3kQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:9b:12:88:ae:6a:56:73:31:02:18:c0:a6:85:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
        Validity
            Not Before: Jun 29 08:01:16 2026 GMT
            Not After : Jun 30 08:01:16 2026 GMT
        Subject: CN=ed058aaf93dff20b5c0664fd9d524b9141312621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:02:bb:34:25:30:3e:50:c6:fe:05:0e:db:
                    e0:9d:77:c5:c7:20:03:37:08:64:1e:e9:3d:fc:f6:
                    46:c0:5e:b8:9b:8c:c6:4d:f7:75:19:38:21:59:8c:
                    d5:7e:62:f5:c2:88:a5:4b:a4:78:ea:56:a9:6f:9a:
                    10:ec:05:31:26:5e:12:54:34:88:fb:de:a1:e9:cb:
                    6d:6d:3e:65:79:14:62:29:86:16:77:f3:08:e5:2d:
                    63:c8:e7:aa:c9:02:df:7d:fb:eb:99:3a:f1:cb:c5:
                    e9:c1:47:0f:dd:bd:4b:d9:c2:19:06:fa:1e:e2:6d:
                    86:50:15:a3:68:c1:9f:23:ec:13:9d:73:db:d5:ca:
                    fc:cc:44:5d:13:b8:7b:6f:40:69:d8:15:16:7d:62:
                    8a:27:ef:a8:07:56:c4:e6:e5:66:f7:55:29:e8:8d:
                    4c:19:97:da:a0:65:aa:c2:38:31:83:92:fb:51:ad:
                    89:70:d0:8a:ed:89:25:31:67:bb:94:d2:80:1f:52:
                    a5:d9:5a:74:6e:e9:37:0d:b0:19:67:c0:a4:03:5f:
                    33:70:5e:85:3d:59:f4:c4:35:9e:7b:42:f6:23:8d:
                    69:8a:30:53:51:f0:ae:04:80:fe:8c:09:f6:de:fe:
                    35:24:1e:02:ba:23:f3:e3:c7:ae:64:b4:a9:55:7b:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:8A:AF:93:DF:F2:0B:5C:06:64:FD:9D:52:4B:91:41:31:26:21
            X509v3 Authority Key Identifier:
                keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c1:66:22:11:b1:54:a2:64:ab:1c:39:da:13:5e:c5:f1:79:
         b3:9d:08:ca:d2:a0:f1:d3:c8:8d:6f:69:95:68:0f:9b:5e:a4:
         21:6e:e3:96:4a:fb:14:34:0d:0c:84:b9:d5:14:34:f6:f8:d3:
         69:14:e5:be:1f:3a:a2:f4:74:cd:ba:4e:3c:fa:f3:27:2a:27:
         51:67:70:f2:bb:92:3e:72:ad:cc:89:2d:c6:11:60:95:bf:e9:
         18:9f:37:52:73:30:7a:22:a9:1c:c9:99:41:25:d1:ea:6f:37:
         4a:75:7a:f0:57:07:58:44:66:34:07:b0:79:f9:33:38:5f:83:
         08:5e:ca:9b:c0:97:1a:12:7f:ec:d9:2e:52:52:68:17:8c:95:
         62:f4:6a:99:14:94:d0:76:9d:e3:95:a6:b2:d8:ce:6e:2b:92:
         32:ad:02:95:3a:66:61:c0:c6:42:02:ab:1e:f1:b1:99:5b:4d:
         20:cc:b4:b3:a0:03:6b:8c:eb:06:66:1d:26:7b:db:b7:54:85:
         3c:6f:7b:87:e1:e5:8f:a4:d9:fc:cd:c4:1c:b1:83:f1:e3:f1:
         7c:c0:73:fd:d8:b3:94:4f:bb:81:b4:61:a9:6d:5f:a9:95:16:
         35:cf:1a:da:4b:5d:92:56:4a:09:2b:72:34:76:5f:e4:c3:f4:
         91:9a:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:37 2026 by rpki-client