Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File:                     zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier:          tsLLMjQa1ZWj9XyXUPGvbB01LrFbH1S9tj6D9sLMU48=
Subject key identifier:   A4:56:7C:14:1F:9C:95:66:60:9A:BF:C8:4C:DD:22:F5:17:30:79:36
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer:       /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial:       019EB8EA5F8CCA9E759619D7A9264313E83B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number:          151E
Signing time:             Thu 11 Jun 2026 23:00:27 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:27 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:27 +0000
Files and hashes:         1: 3XADLdEbS1FY6n6yUx5o7fgS4pU.roa (hash: sJxb+ZizUKA1xitVNheZoX8adqgMHbTrnaDCSefof/w=)
                          2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: 6uc2DwXrTJGrlzcGCOOx+wx/W+oTrmEP9j4RLzeMDGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:5f:8c:ca:9e:75:96:19:d7:a9:26:43:13:e8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
        Validity
            Not Before: Jun 11 23:00:27 2026 GMT
            Not After : Jun 12 23:00:27 2026 GMT
        Subject: CN=a4567c141f9c9566609abfc84cdd22f517307936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:a5:6b:de:4a:36:d7:e1:65:ba:23:6c:02:
                    73:a3:fa:f5:de:7f:18:04:b4:55:dd:0f:3e:83:01:
                    d6:89:48:31:e5:cf:c9:df:09:9e:f7:4a:f5:25:70:
                    aa:b6:6e:7f:34:b4:1c:e4:12:be:59:e1:6a:11:10:
                    d0:68:f1:11:09:8d:9d:1c:2e:44:f9:6c:d5:f3:74:
                    e0:4e:60:88:e4:93:13:da:b3:e8:8a:59:04:85:7a:
                    b5:e2:cd:e2:3f:64:62:bf:c4:01:22:87:1d:15:43:
                    2c:0b:1b:78:84:23:7f:a5:6c:5a:2d:5c:2b:ac:c6:
                    9e:2d:b0:b1:6a:f6:b8:3a:7a:b9:c4:0f:4b:c8:5c:
                    21:0c:9a:62:f4:d4:4f:51:c5:5f:ac:d2:38:55:ed:
                    00:0a:ab:a0:b7:fe:01:84:19:69:88:81:cb:f4:6d:
                    32:96:3f:7e:60:46:ea:42:f4:48:e1:fe:bd:d9:fd:
                    73:46:04:44:c5:fa:61:bd:98:66:6d:e1:6e:ff:c8:
                    db:73:04:f0:17:d5:46:11:26:1b:33:5e:f4:3a:7c:
                    16:3e:c6:f4:28:e8:bd:04:f2:fd:f5:77:6d:b4:41:
                    0f:fd:db:1b:0b:c0:5a:39:fc:42:59:29:85:42:98:
                    a7:b8:6d:d0:f3:96:0c:90:8b:df:1b:2e:ec:59:c0:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:56:7C:14:1F:9C:95:66:60:9A:BF:C8:4C:DD:22:F5:17:30:79:36
            X509v3 Authority Key Identifier:
                keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:85:17:8e:b4:c1:32:b4:5b:a1:e9:35:d0:02:36:ad:bc:e5:
         c4:73:b5:3a:8b:6a:6e:3f:93:8d:e9:e9:6d:48:45:21:e9:92:
         e0:cb:6d:a4:04:39:62:64:a8:ce:e5:47:a3:e5:a6:6e:e1:62:
         e5:87:85:84:18:a1:ac:45:ba:c5:32:8e:d3:b2:0f:93:a7:07:
         35:bd:2f:ef:c8:04:53:6d:9d:6b:8b:fc:c1:67:09:99:32:2a:
         08:83:75:1b:e3:6e:4d:b0:5e:f2:74:20:d5:9c:27:88:fe:94:
         01:3a:fe:7d:ce:18:0a:80:7b:ff:50:d5:5c:73:35:76:21:85:
         97:88:a6:39:a6:37:85:03:37:7c:29:2d:f8:bb:69:92:21:88:
         fe:a0:fd:8a:6b:54:bb:ba:09:fa:a7:63:58:d3:ea:51:34:14:
         f7:70:4f:93:85:fd:19:ee:b2:3a:fa:57:4c:54:39:91:e9:93:
         e4:0a:5a:26:c4:7f:46:b6:6d:73:32:8e:9f:2c:3f:9f:9f:d1:
         6d:52:e4:6c:84:e6:61:23:bf:9d:de:cc:9e:23:38:61:50:a0:
         74:63:48:78:92:44:90:e4:de:0e:3d:0e:32:cc:4f:ef:32:7c:
         8d:db:f6:b3:ac:52:83:3b:5c:a6:7d:6b:f2:48:24:71:0a:fb:
         43:20:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:34 2026 by rpki-client