Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
File:                     Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json)
Hash identifier:          pHJJY1/xqpXYz5kvu69HjNqx0FVqJ9KHpWUVknfH5lA=
Subject key identifier:   AB:6E:9B:C8:E6:14:7A:FA:1C:50:B1:A2:13:95:29:2A:90:6D:49:A2
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Certificate issuer:       /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial:       019EB8B398F6B401ECFF1E5E4103249BC600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
Manifest number:          11CC
Signing time:             Thu 11 Jun 2026 22:00:38 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:38 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:38 +0000
Files and hashes:         1: OBJV77jZUl3CbDy5pjbemSFl4bU.roa (hash: nyePwRtRsoc5nokCJ5lCXsIn1r/OFhC2XRyD9kM7e2I=)
                          2: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: aFA9UkEk1e7mYEkX3tQ9PKGy+Ir4814XfBoy9EtnoBY=)
                          3: llV-T5OHByUu8L74VWUv92cAzng.roa (hash: 9tBLuUshvL8XHJW+P3MzIrJyocKmZrwAHXHerORBago=)
                          4: zyXINCcnojqkQKE3guahN5uv38Y.roa (hash: DPlxLsCN1p1iaWTJ2LBLl11mIB17PTIscCM/Yrq2G9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:98:f6:b4:01:ec:ff:1e:5e:41:03:24:9b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
        Validity
            Not Before: Jun 11 22:00:38 2026 GMT
            Not After : Jun 12 22:00:38 2026 GMT
        Subject: CN=ab6e9bc8e6147afa1c50b1a21395292a906d49a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:a3:45:43:46:4b:d5:46:ab:d0:46:4d:30:
                    28:ef:4f:06:68:4d:c6:c2:e2:d7:ca:6f:35:73:1a:
                    81:0a:e8:4e:83:ba:48:ef:fd:da:62:c0:7c:ec:c5:
                    b0:e0:65:b4:48:a1:15:18:3b:15:10:87:2a:ad:df:
                    49:ec:2c:76:75:59:8a:b0:34:ee:81:3e:57:fa:2f:
                    36:10:f4:f6:0e:15:cd:37:ea:d5:34:c9:b4:4c:01:
                    7f:50:df:d4:5a:b8:cd:6b:42:28:7c:23:bd:26:8e:
                    89:7f:1a:03:2d:40:b3:66:a1:e2:a6:52:8a:2f:e7:
                    e9:20:05:69:d1:59:54:6c:00:85:cc:1b:66:53:b8:
                    0c:b2:a9:aa:dd:6c:27:b2:8c:54:8d:63:ef:f5:2c:
                    ae:4d:c2:f9:47:21:13:09:6e:ab:ff:26:9d:37:ae:
                    99:b6:6e:86:08:d3:4d:0d:e7:a2:42:d9:6e:d8:85:
                    52:db:1f:47:b7:57:28:7d:7a:61:b7:6f:12:7e:e9:
                    86:20:81:79:02:40:e5:8e:5d:72:c6:bf:3d:c5:4a:
                    4f:16:d1:f0:71:78:23:8a:3b:c3:b8:ad:14:dd:e0:
                    09:8e:a1:57:20:ca:c8:83:a2:cb:9d:8f:ca:65:d1:
                    fb:0b:a7:91:4a:cd:0c:49:00:ba:77:c3:55:11:6f:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:9B:C8:E6:14:7A:FA:1C:50:B1:A2:13:95:29:2A:90:6D:49:A2
            X509v3 Authority Key Identifier:
                keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:e3:82:49:0d:40:03:21:d4:78:2b:e0:ca:6e:95:64:77:9d:
         95:d1:ef:79:b1:26:82:a6:03:c0:ce:cb:09:d8:23:d3:d0:aa:
         43:f6:c5:67:2d:4a:72:ae:17:a8:bb:93:c6:b0:8c:c2:72:f5:
         85:8d:5d:ff:ed:8e:79:a0:b8:53:99:23:db:78:67:a4:60:94:
         a2:1d:f6:9c:18:77:0f:75:0a:ce:5c:61:47:61:cd:12:a2:20:
         ca:b6:09:87:af:3d:81:16:68:5d:54:30:b2:7a:28:7a:dc:40:
         68:c9:45:56:52:1d:de:91:0f:fd:04:11:ad:b8:fb:77:ff:36:
         7e:62:b3:1f:da:0d:52:ea:1f:79:cd:cb:b8:e7:2b:a7:da:f4:
         d2:cc:57:95:bc:d3:b4:7d:63:88:e1:6d:2f:89:0f:d0:45:0f:
         5b:94:f8:67:1f:cb:5d:2c:da:e7:fe:cc:8e:7d:32:60:36:80:
         83:78:66:71:23:93:86:d7:26:3c:f8:4e:5d:2c:aa:fc:36:09:
         5b:e7:b6:97:13:c0:7d:40:11:ca:3a:70:6d:db:4a:74:21:b8:
         e4:2b:08:82:7a:20:f8:a6:a1:08:45:0c:48:30:9f:d7:9f:a8:
         a4:96:da:62:0c:dd:07:de:d5:56:3d:cf:b1:8e:9f:cc:5d:14:
         a0:02:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:33 2026 by rpki-client