Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File:                     ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier:          FZNcaYdihSruCqeC+GSMKEPEwy6YQbsXHKFzF9xduiI=
Subject key identifier:   D4:FA:10:94:75:72:C5:E3:33:5A:C0:BD:35:B9:1C:9A:E9:CB:8D:BE
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer:       /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial:       019EB80E71162E091A58F4C20B2FABA565FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number:          25
Signing time:             Thu 11 Jun 2026 19:00:14 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:14 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:14 +0000
Files and hashes:         1: 1UDryGb6uD6P-Aju0_ZIzCDQQPs.roa (hash: J074jx0s15KYq6OtmYxwyQ++hAEyrLR4KI6gJZWM7GE=)
                          2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: +KFmFSo9RJSh9k7wpmbqX1KNUUgAKyf6Bc706JU7GUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:71:16:2e:09:1a:58:f4:c2:0b:2f:ab:a5:65:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
        Validity
            Not Before: Jun 11 19:00:14 2026 GMT
            Not After : Jun 12 19:00:14 2026 GMT
        Subject: CN=d4fa10947572c5e3335ac0bd35b91c9ae9cb8dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:c3:ca:42:b7:a0:a5:d0:15:e4:aa:03:13:
                    26:4d:6f:b7:78:0d:6a:6b:87:b6:ad:11:c7:f8:03:
                    5a:47:28:b0:fa:5e:fe:07:a9:0e:6e:5f:85:78:65:
                    1e:10:b3:a1:b7:a6:18:fa:c0:02:0f:14:f6:7c:03:
                    ee:8f:2a:30:60:9a:bd:4d:d8:46:9c:3c:1f:cc:da:
                    1d:07:04:1d:34:33:24:48:61:0d:e9:6b:c9:ec:5e:
                    d2:4a:9c:e5:3b:fe:6f:a4:3c:3f:02:f4:f4:1e:9e:
                    b8:40:c5:76:1d:ef:7c:58:9e:40:2e:9e:27:b0:7e:
                    28:51:38:79:a6:41:8f:15:d8:c1:11:a7:25:8d:3b:
                    a5:93:13:13:e5:34:bf:24:fa:8c:16:84:34:cc:71:
                    bc:01:fc:20:e8:2b:49:1c:1d:5d:3b:70:7b:07:9a:
                    2b:7c:a0:40:08:6a:c6:02:62:c0:80:72:75:fb:4e:
                    9e:7d:de:f6:e5:0d:43:13:83:dd:43:da:8f:f5:53:
                    82:a9:cf:cd:24:6f:6e:25:42:db:85:9c:56:2d:76:
                    a6:b1:31:12:9b:f7:ed:85:9f:98:e6:91:e6:dc:d1:
                    2d:20:c8:f6:3d:6c:02:84:1f:48:91:4f:b2:a0:6a:
                    a3:44:2d:dd:da:d9:5a:2b:12:cf:c9:35:d5:52:15:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:10:94:75:72:C5:E3:33:5A:C0:BD:35:B9:1C:9A:E9:CB:8D:BE
            X509v3 Authority Key Identifier:
                keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bf:a8:19:36:c5:73:11:4a:16:11:dc:e0:b8:f0:39:d5:cd:
         37:da:90:0c:c3:63:9f:5e:22:86:ec:a7:43:ec:3c:ce:08:0f:
         61:fb:9a:64:19:b3:e0:e3:89:9c:bf:7b:26:a3:e5:03:9d:83:
         29:ab:5b:df:1d:cf:99:ce:5c:18:d2:48:e6:35:04:40:2a:91:
         a1:7a:a6:e0:54:04:bd:77:c6:30:ca:12:d9:1c:94:f2:31:c1:
         e3:e1:22:15:ea:97:dd:9d:f6:47:a7:49:8d:bb:a3:be:79:b3:
         37:99:36:e5:06:42:f7:33:27:ba:90:cf:56:68:23:0f:75:dc:
         10:80:8a:e1:fb:c3:c5:1e:7f:81:ad:f9:1f:21:13:14:b5:7c:
         81:e9:82:d7:42:aa:c9:b5:b8:52:69:7c:f5:a1:1e:ab:92:1c:
         bf:46:80:4f:2d:fe:a4:51:23:f2:1a:f9:fb:1c:99:ba:d9:46:
         02:b9:3f:07:54:44:5c:96:c3:39:48:02:ac:38:1b:ca:34:be:
         5a:bf:db:c2:9a:20:13:2f:6a:f0:94:a3:e3:ec:ed:a3:2c:11:
         fb:c9:7a:a9:03:45:90:26:22:52:e5:9a:8a:5e:f3:ca:62:dc:
         ac:b6:7c:16:55:60:32:79:57:d3:98:b5:2a:bd:b2:07:18:4c:
         8e:0e:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:51:05 2026 by rpki-client