Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File:                     zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier:          J4BojKNP4gh8kgu11iSPPL9AVDhsk0Kq59KvPzBohNU=
Subject key identifier:   B9:B4:65:30:5D:F2:66:85:BB:D6:3F:2D:49:55:42:74:15:47:F8:6B
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       019F11F7926583B0E6C2841641FAA05E8713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number:          1116
Signing time:             Mon 29 Jun 2026 06:01:05 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:05 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:05 +0000
Files and hashes:         1: 0L1L67jVugXzE__lTJGfbb8-q-Y.roa (hash: Qt2g1ctMd8cFHOzrewKQ8FYPO0z3lmCYJaL3Sc8ATow=)
                          2: aULXxwpV3n01msELu6FKmFfUQt0.asa (hash: NByj/5BS6ETg8U2+SS44eCFMC2AU9TZ/aruJFrPVAYA=)
                          3: e0EdhFf01seKM2ee00Orq33djUI.roa (hash: CXwllvMBMtWoZlpgKk44gW6slpYawA4OLdB4YkoWj8c=)
                          4: rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa (hash: M2Sx/zjlYAhCYCRsT+YiI+82fP7xUoFDJFNJGn+EKeA=)
                          5: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: EIscARVlxu7NCg6AyFD3g5VWClwpMt/XCzlbwPUZpvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f7:92:65:83:b0:e6:c2:84:16:41:fa:a0:5e:87:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Jun 29 06:01:05 2026 GMT
            Not After : Jun 30 06:01:05 2026 GMT
        Subject: CN=b9b465305df26685bbd63f2d495542741547f86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:90:21:08:ba:85:c4:1f:32:b5:a1:c6:d9:
                    10:db:82:6f:7f:9e:6a:49:a1:c1:78:df:7f:d6:ab:
                    6b:56:cf:4c:4b:bd:83:65:00:d7:c3:c9:fa:f8:05:
                    25:ca:fa:cb:6f:dd:24:88:32:a1:21:cc:94:08:ac:
                    6c:b0:84:00:d8:20:7c:43:e8:37:3e:42:5e:fa:99:
                    29:98:ad:78:47:a4:8e:43:80:ae:fc:17:3c:77:2a:
                    d5:87:9c:01:b8:9c:f2:e8:78:af:0f:e3:d1:e3:e2:
                    53:bc:23:39:e9:71:59:00:03:1b:51:3e:5c:28:1f:
                    a7:2b:6d:07:d5:26:ce:30:4a:98:49:03:ee:37:00:
                    3e:57:5d:19:79:97:64:93:bb:2e:dc:a5:e1:4f:22:
                    2b:7d:fc:7a:27:cc:42:05:db:bf:07:33:04:c3:7f:
                    10:09:31:61:55:ef:77:54:ea:04:85:0c:79:4d:0d:
                    2e:7e:93:0e:6c:c8:98:88:cd:cf:bd:75:48:bf:e9:
                    48:d7:8f:04:ea:62:59:bd:50:ea:5c:38:ac:55:5d:
                    a1:11:3a:38:54:c5:87:58:fa:03:85:54:b3:da:32:
                    16:38:c5:21:4b:82:ae:af:64:24:ba:1e:d7:01:e1:
                    23:3f:c7:b8:12:16:4e:58:b3:82:6b:97:0b:87:8f:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:65:30:5D:F2:66:85:BB:D6:3F:2D:49:55:42:74:15:47:F8:6B
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:ee:41:24:62:7a:34:40:1e:11:6c:d2:f4:5f:f8:63:1f:
         4f:6c:10:f1:1d:81:b9:1d:42:d9:b8:55:4b:23:fa:75:cf:1c:
         81:94:56:b3:21:4e:24:94:71:cf:35:17:eb:8d:9a:dd:39:10:
         e6:bd:5f:9d:6b:19:09:d8:63:53:42:69:fa:5c:6e:79:ea:39:
         a1:b3:a7:d0:c3:e3:83:a6:f8:e4:da:9b:33:e8:ab:c5:f5:83:
         25:99:3b:6d:75:2c:9b:9a:67:60:89:7a:32:fd:d6:c5:44:4a:
         e9:81:07:d7:4e:9e:d0:ff:74:c3:ab:6b:2a:11:bb:4c:21:44:
         cf:f5:0b:07:be:4b:12:26:96:1e:44:a6:da:89:72:ea:01:fd:
         28:a5:4b:d5:c0:a4:94:59:9c:2f:28:88:4a:89:49:88:2e:74:
         3d:04:73:7d:b0:6e:08:d1:57:5d:19:08:1e:90:23:e3:6c:52:
         74:fb:a0:f4:d0:61:11:bd:26:bc:79:f8:f5:03:75:7c:fc:da:
         39:a4:7b:b6:90:86:bd:fc:ac:e4:00:b2:e2:ee:b3:01:13:c5:
         c9:8a:ac:b0:6e:ff:69:35:09:d1:7d:a0:79:3b:ac:a5:ab:8e:
         a5:0d:7b:05:2f:c3:7c:38:5c:d9:3a:46:39:0c:a6:6f:73:57:
         8e:dc:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:31 2026 by rpki-client