Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File:                     zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier:          4fFqF6A14/H7yS4esCbDJUWJahaNJnh9iogztMg/aIk=
Subject key identifier:   E0:70:12:08:B9:9A:A7:D1:B2:55:D4:D2:2C:A8:28:B8:34:45:4F:60
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer:       /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial:       019F1076CA6BEF9F3D277EBEFE75704C9F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number:          0998
Signing time:             Sun 28 Jun 2026 23:00:48 +0000
Manifest this update:     Sun 28 Jun 2026 23:00:48 +0000
Manifest next update:     Mon 29 Jun 2026 23:00:48 +0000
Files and hashes:         1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
                          2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: Vo9yiT3wOLqTKumAXadP+sw2miBPhKHtr7pXPloWBqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 22:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:76:ca:6b:ef:9f:3d:27:7e:be:fe:75:70:4c:9f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
        Validity
            Not Before: Jun 28 23:00:48 2026 GMT
            Not After : Jun 29 23:00:48 2026 GMT
        Subject: CN=e0701208b99aa7d1b255d4d22ca828b834454f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:bb:3a:06:01:81:7c:1e:7f:66:c1:92:ab:
                    fc:36:e1:9b:a8:22:cf:ba:76:a3:81:cd:1c:bf:8d:
                    06:22:2c:43:6f:ec:b2:f8:a3:3b:e4:2f:17:27:fb:
                    01:d3:4c:77:55:dd:d2:a6:8c:9a:be:f0:41:f9:90:
                    1d:45:5a:e1:c6:12:84:43:db:21:34:99:04:01:27:
                    de:1d:40:ad:6e:f9:5f:e3:7c:73:06:e0:0c:77:96:
                    34:c8:64:4e:e3:8c:94:64:d5:2e:fd:6c:3a:32:1d:
                    6b:aa:2c:bb:2f:23:84:26:16:5f:fc:52:e0:92:8f:
                    87:80:8e:cf:16:55:2a:45:65:35:e7:7e:64:50:76:
                    4a:ad:41:44:69:f9:b9:35:0b:b2:3e:d5:6a:3e:38:
                    87:b1:fb:63:55:2e:e8:77:16:5c:ac:f8:36:ea:dd:
                    35:0e:8f:30:f3:05:30:e1:17:34:b1:45:65:dd:03:
                    92:93:ac:e2:99:25:d0:dd:fc:f8:55:5c:5c:66:d7:
                    61:ef:0e:37:5e:22:c3:9a:ea:d8:60:9f:53:a9:0c:
                    9e:cc:6f:02:70:71:fa:d8:2d:30:73:2b:84:12:be:
                    a6:eb:55:03:7c:58:57:95:34:51:31:eb:5d:4d:8c:
                    b3:d7:d2:52:d1:b9:ca:99:2d:a8:c5:92:ec:56:94:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:70:12:08:B9:9A:A7:D1:B2:55:D4:D2:2C:A8:28:B8:34:45:4F:60
            X509v3 Authority Key Identifier:
                keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:96:d6:3d:01:78:bd:4e:32:28:2a:5a:1a:2d:b1:5a:28:e6:
         93:1b:e5:ed:10:95:c8:2d:e5:a0:fb:92:42:b0:ad:fb:91:0c:
         68:0a:86:8d:38:e2:8b:4a:95:8f:b9:cf:3f:5a:0d:2f:a9:b5:
         bd:ba:31:c0:8e:22:7b:f8:26:32:58:b0:55:b8:6d:f0:8b:5e:
         08:66:7e:6d:6c:e0:6b:7e:50:1d:12:6c:fa:bc:00:93:99:93:
         7d:86:31:93:fb:67:9a:fc:f8:5f:2c:b4:59:39:73:44:65:16:
         4e:37:4e:2b:ea:cc:1c:6d:c3:2a:d7:be:79:94:92:6a:7e:35:
         57:ab:17:ff:17:a0:86:01:81:de:47:ba:4a:1f:96:3b:cd:6c:
         4c:8d:43:3b:2a:5d:e6:1b:91:f3:c9:61:bc:65:dd:74:f0:47:
         5f:66:58:7b:29:56:b1:74:10:8f:ff:24:71:a0:a1:8f:c0:9b:
         fa:7e:84:52:ad:80:a0:89:0c:8b:ea:60:34:1b:77:94:3a:5e:
         6e:15:52:b3:cc:24:21:75:ff:1f:86:ae:bc:8b:75:81:6e:78:
         7f:31:b7:2c:f6:ec:97:0c:ca:37:09:82:01:16:2f:a7:6a:46:
         ac:6e:f5:c3:04:0e:c9:64:fd:5e:df:3d:2f:a0:c9:e0:9e:88:
         e6:14:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 03:57:38 2026 by rpki-client