Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File:                     0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier:          0vs2u1C6gnKXv6qLvrAEECO5674FZt8cAY1bewB5epM=
Subject key identifier:   73:18:1B:AA:CE:7C:AD:63:6C:C1:1C:52:DF:88:66:79:96:B8:A1:6A
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer:       /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial:       019EB8B425380A38E53273526ED64E0B0CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number:          1499
Signing time:             Thu 11 Jun 2026 22:01:14 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:14 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:14 +0000
Files and hashes:         1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: lRXsIKD5n2DON/p9DqH4ziLvrGDRoIJn9x9DQ4BiorU=)
                          2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:25:38:0a:38:e5:32:73:52:6e:d6:4e:0b:0c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
        Validity
            Not Before: Jun 11 22:01:14 2026 GMT
            Not After : Jun 12 22:01:14 2026 GMT
        Subject: CN=73181baace7cad636cc11c52df88667996b8a16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:c8:88:85:09:89:52:a1:ad:32:7b:1e:47:
                    a3:d0:5b:23:bb:eb:e1:6a:32:41:2e:97:57:75:b1:
                    9e:5c:ef:5d:ca:55:7b:a1:76:ae:42:42:81:30:1d:
                    d5:c1:c1:a8:29:15:15:0d:01:b0:12:20:81:60:53:
                    22:21:50:dd:1b:48:81:34:56:1d:c3:f4:2b:d2:ae:
                    99:a4:ac:b9:0f:13:71:43:02:f7:67:3d:00:a6:93:
                    b0:2f:45:4d:7c:cb:a1:c3:eb:18:f3:a3:a5:00:80:
                    6e:03:fe:bf:62:9e:72:05:e3:eb:66:d7:f4:8f:e7:
                    06:9d:61:ee:50:6b:4a:8b:73:24:23:e3:87:58:90:
                    d8:39:47:7c:53:db:46:61:fa:47:3b:40:d9:19:22:
                    80:e4:f3:3a:60:43:97:df:6a:99:de:e6:a6:28:fb:
                    03:b5:ed:64:9c:de:90:ff:50:fb:ae:ac:43:28:9b:
                    f3:29:f0:30:90:8a:d5:0f:d4:5c:d6:06:73:fe:87:
                    10:05:39:d5:bd:e3:b6:c0:d4:ea:40:69:3a:67:e1:
                    3e:04:16:65:03:33:36:26:67:9d:27:8f:a6:89:6b:
                    7f:d6:c7:32:f9:e2:b8:92:9f:58:06:a2:fb:83:14:
                    a0:50:7d:9c:f4:69:9c:80:be:58:d0:a5:d5:16:ce:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:1B:AA:CE:7C:AD:63:6C:C1:1C:52:DF:88:66:79:96:B8:A1:6A
            X509v3 Authority Key Identifier:
                keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ab:85:16:28:10:82:6e:7c:ea:a9:fa:4c:6e:6d:6b:8b:80:
         25:40:7f:fa:95:d5:21:0d:b4:ac:d4:f1:44:13:ce:1c:52:46:
         0f:66:32:79:8d:53:0b:82:d5:5b:30:13:d6:8b:69:4d:85:68:
         d3:ba:3e:e0:73:f6:51:6a:20:e6:b4:ba:34:09:77:18:d1:23:
         cf:2d:01:e4:b3:e6:80:55:0e:12:6c:8a:78:16:3a:62:63:c0:
         21:d6:da:5e:e3:44:e7:f5:d9:1d:d5:03:f4:a1:e4:43:84:7a:
         cf:8a:c8:e7:5b:41:2a:2f:25:89:f6:c4:ff:30:87:1d:50:21:
         60:9a:44:74:dd:17:71:03:40:cd:f8:a4:80:31:16:45:e1:88:
         cf:12:03:78:0b:f6:e4:48:5e:05:bb:1a:1f:9b:6f:c8:22:26:
         8d:21:31:fa:1c:7b:23:67:aa:54:11:49:9a:db:f1:5a:ef:09:
         f0:66:a9:89:a3:39:c3:9b:22:f8:75:b8:34:7b:58:a8:6d:06:
         19:b1:0b:f8:fa:20:fd:df:e5:36:cb:b6:89:ef:88:cb:78:5a:
         b1:f2:5c:8d:02:c4:cb:f5:8c:c3:15:7a:fb:8a:95:e6:df:20:
         51:52:07:da:1f:8c:80:f1:41:65:7d:19:a5:af:45:40:45:d2:
         25:61:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:38 2026 by rpki-client