Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File:                     ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier:          44dK9Vu6AXTThoeV1ka+OQFsU6P5poz2NC1NyGzLXA0=
Subject key identifier:   A6:8C:57:69:C3:33:5E:A8:81:D9:E0:27:40:81:9F:F3:CB:1A:C5:53
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer:       /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial:       019E1E6C2AA928C642CD23BF6B3874BF7891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number:          0CF0
Signing time:             Tue 12 May 2026 23:01:05 +0000
Manifest this update:     Tue 12 May 2026 23:01:05 +0000
Manifest next update:     Wed 13 May 2026 23:01:05 +0000
Files and hashes:         1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
                          2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: zROk4D982nSMN/XG6HxwXHdbsV9KFwe9SY0oRweDyJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:2a:a9:28:c6:42:cd:23:bf:6b:38:74:bf:78:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
        Validity
            Not Before: May 12 23:01:05 2026 GMT
            Not After : May 13 23:01:05 2026 GMT
        Subject: CN=a68c5769c3335ea881d9e02740819ff3cb1ac553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:3b:d8:16:ea:ff:86:f3:bc:4f:d5:73:03:
                    ff:ac:29:07:c7:58:fc:89:94:7d:ac:8f:d4:42:4d:
                    d4:fb:38:d4:e2:e3:55:ea:49:4d:75:e8:aa:8e:22:
                    43:8f:72:97:63:02:2a:90:99:f1:0e:51:2a:fc:37:
                    b2:80:04:b8:c8:a2:bd:e2:aa:e0:cc:d9:76:32:db:
                    10:93:01:07:b9:29:60:0e:fc:57:56:94:f5:19:14:
                    4a:9d:ce:29:90:2b:e2:ff:52:34:78:58:21:47:31:
                    13:e2:07:75:dd:7f:64:e8:a9:97:ae:de:78:04:53:
                    cb:2e:d6:68:30:14:1c:00:21:bd:0c:a5:02:e0:18:
                    29:42:e6:7b:c3:a7:9a:a8:a3:44:2f:47:4f:79:23:
                    63:a1:0f:e8:1f:79:47:11:10:77:6b:4e:39:b1:da:
                    aa:46:c8:59:93:be:3b:41:13:ca:7b:81:da:1a:27:
                    87:ee:6a:1d:18:2d:ca:df:79:29:0d:1f:b9:97:5e:
                    92:ad:2b:93:1d:26:9a:42:d4:68:c0:be:a7:0e:bb:
                    bd:fd:7f:c8:78:fc:9c:32:ae:c5:bf:4b:a5:bb:71:
                    49:60:51:b0:a5:ee:db:72:c0:7d:2d:e7:19:6a:74:
                    5a:bb:d1:7b:18:96:09:19:fa:e4:c7:63:ad:d6:6e:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:57:69:C3:33:5E:A8:81:D9:E0:27:40:81:9F:F3:CB:1A:C5:53
            X509v3 Authority Key Identifier:
                keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:d6:46:cf:5e:fa:1e:31:b5:44:bc:94:ee:b0:57:0c:df:
         0d:6e:7b:ff:96:93:b9:65:68:e4:6a:54:27:0b:28:e6:2c:70:
         12:3c:6a:49:64:51:ad:09:17:c7:89:47:3c:a0:6d:05:e9:b3:
         cf:a5:b5:74:55:c8:4a:60:21:b6:80:b7:a1:e6:69:84:d5:88:
         02:c3:2d:0d:b9:68:00:1b:9e:5a:f0:59:7c:37:ec:c8:e0:34:
         c9:17:cc:56:48:89:be:db:b0:fd:4f:56:63:72:1d:4f:a5:d9:
         9e:88:7c:d6:6f:7d:3c:7a:0e:b7:27:60:49:df:63:da:5a:10:
         53:55:b2:26:f2:fa:a8:cb:41:9e:b3:fc:3f:d5:9a:8f:3f:55:
         34:92:a3:f8:48:30:1e:4f:d5:c2:94:d8:d7:78:2e:39:49:a9:
         8e:dc:5e:3e:52:8a:8b:1a:9e:e6:2f:a0:c0:ad:9e:d3:6e:d2:
         0c:e0:6e:db:eb:cb:1d:ab:34:52:78:37:89:aa:e5:b9:5a:71:
         82:b5:80:dc:65:d0:84:46:25:02:36:f6:29:ad:bc:ee:5e:9e:
         51:cc:7c:dc:e9:ed:23:ee:0e:4d:83:72:06:99:34:d7:76:c9:
         55:73:c7:4d:51:17:fe:df:1b:40:a7:f6:d0:62:8c:2c:0a:10:
         24:75:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:29 2026 by rpki-client