Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File:                     zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier:          uosp5sdrmGuREbSM+tf1LnsdF5Efh4HrfoAwOh2x2uY=
Subject key identifier:   AD:A9:02:F7:69:AB:C2:1E:35:D8:A6:57:7E:64:57:A3:FC:17:9B:84
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer:       /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial:       019E1ED9D3EDDC1AA6421CB2EC2DB688248B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number:          0A77
Signing time:             Wed 13 May 2026 01:00:52 +0000
Manifest this update:     Wed 13 May 2026 01:00:52 +0000
Manifest next update:     Thu 14 May 2026 01:00:52 +0000
Files and hashes:         1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=)
                          2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: oHv4vdThImt9N+1Q1QxNsrp8HbQeVE5nE7kWsAGbGlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:d3:ed:dc:1a:a6:42:1c:b2:ec:2d:b6:88:24:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
        Validity
            Not Before: May 13 01:00:52 2026 GMT
            Not After : May 14 01:00:52 2026 GMT
        Subject: CN=ada902f769abc21e35d8a6577e6457a3fc179b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:83:c9:cd:47:fd:b0:7a:e8:10:16:4f:77:
                    65:76:51:9b:ec:0f:03:07:e2:ae:2b:39:8a:49:4f:
                    06:92:d2:02:12:50:ae:74:51:a0:7c:a1:c9:0d:9c:
                    88:b8:6e:83:ac:81:84:72:8b:c0:f9:cd:4e:e4:bb:
                    b9:75:ec:3a:a8:fd:1d:56:32:3c:1b:ec:17:39:e2:
                    2d:56:69:0c:a4:91:e4:a8:16:45:b3:26:b5:f1:91:
                    98:28:cd:7e:48:ef:96:43:89:db:25:ab:a2:14:ff:
                    11:a8:cf:18:17:3e:28:db:3e:a2:1a:e7:f0:62:ae:
                    25:ed:21:9d:d0:3c:5c:b4:11:4a:98:2c:ed:fe:e3:
                    9f:d7:ea:45:6a:1b:83:ae:28:f1:b6:6e:96:5b:2b:
                    e5:f4:d4:11:89:1f:72:3a:9c:ee:0d:65:c7:64:05:
                    01:96:f8:af:aa:f1:4c:dc:0b:45:bc:3b:91:d5:2e:
                    b3:ff:20:37:1c:00:f0:b6:46:be:6b:74:e3:51:33:
                    0b:6b:0e:b4:4e:5d:20:3b:64:af:54:cf:20:2e:45:
                    7c:4c:01:e8:cd:d3:99:3d:e6:fc:47:04:0c:f2:c0:
                    d9:73:11:03:3a:bd:ac:3b:18:80:cf:30:71:a0:76:
                    1b:c1:d4:31:d2:c1:9c:a4:61:6f:a4:48:19:6f:fd:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:02:F7:69:AB:C2:1E:35:D8:A6:57:7E:64:57:A3:FC:17:9B:84
            X509v3 Authority Key Identifier:
                keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:b6:4a:dc:ed:b0:1b:b3:32:45:39:b5:e6:73:f0:ed:39:
         ec:6d:ee:54:a0:ab:c7:9b:a8:14:9f:15:64:c6:ca:12:31:44:
         61:51:9a:e9:6c:ae:32:42:5d:60:18:72:f8:be:8f:f9:6d:db:
         88:c3:a2:dd:b5:7b:d1:82:82:ae:f0:92:83:c4:4a:57:b5:8b:
         e6:b5:2a:e3:43:d2:1f:7c:7e:c2:b6:37:14:8f:81:48:aa:4a:
         3a:d8:5c:1f:54:17:d6:d9:ee:93:0b:60:31:b6:52:9c:16:f5:
         bb:dc:1f:a7:37:73:1e:27:1f:c6:39:1b:f8:b7:ff:90:1f:19:
         ce:36:d1:0b:90:e9:df:8a:ae:c6:65:9c:ab:30:db:7e:e1:fa:
         eb:38:2d:e8:51:cc:27:84:63:e8:99:69:c3:14:4a:c5:05:71:
         41:83:ab:29:e7:c6:94:e2:07:89:af:3c:f1:26:78:5b:52:18:
         eb:b2:84:19:e6:3c:2f:e7:26:90:02:de:98:bb:ed:6c:a8:35:
         53:a3:0c:d8:5e:7a:c4:7e:a9:ac:02:d6:a4:e0:60:05:b9:b2:
         88:0c:bf:c8:bf:84:18:f5:33:21:e6:da:ff:5c:70:6d:ba:9a:
         5d:ec:2e:a0:fe:22:64:ce:89:15:bd:72:e7:9b:59:82:96:f0:
         7c:fb:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:26 2026 by rpki-client