Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File:                     zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier:          u/icxSK7kGZTMvoE8QoOn4ooxOTa0sIUzoe1gbvZ5f4=
Subject key identifier:   84:9B:04:36:F1:77:EF:D6:FA:EF:BE:89:54:F5:6F:E6:AB:2A:CB:A4
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer:       /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial:       019E1F47C2707DE80685B0330E94753B4E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number:          051A
Signing time:             Wed 13 May 2026 03:00:56 +0000
Manifest this update:     Wed 13 May 2026 03:00:56 +0000
Manifest next update:     Thu 14 May 2026 03:00:56 +0000
Files and hashes:         1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
                          2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: T29FtcmySYZJ4JzlIskKV1eyKAmn/wRoE+ehIAgLEX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:c2:70:7d:e8:06:85:b0:33:0e:94:75:3b:4e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
        Validity
            Not Before: May 13 03:00:56 2026 GMT
            Not After : May 14 03:00:56 2026 GMT
        Subject: CN=849b0436f177efd6faefbe8954f56fe6ab2acba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:29:fd:53:65:1d:3c:bd:c0:dd:76:01:6d:
                    39:9f:7f:1b:32:6c:e6:34:b3:a8:cc:87:48:05:97:
                    8a:4b:7e:e4:42:4a:12:7b:2d:f3:5e:d3:89:41:86:
                    cd:38:bb:59:89:07:86:5d:d9:92:22:7b:f8:10:22:
                    12:41:0d:1a:a5:62:9c:2c:5b:cf:7a:a0:db:fa:2b:
                    29:34:20:7b:82:2d:3e:1c:e7:32:88:cb:6c:bc:24:
                    b0:9e:a7:a7:0c:9f:fa:3d:60:7d:d6:a0:df:fa:fc:
                    78:17:a1:87:89:9d:51:b9:81:92:67:dc:93:88:b5:
                    bd:d7:8a:8d:c9:3d:b3:dd:cf:b4:a1:07:a7:ac:a0:
                    a9:97:5b:1b:aa:4a:c0:f8:ff:16:c8:55:ec:7b:2c:
                    c0:55:83:a4:c2:c7:24:fa:08:88:fe:a5:22:c7:7c:
                    3c:8a:10:c6:72:2b:cf:b5:23:01:ca:3a:70:db:15:
                    43:c2:dd:9b:62:b6:28:da:4e:ad:1a:3b:68:f3:3f:
                    42:46:03:95:18:29:3f:3b:e6:d6:ed:4c:55:5e:bc:
                    ce:62:8d:03:3f:c3:f3:cc:84:8c:e4:b8:58:12:16:
                    c8:f5:31:a2:3f:ee:3d:75:28:81:4d:f3:0f:f7:36:
                    fa:12:4a:7d:25:85:13:a5:2c:a9:ac:9f:a5:81:bc:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9B:04:36:F1:77:EF:D6:FA:EF:BE:89:54:F5:6F:E6:AB:2A:CB:A4
            X509v3 Authority Key Identifier:
                keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:ee:74:1e:74:ee:5e:8e:0b:00:f9:25:ee:b2:25:0b:10:28:
         d1:89:53:1b:4d:8d:51:75:55:0d:30:6b:df:98:fe:45:51:e0:
         f9:89:d6:03:54:83:26:fa:92:95:62:e9:d9:25:47:d8:20:73:
         70:d2:26:67:fc:28:1e:5d:02:57:9d:9b:a7:f8:1f:68:71:d5:
         f0:b7:b9:36:95:94:16:44:1b:93:29:61:f7:0c:12:9d:0b:e8:
         4b:8d:e9:46:2b:a3:c4:00:d2:3f:d6:da:82:3e:f6:c9:03:ec:
         8c:f6:e2:eb:54:b6:79:81:a6:97:c0:94:87:60:35:d0:2f:81:
         fc:07:89:bb:0c:b4:13:00:53:0a:c5:cb:36:ea:67:3f:81:4d:
         cc:b5:23:74:7a:ff:40:ce:f2:a6:29:00:56:6e:4c:37:6a:2d:
         9e:b3:9c:b4:e1:eb:5a:0c:05:6e:1e:27:10:db:85:4b:63:97:
         59:94:83:64:84:8e:90:9c:f9:8b:87:91:3f:c3:05:cd:a9:9c:
         36:a1:e6:87:77:20:57:9b:76:82:94:9a:4f:db:5b:14:8b:95:
         28:0a:37:81:22:85:86:2f:ad:2d:34:12:f5:48:60:d4:26:95:
         ac:63:12:7a:cc:68:dd:c8:25:e2:18:22:c9:44:9c:19:f0:2c:
         af:79:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:25 2026 by rpki-client