Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File:                     1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier:          kRlQbMEtLQACOzGS0eTnDS1PhkFYiq7eOKC4jH3u2ls=
Subject key identifier:   36:D1:84:70:E3:4E:F9:18:43:F0:A0:7F:0F:D3:C7:AB:66:7D:94:9D
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer:       /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial:       019E1F10FE3BA6794D16F73F35037D28D76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:07 +0000
Manifest this update:     Wed 13 May 2026 02:01:07 +0000
Manifest next update:     Thu 14 May 2026 02:01:07 +0000
Files and hashes:         1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: OH0RT/ZDElSrtsFY7sOgu3fUnNaLWdsgifqGcXt/d/k=)
                          2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:fe:3b:a6:79:4d:16:f7:3f:35:03:7d:28:d7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
        Validity
            Not Before: May 13 02:01:07 2026 GMT
            Not After : May 14 02:01:07 2026 GMT
        Subject: CN=36d18470e34ef91843f0a07f0fd3c7ab667d949d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:94:23:f6:de:16:74:0d:97:e9:dd:57:0b:
                    be:8b:1a:dd:78:7e:a9:df:b0:d0:c0:2a:3c:b2:70:
                    c3:01:41:13:ef:67:72:e1:49:a5:18:28:35:c2:d5:
                    4e:e0:f1:51:fb:de:08:de:e7:bb:29:de:48:25:ba:
                    cc:d9:93:9f:01:9f:7e:b5:34:8a:ec:38:fd:bc:b6:
                    aa:5d:c6:e7:c4:de:1d:44:04:e5:55:a4:bd:2e:5e:
                    52:ee:36:0f:b6:80:d9:ea:53:e1:ec:26:cb:ed:f5:
                    c2:58:df:44:ed:cb:68:55:6c:e6:06:f7:9a:d8:24:
                    9a:d3:1b:e5:f4:f8:1f:f5:72:e0:bb:8f:b7:b2:cf:
                    26:82:d1:d6:dc:5b:c8:5b:61:3d:5c:99:da:b5:76:
                    b9:f5:19:d1:23:1c:b8:be:93:38:d1:d3:d3:24:e8:
                    3f:f4:5f:d7:ff:e9:2f:7d:fc:4a:ca:72:5d:db:4a:
                    56:3b:b3:8b:a8:44:4e:d7:cd:a3:39:aa:5c:f6:f1:
                    7f:9c:5d:9f:77:47:23:c6:c0:8d:0d:9d:1d:da:05:
                    90:5d:b7:5c:de:33:85:25:d9:e1:fb:fe:ac:4b:8b:
                    88:f9:07:8c:4b:95:23:10:15:2b:96:a6:38:b7:a8:
                    d8:f8:ec:fd:af:22:03:84:2a:f1:87:33:ce:b8:65:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:84:70:E3:4E:F9:18:43:F0:A0:7F:0F:D3:C7:AB:66:7D:94:9D
            X509v3 Authority Key Identifier:
                keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9a:4a:e2:3d:2d:60:36:9a:3e:94:c4:1c:ee:4c:b8:7b:67:
         fd:02:e3:18:60:93:f3:ed:88:7d:2e:16:f4:ff:2b:ba:92:21:
         6e:cd:5e:8d:2a:c0:be:b1:66:bc:c1:fa:8b:12:99:33:9f:cf:
         20:0a:cf:13:af:59:c1:ed:f7:a0:cc:18:f8:a3:de:ac:65:a9:
         96:8b:ea:10:a0:b5:ef:43:31:b6:66:64:2b:11:3f:d7:c5:99:
         dc:61:de:97:69:33:57:35:7c:59:5c:fc:51:11:69:6d:10:ec:
         07:6c:80:e3:4d:4c:06:30:39:55:57:52:54:18:fc:b3:13:cd:
         93:8f:79:46:b0:0b:a1:c4:89:e2:0f:68:4c:05:b4:a5:cb:43:
         68:6b:a1:70:58:7d:d0:e6:fa:c0:aa:f0:e7:3d:14:71:f6:84:
         32:b5:f9:22:e7:72:97:c5:32:a3:cd:35:e8:4d:43:7d:6b:b0:
         67:6f:b0:db:d6:1d:40:3e:7d:eb:98:1f:cb:07:89:23:72:a0:
         f4:ea:1b:bc:6e:87:d5:92:cb:f4:9b:ec:cd:bc:91:9e:3f:96:
         50:b0:92:9d:b2:71:4a:12:91:f2:0f:3c:29:25:f2:41:6c:51:
         2e:e3:da:3d:83:7b:fd:b0:d5:b2:d2:c4:3e:2a:02:8b:f3:f3:
         45:b2:88:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEP47pnlNFvc/NQN9KNdrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzBhMjk5NDFlZmJjN2E3OTI3ZjAyOTQ4MWUyYzcyNWEx
YTY3MTEwHhcNMjYwNTEzMDIwMTA3WhcNMjYwNTE0MDIwMTA3WjAzMTEwLwYDVQQD
EygzNmQxODQ3MGUzNGVmOTE4NDNmMGEwN2YwZmQzYzdhYjY2N2Q5NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEuUI/beFnQNl+ndVwu+ixrdeH6p
37DQwCo8snDDAUET72dy4UmlGCg1wtVO4PFR+94I3ue7Kd5IJbrM2ZOfAZ9+tTSK
7Dj9vLaqXcbnxN4dRATlVaS9Ll5S7jYPtoDZ6lPh7CbL7fXCWN9E7ctoVWzmBvea
2CSa0xvl9Pgf9XLgu4+3ss8mgtHW3FvIW2E9XJnatXa59RnRIxy4vpM40dPTJOg/
9F/X/+kvffxKynJd20pWO7OLqERO182jOapc9vF/nF2fd0cjxsCNDZ0d2gWQXbdc
3jOFJdnh+/6sS4uI+QeMS5UjEBUrlqY4t6jY+Oz9ryIDhCrxhzPOuGV9fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbRhHDjTvkYQ/Cgfw/Tx6tmfZSdMB8GA1UdIwQY
MBaAFNcwoplB77x6eSfwKUgeLHJaGmcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2Et
M2MwZmExOGM1OGNiLzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2EtM2MwZmExOGM1OGNi
LzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5pK4j0t
YDaaPpTEHO5MuHtn/QLjGGCT8+2IfS4W9P8rupIhbs1ejSrAvrFmvMH6ixKZM5/P
IArPE69Zwe33oMwY+KPerGWplovqEKC170MxtmZkKxE/18WZ3GHel2kzVzV8WVz8
URFpbRDsB2yA401MBjA5VVdSVBj8sxPNk495RrALocSJ4g9oTAW0pctDaGuhcFh9
0Ob6wKrw5z0UcfaEMrX5Iudyl8Uyo8016E1DfWuwZ2+w29YdQD5965gfyweJI3Kg
9OobvG6H1ZLL9JvszbyRnj+WULCSnbJxShKR8g88KSXyQWxRLuPaPYN7/bDVstLE
PioCi/PzRbKIbQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:41 2026 by rpki-client