Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File:                     ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier:          wm8+aQnmIxjoXWH9rzYvfYBvRDu/l5MLlA7Bwtx9v5I=
Subject key identifier:   BF:51:4E:6B:C8:34:5B:91:F3:52:B6:76:81:3C:27:24:61:3B:64:2C
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer:       /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial:       019E1F7E6EEB71869DB34E315FF3891ADA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number:          1347
Signing time:             Wed 13 May 2026 04:00:39 +0000
Manifest this update:     Wed 13 May 2026 04:00:39 +0000
Manifest next update:     Thu 14 May 2026 04:00:39 +0000
Files and hashes:         1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
                          2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: sN0HceYuWWV+f7zjYuL82hnkKkcDURQUMqZLmQO0ibY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:6e:eb:71:86:9d:b3:4e:31:5f:f3:89:1a:da:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
        Validity
            Not Before: May 13 04:00:39 2026 GMT
            Not After : May 14 04:00:39 2026 GMT
        Subject: CN=bf514e6bc8345b91f352b676813c2724613b642c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:ad:26:85:cb:17:43:de:0f:47:31:fa:1f:
                    50:9c:d7:28:ab:d8:0c:85:47:13:ba:c9:f3:5a:89:
                    66:2e:98:64:86:30:20:1e:da:fa:4a:92:5e:d8:2d:
                    46:38:df:32:45:e1:9c:bb:59:4d:90:c5:46:88:7e:
                    09:c6:43:a5:a5:b9:1a:4e:2f:ab:3e:9b:b6:0c:cc:
                    0f:ed:3d:ae:75:45:37:fa:f8:ae:c3:0d:d7:ac:67:
                    20:03:b4:64:a4:48:55:68:79:12:aa:61:f5:e7:0b:
                    0a:f8:00:41:53:5b:05:2a:65:21:af:70:45:af:50:
                    c5:67:56:8c:bc:dd:fc:19:ca:9c:79:88:8a:8b:7b:
                    4e:49:5f:ed:71:32:8a:a2:35:61:9d:6a:70:10:1a:
                    10:0c:6b:04:8f:a8:07:dd:32:98:ee:87:8f:28:b7:
                    b5:24:0c:2f:64:e7:6a:80:a1:fb:b6:6a:31:de:0a:
                    56:66:af:30:d3:a1:01:da:40:0a:d8:43:2b:91:f0:
                    46:d5:36:e3:2e:3c:4c:0f:fc:df:9b:66:1f:7a:bf:
                    db:c6:e0:47:31:4c:fa:65:97:32:e2:63:30:52:69:
                    7a:d6:a9:a8:06:88:b4:9c:1d:65:c5:62:54:3b:3b:
                    09:ea:7e:ac:ce:1a:13:b1:df:e5:56:da:bf:35:66:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:51:4E:6B:C8:34:5B:91:F3:52:B6:76:81:3C:27:24:61:3B:64:2C
            X509v3 Authority Key Identifier:
                keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:11:74:44:3e:3d:62:84:7e:12:69:24:60:dc:d3:fb:57:
         7f:00:d2:d9:44:4b:d5:8a:64:5d:65:ad:1f:8c:b2:25:98:d7:
         f0:4e:0a:4f:26:d8:c8:71:70:e1:a5:6a:e0:dd:5f:d6:e1:1c:
         a2:47:a5:71:a7:0a:db:e4:00:11:0c:15:78:64:87:a3:74:3a:
         9c:1f:20:f7:42:82:71:ab:86:7b:5f:71:16:e5:c5:8c:ed:81:
         ae:ea:0c:41:32:d4:e7:19:1b:53:7b:a2:9f:1d:8c:fa:0f:f3:
         ea:3f:26:22:72:59:e8:c9:59:08:38:31:36:f3:08:c2:f3:50:
         4c:a8:21:11:ae:f2:6c:6d:6e:c1:d4:ce:c5:13:88:67:b1:4b:
         53:e5:6d:57:a0:75:36:43:91:b1:f7:b3:fa:25:9e:54:eb:d3:
         1d:00:58:d6:f7:3b:36:93:5a:f1:60:62:93:23:1a:50:26:0e:
         10:1b:30:bc:46:30:50:65:b7:6f:cf:ab:59:34:9a:08:50:ca:
         bf:ae:07:78:a3:c5:7c:7e:dd:5a:5b:95:27:54:cf:42:2c:5e:
         4f:3d:62:69:82:91:dc:24:a0:9b:2a:ca:38:6f:2b:f8:13:81:
         17:ea:1b:17:37:f1:26:18:70:2e:05:7d:a3:61:6e:32:2d:7e:
         af:50:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:50 2026 by rpki-client