Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File:                     Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier:          lMzEGgMwXs3ET3Arx0dd2thGKfJGiB41XFbgXxqw8JY=
Subject key identifier:   FA:E4:83:9F:DE:83:16:03:86:C7:6A:5F:F6:E9:85:0C:23:46:41:8E
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer:       /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial:       019E1F119CD930D3CCC270A527DCB8473F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number:          1817
Signing time:             Wed 13 May 2026 02:01:48 +0000
Manifest this update:     Wed 13 May 2026 02:01:48 +0000
Manifest next update:     Thu 14 May 2026 02:01:48 +0000
Files and hashes:         1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=)
                          2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: JtAPc0PdHyLYc9GUXCIUEJjVm3ZPoAdHaTtTK9hhVCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:9c:d9:30:d3:cc:c2:70:a5:27:dc:b8:47:3f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
        Validity
            Not Before: May 13 02:01:48 2026 GMT
            Not After : May 14 02:01:48 2026 GMT
        Subject: CN=fae4839fde83160386c76a5ff6e9850c2346418e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:ba:ad:14:9c:ea:4a:3f:55:35:5e:f2:1e:
                    87:86:49:e9:a1:43:46:36:fa:43:c3:cf:d8:6f:3b:
                    a0:fb:e1:42:5c:2e:60:e5:ed:7d:58:c0:03:64:f6:
                    bc:19:bb:2d:70:d6:10:b4:d2:1e:bd:73:5a:1c:bb:
                    14:94:0e:cf:2d:1a:44:26:48:9f:20:e8:69:1d:fa:
                    4c:06:bf:6f:ef:40:46:32:57:0c:a1:d6:ea:7a:cb:
                    eb:af:e0:01:3c:cc:b9:5c:35:61:d6:40:dc:22:ee:
                    c3:60:9a:93:0d:90:a4:81:35:fb:77:9b:cb:6c:54:
                    8a:a7:70:61:35:52:63:7b:bc:bd:dd:98:d5:bb:ff:
                    d9:43:db:ab:7f:e1:94:77:80:70:c8:f8:e8:0f:89:
                    29:d6:c4:1c:13:c2:f6:4e:29:38:2a:fe:b9:2d:8a:
                    dd:bd:2a:74:63:d2:eb:46:8c:6e:2e:7a:5f:f7:f8:
                    b2:0c:b1:82:ad:9e:c0:bf:52:e5:17:15:38:51:7d:
                    08:c2:7e:f7:66:d7:4c:ee:64:09:2d:d8:4c:ca:5f:
                    9e:ee:22:24:d8:1b:49:73:22:e0:99:d3:c5:4b:c8:
                    62:83:c6:16:05:eb:73:85:43:b7:ff:ce:f2:78:f2:
                    43:86:a4:fa:4f:da:11:3f:79:cf:58:9d:31:c2:00:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:83:9F:DE:83:16:03:86:C7:6A:5F:F6:E9:85:0C:23:46:41:8E
            X509v3 Authority Key Identifier:
                keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a0:b9:f8:2c:52:6c:8b:0f:ca:61:ba:a8:93:45:98:e9:5b:
         f8:ea:57:bc:65:f6:5d:94:62:9e:18:92:7b:9c:8c:d5:cd:8a:
         79:79:59:bf:f7:34:2e:4d:75:1c:ac:6b:5e:e2:b6:65:e3:2b:
         7a:21:05:37:8c:74:89:0f:68:a5:1e:c1:f5:54:74:8d:2f:19:
         63:79:cd:63:77:44:2b:a0:38:06:fc:4d:00:cd:ad:ad:a1:8b:
         78:1f:be:7f:5c:70:61:3e:ad:70:a3:25:ec:47:cd:15:67:c5:
         7e:15:c9:4d:4a:96:97:2b:83:fb:76:b9:c3:6c:e0:c0:4e:60:
         9e:54:c7:11:ef:c8:0d:24:14:02:92:da:7e:f4:5e:57:72:04:
         56:27:61:30:d5:cb:93:5b:de:ff:66:69:b8:09:fc:be:cf:31:
         08:65:36:32:4f:af:ad:8d:d2:82:ae:f5:29:cf:4b:43:6e:99:
         24:ba:fa:93:81:2a:dd:77:74:c5:8a:ab:77:db:b5:cf:47:d3:
         4a:41:cd:70:80:d2:d4:09:d3:88:ff:a1:75:42:d6:f2:77:4d:
         5a:bd:bf:2d:cd:c6:05:a1:2b:e4:82:62:99:bc:e2:bb:39:78:
         fa:48:82:85:60:cb:34:5d:15:7b:58:71:7c:dc:1d:12:87:60:
         a5:e7:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:19 2026 by rpki-client