Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File:                     zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier:          a42VzL4VDpITBb2X2aSMQF6ZcIRfpHIKuZGddYcf1wY=
Subject key identifier:   58:7F:3D:61:5C:71:2D:78:F3:E0:31:00:A7:90:69:6E:8E:F7:BB:B2
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer:       /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial:       019E1FEC41AFF94A3E80A0C9A1D5184DA739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number:          13C8
Signing time:             Wed 13 May 2026 06:00:37 +0000
Manifest this update:     Wed 13 May 2026 06:00:37 +0000
Manifest next update:     Thu 14 May 2026 06:00:37 +0000
Files and hashes:         1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
                          2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: bNxgA5rUWReWtUJKG8slpKhmABqAFITsjw59oML81eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:41:af:f9:4a:3e:80:a0:c9:a1:d5:18:4d:a7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
        Validity
            Not Before: May 13 06:00:37 2026 GMT
            Not After : May 14 06:00:37 2026 GMT
        Subject: CN=587f3d615c712d78f3e03100a790696e8ef7bbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:af:03:08:81:f2:01:83:c4:d6:c9:71:9e:
                    e9:a2:e6:15:bd:d7:18:dc:fd:80:b3:22:8d:1e:b1:
                    dc:c3:ac:25:1a:86:37:c3:94:9f:b3:1f:cd:51:c2:
                    98:08:47:e0:17:03:57:39:9c:31:42:65:49:e8:fb:
                    be:d2:9a:54:73:97:80:19:52:e3:e6:36:60:79:1f:
                    39:3d:b0:61:ec:a1:8f:c5:8f:6e:f2:f3:8e:bc:84:
                    a9:93:7c:7a:b4:4b:be:4c:b3:23:fa:25:fc:17:43:
                    dd:a6:24:c2:15:23:18:90:c7:5a:14:49:a9:c1:f6:
                    37:09:ad:1c:a7:47:84:2e:65:92:8e:c6:82:74:33:
                    60:d8:67:78:38:e7:18:0d:c5:f0:b3:dd:25:d5:35:
                    bc:00:c5:12:d6:f8:37:4b:07:43:86:49:00:59:43:
                    6e:4c:18:15:cf:06:41:bd:f8:1c:db:79:46:74:68:
                    45:39:ac:c8:2f:e4:c1:60:cf:0c:bf:6e:94:d0:e4:
                    64:7b:e5:3c:85:94:1c:da:7b:94:71:8c:a5:6f:56:
                    6c:46:de:dd:05:da:d6:17:0e:0c:f8:2c:a2:61:fe:
                    fe:7c:6c:2e:d8:ea:b0:84:85:3e:a8:d7:6e:e6:0a:
                    17:8c:4a:55:4a:6f:1d:21:db:34:69:d5:61:08:b0:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7F:3D:61:5C:71:2D:78:F3:E0:31:00:A7:90:69:6E:8E:F7:BB:B2
            X509v3 Authority Key Identifier:
                keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:4b:05:5f:56:c5:4d:1a:d6:28:a9:bf:25:6c:f4:80:fb:
         09:73:b8:cf:f5:3c:8b:1e:c7:d6:66:36:13:1b:35:e0:0b:f4:
         bb:60:fa:66:18:8c:b2:91:00:8a:cb:60:24:b2:78:04:6f:47:
         9c:43:2a:c5:cd:43:75:7a:ee:0c:b5:c7:70:a5:35:72:59:c8:
         3f:e3:b3:ad:93:f1:39:52:56:8f:fd:13:4e:dd:76:eb:2b:69:
         44:74:cd:19:5c:16:85:0b:35:87:70:13:2f:85:cb:bb:22:8c:
         1f:f0:c8:38:0c:ee:7a:37:68:fa:22:42:aa:4a:8a:11:bc:01:
         18:6e:bf:36:c5:b7:a2:c4:d0:93:dd:7b:b0:bf:e5:73:4b:32:
         9b:f1:af:77:2a:44:81:4f:d7:5b:47:0e:71:b8:f5:0e:dd:80:
         ce:09:a5:d7:09:b9:b4:ae:07:93:00:df:d5:1b:90:93:f1:2a:
         e9:96:d4:a6:c0:ac:02:e4:c8:c4:cd:2a:8c:c1:ca:25:cf:fb:
         62:34:37:94:11:f5:f5:47:83:b9:26:70:b7:5c:53:e8:c9:63:
         36:c8:ef:b0:2f:6d:4c:fa:fd:60:4c:dc:8c:ec:2e:b5:a7:ef:
         a3:eb:80:78:ef:ef:7d:7c:60:9c:15:a1:1c:65:8c:d1:24:88:
         ad:e8:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:13 2026 by rpki-client