Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json)
Hash identifier:          Mh66QYK9NCrbntvxlP9ygZzNQCZeDlbYt/LjxmlgfU8=
Subject key identifier:   57:48:D2:AE:C6:A3:4E:43:D9:87:30:A8:D6:D0:39:37:B2:0B:11:CD
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Certificate issuer:       /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial:       019E1D2269CB2B8BF061B6D2E769777E9A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 17:00:55 +0000
Manifest this update:     Tue 12 May 2026 17:00:55 +0000
Manifest next update:     Wed 13 May 2026 17:00:55 +0000
Files and hashes:         1: 0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa (hash: 2PcsF5G0Mq3lPMeGvxmpYXNXSdp0a4eMQFAaAmAvtYY=)
                          2: B_S5icIbEZu3NRi7pO3M0FoxLBY.roa (hash: NpXzXVIDrJc5PoL2K8nkZP6JJq6luR8bBGM3/nlrQ3I=)
                          3: _w8qU7QLDWariPOfRN9OMYuyNWM.roa (hash: 7rGZ50HKoADJZt0gKXjNdUDKxe/HyV19YQRWiM3XHAo=)
                          4: awc83yGNtXzyjqzRMTElkzhM-Io.roa (hash: PQ/L7qMRaTtcJZl8Z1BC36Zg7hT94D0vhYdETaZzx5c=)
                          5: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: SjK/BES14tgRkXtKGv8lqIPF1G48mPApt0f3v/bIMII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:69:cb:2b:8b:f0:61:b6:d2:e7:69:77:7e:9a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Validity
            Not Before: May 12 17:00:55 2026 GMT
            Not After : May 13 17:00:55 2026 GMT
        Subject: CN=5748d2aec6a34e43d98730a8d6d03937b20b11cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:53:e1:6b:68:94:ef:d8:1b:86:a4:f9:4c:
                    3a:1c:0f:d4:e4:0a:e1:08:6f:9e:ce:20:18:a6:23:
                    47:e3:1b:b6:d4:b8:6c:51:45:61:6b:ac:12:ad:90:
                    16:ca:c5:90:fb:fb:50:7f:63:73:c9:ac:5a:76:91:
                    af:2c:19:bb:18:cf:ae:5a:86:ea:3e:e1:6c:32:55:
                    45:ab:ab:cd:5c:cb:f3:ec:34:b9:e4:39:c8:82:82:
                    17:53:0b:f0:2a:31:8e:72:38:f1:d4:a2:33:07:a4:
                    20:de:93:cb:da:f0:85:8e:1d:d2:18:09:63:67:0f:
                    ef:7d:f3:bc:dd:b9:81:43:6d:2f:0f:5f:d6:a9:55:
                    87:5e:4e:ff:fe:40:cb:78:8a:44:cc:f4:a2:75:bb:
                    9c:9c:02:bb:50:50:a7:e4:d3:40:16:61:8f:17:d8:
                    2a:46:b3:90:88:2a:c5:43:7e:f7:e5:d8:0c:19:0a:
                    c8:27:6b:57:e4:42:c0:56:fa:97:38:76:c1:c0:8a:
                    9a:4d:e1:63:29:17:c4:07:8e:e2:da:b0:f2:24:95:
                    14:6d:07:5e:8a:e4:79:cc:5b:71:ff:52:b4:8c:6a:
                    3d:03:3e:5e:ee:09:bc:ca:57:fa:50:e3:6f:5a:63:
                    7c:52:ef:9c:29:fb:c1:48:e8:cb:68:98:f0:32:a9:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:D2:AE:C6:A3:4E:43:D9:87:30:A8:D6:D0:39:37:B2:0B:11:CD
            X509v3 Authority Key Identifier:
                keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:53:7f:1a:6c:ad:c1:a4:65:66:96:b0:c0:d1:c0:35:e8:a8:
         37:99:ae:b1:94:18:03:52:09:24:8c:a0:9b:cb:0f:df:fa:43:
         97:cb:80:e5:be:6e:16:14:b4:1b:27:78:53:1c:22:c8:81:77:
         46:fb:dd:71:a6:aa:8a:b0:30:43:fc:2f:70:27:1c:86:a9:f9:
         da:89:19:a3:55:35:4e:f0:e0:0c:6a:29:6d:8c:36:d1:9e:1e:
         19:fa:84:61:61:52:ee:cb:5f:57:e5:8b:42:44:e8:26:a7:54:
         80:17:e2:f8:77:32:52:1b:87:07:36:dd:cb:77:7a:be:ec:48:
         4e:fc:a7:0c:36:7d:d4:66:4e:15:0e:39:cc:2b:98:0f:8d:76:
         bf:54:3d:d7:22:3f:b0:6a:00:97:bc:a5:46:72:d3:5a:07:ca:
         b6:b4:93:74:df:19:e8:53:8e:ba:da:f2:78:f8:73:17:0a:9d:
         ab:fd:75:0c:0f:84:e3:89:95:99:06:ca:46:1e:eb:ed:c9:a4:
         f1:a5:a6:76:b3:39:f6:fc:61:4d:8d:07:84:46:e0:80:1e:b8:
         c0:09:53:00:89:bf:7f:e2:13:94:d8:f9:62:33:57:32:56:09:
         8c:b7:e6:9a:da:06:4f:b3:51:61:5d:7a:70:25:48:71:1e:93:
         93:73:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:57:33 2026 by rpki-client