Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          Ev0OIcDfPsUrIP7GIiIqENSYUSUBxT0U77mh/vsgMUA=
Subject key identifier:   20:B9:3D:D7:9C:84:8F:6D:2B:0B:AB:59:69:EA:4E:2D:2B:60:C5:EA
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       019E1DFE534BFED46A34DC5134294A58648D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          1896
Signing time:             Tue 12 May 2026 21:01:06 +0000
Manifest this update:     Tue 12 May 2026 21:01:06 +0000
Manifest next update:     Wed 13 May 2026 21:01:06 +0000
Files and hashes:         1: Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa (hash: 4ZwetJ9wkwYRliRJIgccov9XYXiW/suuU+RhySazg+s=)
                          2: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: 7VgKXCY+4rZz+bdBD4JuvOtxNTAS5vF9weT5JZLh0Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:53:4b:fe:d4:6a:34:dc:51:34:29:4a:58:64:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: May 12 21:01:06 2026 GMT
            Not After : May 13 21:01:06 2026 GMT
        Subject: CN=20b93dd79c848f6d2b0bab5969ea4e2d2b60c5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:99:10:c5:c3:3a:4d:68:b5:99:2d:7d:95:
                    b3:c5:1c:21:4c:61:93:46:07:94:59:91:17:37:11:
                    ae:c0:05:e5:a0:f1:41:d7:d6:de:90:01:3d:f5:3a:
                    22:33:10:dc:a2:d7:ee:ec:8f:7a:26:90:33:f1:61:
                    ac:d7:57:b2:41:4b:cb:d6:60:36:45:3f:5d:f9:ed:
                    ad:e8:79:b1:b0:e1:23:74:29:3a:82:89:cd:c7:56:
                    e2:1b:79:94:8d:bc:44:a9:92:7e:96:49:ac:c8:d1:
                    c4:1e:c1:56:e5:30:83:fe:c0:6b:f7:d9:f5:17:eb:
                    97:7b:c0:37:e6:6c:3e:79:bf:b1:ed:44:0d:8b:c7:
                    cf:5f:45:ae:cb:19:27:f6:36:4b:90:b7:8e:2e:2c:
                    dd:42:ce:2e:a6:02:1e:51:98:38:bc:8a:44:a6:ea:
                    4c:51:6e:eb:ac:90:0c:50:d4:b3:17:ca:d6:59:56:
                    69:86:a1:f8:6f:f2:b6:c2:97:99:6d:c9:fe:9e:1b:
                    57:b7:73:6e:56:c5:c2:38:cb:cd:d8:0e:f2:fc:cb:
                    56:45:c2:eb:8e:59:90:d4:a6:57:fa:58:bb:df:d9:
                    91:8a:cd:4c:a0:cf:c4:98:d6:d0:77:2b:8f:5d:50:
                    a2:2f:4d:29:45:65:70:50:ed:4c:a9:5b:05:23:04:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B9:3D:D7:9C:84:8F:6D:2B:0B:AB:59:69:EA:4E:2D:2B:60:C5:EA
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a6:08:6f:15:c2:d1:2c:1e:a7:f5:b0:07:ab:91:46:1d:86:
         b1:f0:fd:71:7b:1e:d3:57:6f:b9:f4:e5:db:f0:95:34:55:21:
         0a:d3:3d:3a:04:02:56:31:99:04:47:cd:88:d0:cd:92:d7:97:
         af:d8:98:95:4a:d0:ef:a6:0f:a9:21:c9:7a:04:2f:8e:04:f6:
         86:77:d6:44:a1:d8:2f:24:77:db:d0:f1:c3:e8:e4:68:43:2f:
         0e:92:e1:ba:2e:ae:77:b7:32:bc:fb:d0:d8:6c:b5:50:ad:1f:
         c8:53:6e:55:14:6d:87:b9:09:e3:17:2d:b4:ea:f0:3b:69:05:
         ef:76:c1:db:b1:28:6f:4d:d3:c6:7b:fc:fe:47:23:9a:cd:0a:
         21:21:e7:60:da:d5:63:13:e0:7f:16:57:1f:c1:94:55:e7:90:
         2b:f5:e7:c2:75:ab:a5:29:86:bb:30:d1:5c:fc:34:0a:fc:9d:
         8f:66:54:98:05:a9:f6:d1:7e:47:a3:db:ac:ce:75:64:39:41:
         58:6d:2b:69:ae:ea:61:99:c9:ed:4f:d3:2e:0b:69:dc:f4:39:
         c1:2c:c2:91:43:3c:ba:42:48:29:61:57:cc:b2:5c:bd:e3:d8:
         ac:78:2a:4f:2b:51:da:1d:be:2c:f8:54:95:0a:c0:92:4b:42:
         0f:a7:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:01 2026 by rpki-client