Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          XZojo3Qvh0YMawTpVRXy93N7ELjmBtySUn6LrJkLMMQ=
Subject key identifier:   08:C2:AE:16:FF:61:11:81:CF:57:A4:2A:0F:F7:F5:C1:25:F6:AA:66
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       019E1F47C2CDEA4A2661BF68C52D0DE034F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 03:00:57 +0000
Manifest this update:     Wed 13 May 2026 03:00:57 +0000
Manifest next update:     Thu 14 May 2026 03:00:57 +0000
Files and hashes:         1: Jn62z3mXSy1gXL7OU0u8UHUvETk.roa (hash: kRvtxB45lBHtSWkwsN/FFj92E84r6pWGnn92gwu5MRk=)
                          2: ZZTFmfbdMQ6snkjprGV8Heyn37E.roa (hash: lKKyBMRX1vPM6siDs8lqYfEIzSGcaMWz+LcZio2IfVk=)
                          3: ni888ovsC-BTLPerI4QeQ0fgZFE.roa (hash: 7VDMLDKY6Y0XMf/x1rrlPpTjJxlLSO2U8m99nvv5wFc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: HCYEOdLXyi0KzX+sSyxOJMS7kYrsvYRMN4k6UIBvbuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:c2:cd:ea:4a:26:61:bf:68:c5:2d:0d:e0:34:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: May 13 03:00:57 2026 GMT
            Not After : May 14 03:00:57 2026 GMT
        Subject: CN=08c2ae16ff611181cf57a42a0ff7f5c125f6aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:38:b0:22:37:bb:32:0d:81:cb:76:42:6b:bd:
                    50:25:3d:38:6b:c9:9b:46:89:1a:a7:86:6a:43:9a:
                    d5:5a:1c:3a:23:1f:06:67:f7:0f:30:c4:d9:6e:0f:
                    97:4d:3f:01:f6:fa:9d:0f:78:51:82:c0:27:b3:c9:
                    86:3d:d8:e6:fd:0b:60:d9:d6:4f:10:97:e2:45:08:
                    59:ad:62:c7:77:de:b1:31:a1:ab:f3:c3:59:18:30:
                    c6:36:69:e4:70:9b:95:7a:5f:95:65:4f:8d:d8:27:
                    ef:56:f1:6f:e5:04:20:10:c4:b2:66:3b:60:70:4a:
                    56:38:66:3d:c5:43:3e:00:b4:44:b8:24:bc:3f:86:
                    e7:0b:54:8a:75:03:c8:f9:27:7e:9a:80:7c:9c:0e:
                    53:83:05:12:bb:a2:02:47:22:d7:76:96:8c:1f:1b:
                    f2:54:b5:4d:e4:82:e3:82:bc:b5:69:f7:2e:21:a1:
                    25:6a:71:68:8d:eb:c6:0e:39:4f:e0:91:ae:eb:30:
                    38:f6:6b:a1:2e:63:fc:70:6a:be:ce:73:9e:37:d6:
                    c8:aa:93:a6:12:a2:90:3c:e5:0a:31:cc:90:d2:80:
                    20:83:63:18:49:81:6b:ab:3a:c9:8e:75:5c:f8:3c:
                    1b:78:d4:62:3c:46:bf:e1:6e:9a:05:bb:0b:09:33:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C2:AE:16:FF:61:11:81:CF:57:A4:2A:0F:F7:F5:C1:25:F6:AA:66
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:46:ab:6b:30:37:5e:97:3a:6b:d8:34:ba:b7:86:02:24:
         3e:56:ec:d9:d1:2a:57:3f:9f:53:1a:8a:d0:78:dd:dd:a1:0b:
         4c:92:ab:fe:0e:dd:ec:69:76:eb:bb:6d:73:a3:cd:5d:ca:b1:
         fd:d2:86:37:e9:f0:5b:18:62:c3:5f:ab:50:0f:af:5c:cc:c8:
         f9:dc:06:23:f3:fc:a8:2c:a5:57:5c:0a:79:0f:f5:1d:c8:c6:
         38:7b:7d:51:75:66:25:5e:39:e7:86:80:f3:63:3d:1f:72:04:
         b5:b0:95:38:78:e9:d9:80:08:a2:bc:21:c9:c1:8e:31:f2:de:
         da:10:3a:b0:de:37:55:3b:94:09:05:64:f8:77:39:20:65:c7:
         20:27:40:c9:00:1b:33:61:db:bb:23:78:7d:f0:0c:7f:36:6f:
         59:f4:df:fa:80:2f:ff:cc:b6:00:b7:7f:2a:3a:12:59:64:2b:
         d8:5c:f1:21:03:eb:33:d1:78:e8:25:3c:3a:46:29:74:3c:21:
         09:78:e2:41:61:e5:94:45:da:e6:2c:8e:fc:3e:0e:9b:29:25:
         ec:2c:d6:5c:d6:b5:f2:ef:10:58:f8:fc:59:d3:b6:71:c2:bb:
         30:38:5f:87:c9:25:49:ba:32:6f:f7:33:42:04:bd:90:e4:88:
         9a:53:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:50 2026 by rpki-client