Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          Gw/fxv1zNdTd4u/XIv3x8C4L5YtdCvwh7cJ6NJEvc+4=
Subject key identifier:   A1:5B:D7:1C:E0:8D:9E:2D:63:57:55:B9:EB:D2:03:39:C6:B7:43:EA
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       019E1F114BFA03B5F37F48C0B8AB241B033F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          11E1
Signing time:             Wed 13 May 2026 02:01:27 +0000
Manifest this update:     Wed 13 May 2026 02:01:27 +0000
Manifest next update:     Thu 14 May 2026 02:01:27 +0000
Files and hashes:         1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
                          2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: YA3ejDrlTMrhpMaNEhKeRayNN5+MrIRNNYvnByDHOj8=)
                          3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:4b:fa:03:b5:f3:7f:48:c0:b8:ab:24:1b:03:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: May 13 02:01:27 2026 GMT
            Not After : May 14 02:01:27 2026 GMT
        Subject: CN=a15bd71ce08d9e2d635755b9ebd20339c6b743ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:64:4e:68:b8:41:58:65:21:ef:86:c5:0f:
                    6e:5d:93:49:38:a1:5b:85:be:d0:6a:7b:c8:fe:7d:
                    ea:cf:b2:02:e3:ac:ef:58:c9:27:50:63:d2:4b:18:
                    d5:43:1b:a3:be:1a:0b:ad:40:32:a7:e0:6c:7c:1c:
                    1c:68:23:4a:52:9a:c6:8a:8d:25:1d:71:9f:58:9f:
                    3e:18:3c:7a:66:0d:7f:a9:f4:11:ce:e4:ba:1a:12:
                    4c:dd:5f:de:73:02:a4:0c:76:0e:fa:3e:ce:cf:82:
                    99:ca:47:2d:c4:4a:44:b2:f5:f7:85:2f:b0:58:aa:
                    c9:70:be:c5:28:62:62:31:dd:ea:39:75:0b:af:18:
                    85:81:0f:87:e1:b1:e1:42:31:77:9f:a1:4d:88:9a:
                    3d:d8:a0:59:95:6f:46:3f:5a:74:ff:e2:44:4c:0e:
                    dc:52:c7:8a:6f:2d:cf:d3:10:72:b3:40:6e:8a:50:
                    5c:d5:e1:91:99:e0:06:a0:da:ea:d2:81:6d:11:db:
                    92:6c:6a:49:81:dc:31:1e:1a:86:e7:1f:bc:b1:9c:
                    46:b7:c5:a5:e0:98:7c:54:2f:df:b7:26:f0:06:fe:
                    b5:dd:b7:bc:e1:01:91:cd:78:f5:ec:1a:0b:5d:03:
                    b8:c4:f2:3a:e2:77:a6:3b:2a:ac:0d:8f:19:4c:4c:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:D7:1C:E0:8D:9E:2D:63:57:55:B9:EB:D2:03:39:C6:B7:43:EA
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:fe:b6:9e:2b:03:b6:d0:aa:7a:b8:22:d0:b2:7b:15:90:
         44:56:3f:eb:d3:53:3b:9f:79:2b:ce:18:f3:cd:be:91:83:c3:
         97:03:9e:09:b1:48:bb:6f:5f:f2:8c:2d:4e:03:60:da:80:68:
         34:16:e5:01:75:1a:56:36:f8:d6:19:68:03:7d:1e:ea:ad:f4:
         9e:2a:e4:38:1a:ba:ae:7d:55:f5:67:03:ed:90:7d:25:eb:fc:
         58:aa:64:b7:5e:ae:51:0d:cf:36:ee:27:05:af:49:c2:e7:c1:
         64:86:12:95:e4:63:92:09:72:e7:3c:43:1d:9c:ee:fd:10:6e:
         0c:fe:a2:3b:ed:a9:2a:e6:17:4f:24:d4:49:9c:f2:eb:09:58:
         6e:fe:8f:09:3e:27:8a:c6:7a:b8:47:94:41:c7:18:ea:b8:5c:
         16:fd:39:3c:74:3e:45:df:d3:ef:e5:d2:cc:4f:47:e1:58:99:
         28:7b:0a:39:7e:c0:57:06:34:74:17:07:4f:c6:4b:65:d5:83:
         c9:4f:46:43:63:ff:b3:5a:c3:e7:97:c9:52:61:0e:16:b1:b3:
         98:ae:d5:0c:41:99:c9:ea:2c:07:ff:85:5c:3a:68:31:73:2a:
         87:47:0a:ac:7a:33:da:b4:c7:a2:f8:84:16:41:9e:0f:8e:6f:
         7d:77:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:08 2026 by rpki-client