Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File:                     zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier:          6fd5tvh8VSBRWBdU/thgfh+J1ktp5e2Jisxm2S9zWY4=
Subject key identifier:   32:F3:13:59:5B:3C:00:A4:90:AB:18:BC:CE:AA:58:13:FC:CC:48:BB
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer:       /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial:       019E1F478E107A97F9C876B5511992BEDF19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number:          07
Signing time:             Wed 13 May 2026 03:00:43 +0000
Manifest this update:     Wed 13 May 2026 03:00:43 +0000
Manifest next update:     Thu 14 May 2026 03:00:43 +0000
Files and hashes:         1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
                          2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: iNpcLPefGs2je1nabPw3VgIZlT0tXZ7QB8dejJSEvmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:8e:10:7a:97:f9:c8:76:b5:51:19:92:be:df:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
        Validity
            Not Before: May 13 03:00:43 2026 GMT
            Not After : May 14 03:00:43 2026 GMT
        Subject: CN=32f313595b3c00a490ab18bcceaa5813fccc48bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:77:fa:d8:6a:89:21:8d:ac:54:2e:67:da:
                    82:5a:7f:53:1c:1e:e9:77:78:78:7e:4b:16:4e:a6:
                    40:00:42:ad:8f:de:60:ad:a2:88:d4:2e:61:11:53:
                    4a:5b:cd:6c:5f:34:86:44:70:ab:53:1d:6e:80:e6:
                    52:70:1b:4b:cb:98:1a:af:57:78:49:c0:99:1c:db:
                    ea:2e:f9:ea:f7:b2:3c:df:ab:38:cb:47:e8:27:52:
                    20:a1:a0:3e:61:0e:cd:e4:37:f7:c0:96:97:d7:07:
                    51:21:8c:52:bb:58:78:f6:e3:eb:e3:ad:d1:69:47:
                    09:86:e9:e3:8d:0f:44:11:e1:0a:6d:6a:d7:a6:6b:
                    44:a7:b3:02:51:77:f8:3b:a3:13:33:5d:09:b9:b4:
                    56:fd:fd:e6:8e:47:5a:02:e2:f6:41:d6:bb:76:96:
                    0a:dd:ea:71:4f:63:3c:7a:9e:70:84:03:f1:72:27:
                    5f:96:65:15:6e:7e:45:d4:a7:33:04:b5:e2:1e:26:
                    40:48:71:3b:5a:1d:82:c7:79:1c:9f:67:1b:a6:c1:
                    84:0d:db:77:98:6a:78:61:24:0a:79:9f:81:1d:67:
                    70:5b:01:f6:69:47:62:a1:b4:b7:fc:ab:b3:68:35:
                    72:a2:04:f7:92:10:20:9c:0b:c9:66:66:ef:c3:17:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:13:59:5B:3C:00:A4:90:AB:18:BC:CE:AA:58:13:FC:CC:48:BB
            X509v3 Authority Key Identifier:
                keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:50:f4:1b:96:59:22:2c:59:e6:25:c5:8e:20:b3:fe:94:12:
         07:a4:4f:76:97:8b:77:a4:84:97:25:cf:c4:0f:de:1d:90:59:
         ea:6c:3d:61:82:94:5d:d9:59:8d:c8:6c:93:bc:32:7a:7e:5c:
         de:bd:14:2f:ae:92:fd:87:14:97:88:c2:21:c3:ec:75:83:3c:
         61:1f:83:50:de:37:ab:d5:e6:cc:6c:53:f9:1b:5a:00:40:34:
         51:81:f8:0d:91:f6:26:7e:16:29:86:b3:ac:74:ab:be:ed:24:
         74:c2:90:6b:67:39:02:3c:fb:22:28:ec:e6:52:06:57:27:37:
         1a:e8:15:b2:5a:d6:7d:29:d6:c9:1d:58:04:cc:45:e4:76:4d:
         47:e6:90:33:46:6e:5e:00:b6:73:b0:72:b5:63:c3:24:3f:3c:
         90:99:e8:4f:a6:25:7f:ac:59:60:70:db:ce:ca:a6:aa:1a:9d:
         eb:87:48:48:28:aa:58:91:a3:58:53:8e:5e:3e:5c:8b:d1:99:
         fd:c5:a1:2e:c2:36:99:10:7f:c5:31:f2:61:43:07:b7:36:b7:
         7c:ca:ab:49:f6:11:19:3e:10:1e:7d:6a:fa:3d:51:81:1e:b0:
         dd:9c:0b:54:3f:58:ba:5c:11:35:00:cf:ee:2a:de:79:02:3d:
         f3:8c:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:11 2026 by rpki-client