Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          2V7+lcxJeAjRCvS4uLzOScc3ja4jbAOD0Nig07mwGW4=
Subject key identifier:   82:FA:BC:83:41:49:C4:BF:3F:70:F1:63:3C:B9:31:8E:A3:65:AA:4B
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019E1DFE71A19E60B7BB4F17EDF2EF98F466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0934
Signing time:             Tue 12 May 2026 21:01:14 +0000
Manifest this update:     Tue 12 May 2026 21:01:14 +0000
Manifest next update:     Wed 13 May 2026 21:01:14 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          3: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: 3C4TYKv2v5bzW6w+DI+nHztxYbDcuieRn8ZVtiOvAAQ=)
                          4: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
                          5: yMfq4tl4tsm_eKrlq_IfqdTQXZM.roa (hash: nDCkpydlNUMF8c0eeQ/zyRieQdsyPAVg6iJ/0hF8kd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:71:a1:9e:60:b7:bb:4f:17:ed:f2:ef:98:f4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: May 12 21:01:14 2026 GMT
            Not After : May 13 21:01:14 2026 GMT
        Subject: CN=82fabc834149c4bf3f70f1633cb9318ea365aa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:3c:df:a0:31:14:89:30:16:8e:83:9b:ed:
                    61:d6:78:5d:14:ea:f4:45:5d:a0:76:07:11:13:b7:
                    eb:11:6d:ea:19:b6:fb:82:61:57:3b:bd:6e:a1:fd:
                    b1:a4:19:5b:54:d2:68:12:eb:c6:d2:12:96:0d:47:
                    ab:6b:bd:bb:9b:c0:f6:39:95:4e:38:85:02:7f:c8:
                    d6:08:7f:f0:2f:9d:78:b2:70:45:8e:e6:5d:81:ec:
                    cc:73:da:ba:32:32:08:ee:77:6e:b3:29:23:ce:92:
                    8a:2e:10:c0:3f:b7:d1:ce:20:03:c0:b6:8c:d5:aa:
                    a2:0f:c3:0f:84:b8:60:48:b1:11:55:83:2e:48:e1:
                    59:c7:53:06:47:2d:1b:9e:92:f8:db:02:44:e9:15:
                    a1:74:81:58:26:71:a2:fc:69:10:c7:e6:de:c3:68:
                    7c:c4:21:85:36:b6:46:f5:55:ec:ae:85:05:8d:0a:
                    94:6e:6c:25:7c:22:30:3e:23:94:70:8b:75:dc:2f:
                    7f:29:a7:0c:21:25:0f:dc:30:9e:82:f1:09:30:be:
                    c0:97:6e:cd:a4:1d:32:72:3a:6d:38:d6:d6:0f:ca:
                    c8:f6:be:d0:56:b0:f1:7e:23:6a:32:47:54:44:e7:
                    7f:a6:3c:34:c3:35:f0:bb:7b:44:02:fb:05:0c:97:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FA:BC:83:41:49:C4:BF:3F:70:F1:63:3C:B9:31:8E:A3:65:AA:4B
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:68:f7:f0:d5:0d:f1:76:30:50:10:f7:f1:0c:75:b7:0a:b4:
         24:44:51:d8:b1:a5:41:f9:a3:ec:0e:73:81:7e:72:dd:ac:4d:
         9d:17:73:67:b2:6d:60:fe:57:94:e3:f7:e6:b8:b1:dd:6f:df:
         fe:35:92:dc:7a:99:30:90:83:db:d8:a9:c6:28:b7:23:81:dd:
         e7:15:50:01:a7:f2:3e:65:57:5a:b5:1f:12:17:20:86:03:19:
         de:1e:ec:59:17:15:47:f7:e7:47:f6:8e:ba:01:cc:f6:36:f8:
         88:3f:88:3a:72:a2:95:ff:a6:13:52:a4:06:a7:24:83:09:15:
         a7:ee:89:58:63:5e:dd:93:07:d6:50:c9:ff:6b:f3:d2:e0:67:
         6d:07:fa:0f:33:dc:34:5b:ba:f1:4f:ad:6d:2d:2c:52:c3:4e:
         3f:70:ac:e8:41:9d:65:17:22:0d:6a:25:78:3c:b2:f0:4c:03:
         6d:39:49:00:c5:67:17:af:a7:36:f4:9f:7d:4a:37:95:a0:91:
         97:cb:e8:bb:67:3a:56:7e:fd:26:dd:6d:4f:01:a1:ba:33:d6:
         95:41:b7:cb:ec:38:2c:09:0c:4b:46:84:50:ed:e9:a1:51:b7:
         98:21:9b:a9:fa:d4:6d:a8:17:cb:c3:48:68:b9:6c:2c:20:4a:
         ee:1a:24:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:22 2026 by rpki-client