Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
File:                     Zrds5_7vaVb437n4vDoiiGG5ny4.mft (raw, json)
Hash identifier:          FHlC3N1YOnWzCCrIBvQCFRIr+jOGlHQc1aOQEfDn8cE=
Subject key identifier:   9D:F4:FF:B1:53:57:49:A8:52:12:7D:DF:D8:96:A1:08:89:01:62:FF
Authority key identifier: 66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
Certificate issuer:       /CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Certificate serial:       019E20917C08ED82BB525CC8C56D690AA948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
Manifest number:          011F
Signing time:             Wed 13 May 2026 09:01:05 +0000
Manifest this update:     Wed 13 May 2026 09:01:05 +0000
Manifest next update:     Thu 14 May 2026 09:01:05 +0000
Files and hashes:         1: DneugekopIxK304C8pLImv6Qcv0.roa (hash: +cGEhJmcpfO0fbmJYvL9sDH0f2ClBmDUFG+o22CeZUs=)
                          2: Zrds5_7vaVb437n4vDoiiGG5ny4.crl (hash: 0qLXK+am8GguDypHjM+b5jUcQECea8l4gvgI+RbhDKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:7c:08:ed:82:bb:52:5c:c8:c5:6d:69:0a:a9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
        Validity
            Not Before: May 13 09:01:05 2026 GMT
            Not After : May 14 09:01:05 2026 GMT
        Subject: CN=9df4ffb1535749a852127ddfd896a108890162ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:3f:8e:2a:78:9b:42:d1:ef:1d:3b:f7:c5:
                    aa:ab:11:98:6c:0c:83:a4:c0:91:95:13:2b:0b:12:
                    81:0f:ee:66:e0:e6:9f:a0:4b:a6:d5:23:4b:97:69:
                    f5:e2:1f:26:a4:7c:59:73:71:3e:12:4b:56:e6:fd:
                    ab:3d:bd:33:97:11:12:2d:82:bb:03:ef:4e:09:f8:
                    3b:06:85:f6:31:aa:26:cd:42:6b:54:66:8b:6c:ac:
                    ad:45:ab:d1:c4:43:4e:0c:4a:28:7a:56:1d:47:39:
                    93:68:22:9d:55:45:d3:36:49:c2:3d:1a:cd:5c:c3:
                    9d:6c:48:f7:98:a9:56:f3:cf:e9:2c:fe:6c:34:79:
                    2b:36:b6:b6:85:d7:5c:ca:12:00:c9:5e:4d:3d:f7:
                    29:60:39:f5:60:6d:23:2c:00:68:25:9d:3f:fc:10:
                    b8:14:ed:46:d6:ce:4d:cb:fd:80:be:51:79:e7:b6:
                    4d:7f:24:e7:0d:41:c6:16:a6:c1:7c:cb:33:6d:bb:
                    63:ec:ae:70:27:bf:56:f1:93:a6:3b:db:25:38:01:
                    35:38:d0:fd:fb:20:96:79:ea:11:bb:3b:09:fc:e8:
                    a0:77:0b:3b:d9:c1:aa:dc:f6:eb:2e:e7:87:29:3b:
                    74:ce:ae:af:a5:2b:72:0e:d3:13:aa:f5:e5:2d:a7:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F4:FF:B1:53:57:49:A8:52:12:7D:DF:D8:96:A1:08:89:01:62:FF
            X509v3 Authority Key Identifier:
                keyid:66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bd:2e:b5:f3:23:71:10:a3:16:40:1e:b7:e4:ff:0f:42:39:
         f4:04:c0:2c:a1:31:c2:bc:3a:d5:f5:70:f2:72:33:1e:e6:e6:
         cc:fb:a3:c4:2d:e5:00:6c:63:3b:16:3a:63:fd:7d:98:df:95:
         49:47:6d:d3:77:a4:0a:dc:e4:c3:a5:d2:01:de:4c:ea:fa:a6:
         f2:d4:a5:25:5e:37:1b:6d:33:83:26:a7:03:a5:3d:98:3b:15:
         d5:13:c8:eb:eb:40:c2:4d:14:7b:39:60:39:a2:40:4f:a5:1b:
         f2:61:41:44:ca:fc:1b:82:96:ba:d7:53:7c:f7:2b:92:02:f0:
         61:a2:f6:c1:5a:88:f2:c4:41:1f:fe:3b:81:25:32:d0:7c:79:
         8e:98:a5:13:cc:8a:63:e0:cb:1c:c6:f8:f5:cd:63:0e:2c:0e:
         f4:65:80:14:99:72:5e:e5:59:53:23:32:47:14:2b:85:90:ea:
         69:fa:56:af:77:6e:35:da:bd:9a:71:ce:72:08:17:ae:ac:6a:
         9a:ac:60:7d:f5:27:c1:56:34:9d:47:fa:e2:18:2d:c7:12:83:
         1d:5b:6c:fe:d8:c4:9f:30:0c:86:d2:f7:af:90:5c:c9:62:69:
         4a:0f:63:12:14:78:86:bc:35:26:ce:28:cb:69:f3:ce:c8:31:
         c7:97:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:58 2026 by rpki-client