Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          vubZ2tuMW9fInlYP5A6LdvDVW+qYR0cEaiwcdyUnJ2E=
Subject key identifier:   29:81:20:FD:7C:5C:99:E9:56:05:A8:58:71:5F:86:AF:A5:3A:2E:85
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       019E1E6C9755D4D3AD735DF955FDED8D6818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          1931
Signing time:             Tue 12 May 2026 23:01:33 +0000
Manifest this update:     Tue 12 May 2026 23:01:33 +0000
Manifest next update:     Wed 13 May 2026 23:01:33 +0000
Files and hashes:         1: AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa (hash: 0umZskah+CEr8ip186+RE27wIFvtLRl5c7E3qXa1bJA=)
                          2: C2VLEg7n0tawM_YjuKM0EwCOIdU.roa (hash: YkJt5/I0ermqnHQNrdy2/02bafN5wEDvzpqYuCqnw2s=)
                          3: ED4SThrzQXYcrC-AEArSen9tJXk.roa (hash: 7Cm2n+7edQ/TSDNLB06WjyawgEuLOZa4VST/mcq8bUM=)
                          4: c39N67bVxmJiemTHJXkT_8LO_Jc.roa (hash: aB4P6VURUO7PJEhrDe97gwqnhvifkhr4AJMJpATFX6E=)
                          5: xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa (hash: Pww3BJWwUmNPj1/iW/aWXYB7NNqY6jVB3VyHrlLqwhA=)
                          6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: 3GXgOagFPVsYZyTqmDMBBXBauLX43m29r+q2jVAuI0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:97:55:d4:d3:ad:73:5d:f9:55:fd:ed:8d:68:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: May 12 23:01:33 2026 GMT
            Not After : May 13 23:01:33 2026 GMT
        Subject: CN=298120fd7c5c99e95605a858715f86afa53a2e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:6c:89:64:4d:fd:e3:f9:c8:ad:16:1b:be:
                    01:2e:1c:22:68:69:6f:cc:34:04:67:e9:97:d1:21:
                    08:75:15:1f:f6:70:44:15:09:6f:48:fe:ca:39:af:
                    f7:35:1f:01:50:83:71:85:d1:98:c0:b7:5e:03:9a:
                    23:f4:c6:37:a8:f3:88:13:ea:60:9f:30:9b:cc:f2:
                    2c:38:f0:1a:c8:8a:30:04:5e:a2:0a:3a:8f:54:6c:
                    cd:b4:9b:7c:02:3e:15:f2:4d:c3:54:fa:ec:53:35:
                    b9:a7:ec:b6:4e:88:2b:0f:ce:4b:21:1d:7b:66:f7:
                    70:02:93:2f:55:68:ef:7a:84:53:98:a8:df:d3:28:
                    11:29:ad:a7:46:4a:26:2a:09:e1:ba:f1:bd:ca:f9:
                    13:a2:7f:38:56:73:c6:ea:32:1a:42:5c:18:e7:26:
                    24:7e:c4:72:b9:0d:23:fc:bc:af:11:a7:22:10:86:
                    62:7a:6f:af:17:78:cf:56:82:9c:03:f7:ad:b7:f8:
                    dd:d4:f8:1a:af:2d:87:12:06:2c:0a:27:67:21:77:
                    45:96:f8:63:0f:ca:9e:75:0e:83:ce:f6:f1:c1:2d:
                    9e:b1:8d:f8:e5:16:1a:64:13:fe:17:db:11:f9:dc:
                    b9:6b:ea:c4:23:c0:97:1b:43:9b:b7:4b:31:11:d8:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:20:FD:7C:5C:99:E9:56:05:A8:58:71:5F:86:AF:A5:3A:2E:85
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:95:39:92:26:9c:33:b4:9d:99:49:f6:66:41:31:eb:05:
         bc:98:03:2c:61:ea:20:d8:77:dc:d9:2a:8a:7d:6a:6c:07:4b:
         01:7c:38:d0:31:4f:95:3d:0d:63:73:b2:00:40:37:e6:51:3f:
         17:5a:e1:db:c1:99:90:8e:da:37:84:ec:56:50:74:c9:dc:74:
         a7:61:a7:ac:ed:d2:53:e2:37:0c:56:d3:b3:89:cb:99:c9:9c:
         07:3b:35:66:49:fb:a2:f8:1b:ca:0c:84:46:75:38:9c:e5:39:
         a3:c9:94:c4:83:54:3c:64:2f:3d:37:a3:4e:5a:b6:45:4d:9d:
         30:f3:3a:1a:d5:73:bd:a7:dd:8d:89:fa:8e:4d:b1:b7:7d:37:
         08:89:48:b2:01:55:2b:ea:c1:27:70:84:d5:82:f8:b4:fa:45:
         d7:b7:18:8b:75:d9:1a:e5:23:94:be:a6:93:34:4e:c0:b0:fc:
         af:fc:c1:78:00:a4:aa:e0:63:ce:89:b7:3e:2e:ed:25:ba:8d:
         4d:4c:27:b2:8e:1f:b6:aa:0f:96:bc:02:59:24:48:5e:87:8a:
         b4:e9:58:0b:28:34:83:a5:e7:67:e8:37:69:89:96:e3:fd:bb:
         4a:79:4f:c7:9a:f6:a8:10:01:96:50:47:1b:23:d5:60:77:01:
         90:a6:3e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:28 2026 by rpki-client