Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File:                     zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier:          gFVeBDDEbMIiTt4uMOo9o/5nce86bPl9Ab30wJeL5+w=
Subject key identifier:   EF:C4:01:A6:B9:86:D4:CF:C4:6A:20:BA:A3:5C:A8:36:AB:CF:BF:0F
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       019E1EA2DC95FCFAE1160CF13BB4D51C7747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number:          1911
Signing time:             Wed 13 May 2026 00:00:50 +0000
Manifest this update:     Wed 13 May 2026 00:00:50 +0000
Manifest next update:     Thu 14 May 2026 00:00:50 +0000
Files and hashes:         1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=)
                          2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=)
                          3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=)
                          4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=)
                          5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=)
                          6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=)
                          7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=)
                          8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=)
                          9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=)
                          10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=)
                          11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=)
                          12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=)
                          13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: HG3eKNdhTovf9fUccBAzK9i3XruYnJauIb4ocno22aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:dc:95:fc:fa:e1:16:0c:f1:3b:b4:d5:1c:77:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: May 13 00:00:50 2026 GMT
            Not After : May 14 00:00:50 2026 GMT
        Subject: CN=efc401a6b986d4cfc46a20baa35ca836abcfbf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5d:28:99:6b:22:ff:9f:fe:d1:a0:5a:08:9e:
                    c3:88:98:05:c6:01:62:e2:75:1a:e7:02:09:07:32:
                    91:15:67:96:d0:79:1a:8a:2e:93:f9:cc:e4:64:92:
                    20:1d:44:f4:16:c9:fb:97:9c:a3:ab:a2:93:cb:97:
                    21:be:7c:07:c5:f1:3b:bc:fa:2f:59:a8:10:02:ae:
                    3e:b4:79:50:df:92:a4:2f:34:b3:49:9e:25:ba:37:
                    91:44:96:c1:90:c7:2c:3f:61:db:82:7d:6f:2a:0a:
                    48:8a:7e:d7:ae:b7:2e:ab:d4:1e:f6:2b:05:d7:09:
                    a7:5d:46:fa:93:9d:22:9d:94:6a:9b:00:22:18:1d:
                    4e:56:bc:fb:fd:ec:b3:98:27:8b:12:81:49:24:ec:
                    d7:c2:c5:d4:08:48:24:79:a2:c7:c3:3b:e0:09:39:
                    c6:42:dc:f0:8a:7c:f2:ab:b1:6d:1f:bc:f9:5e:6d:
                    e3:78:7f:7f:30:eb:5c:f4:b7:65:9b:25:e4:f7:5b:
                    a0:19:40:30:12:2e:a9:cc:81:f4:66:69:ed:82:cb:
                    18:5a:6a:2a:99:8f:c2:fe:07:00:ba:8d:55:20:45:
                    48:ea:98:80:7f:a7:f9:e8:f5:ec:54:b5:69:9a:54:
                    35:b7:09:04:bc:4b:6e:28:8e:e7:c0:b4:28:6b:b8:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:01:A6:B9:86:D4:CF:C4:6A:20:BA:A3:5C:A8:36:AB:CF:BF:0F
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:1f:d8:da:f4:0b:92:a8:4b:2a:39:e9:f8:9b:9a:fe:8b:
         f8:9a:e8:eb:ee:63:3d:32:e0:8c:df:4f:37:70:df:6c:27:21:
         6e:f4:00:9f:85:4c:f6:bd:e2:ba:0f:eb:9e:4b:f3:45:fa:eb:
         90:22:2f:80:1b:a6:6b:16:57:2a:26:fa:36:26:4e:18:26:66:
         19:9d:41:4c:fd:2b:bd:c2:0c:d2:82:68:2c:79:c5:d8:79:99:
         bd:a9:c2:18:a2:63:ee:46:0d:a0:63:ed:da:e1:6a:60:bb:8f:
         c6:a7:0d:bb:2d:8a:6c:0a:fc:e1:f3:2f:be:ca:d4:cc:89:df:
         8c:07:b0:f1:8d:e9:03:2b:bc:54:52:61:ce:20:dd:3b:ac:3c:
         da:a1:04:6f:71:df:69:59:12:8c:5c:e8:96:9c:aa:14:fc:f4:
         a3:ae:91:a0:63:ac:fb:bf:8b:06:1e:4d:4b:9c:27:a0:f7:14:
         ad:4e:ef:ca:6c:5f:a5:a6:06:af:0b:fb:23:99:10:bf:7f:f5:
         cf:76:0d:72:ee:84:85:dd:e7:8e:c2:ef:45:95:d8:dd:51:09:
         05:e9:63:59:bf:cf:5a:eb:a7:9b:b0:0f:29:05:de:5c:fe:84:
         f2:1e:18:81:17:2a:56:66:e4:1e:68:d8:4a:ab:d3:50:b3:21:
         32:16:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:21 2026 by rpki-client