Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File:                     ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier:          USm6DD7OQov0opXkgSEB8P3Gd7Z376+ULKHPevqDulI=
Subject key identifier:   5A:08:07:93:9D:31:4E:D6:9E:2D:26:9E:1A:A6:BB:87:84:8C:A8:1C
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer:       /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial:       019E1F11A3D60946099695AEA8EF8A784CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number:          0500
Signing time:             Wed 13 May 2026 02:01:50 +0000
Manifest this update:     Wed 13 May 2026 02:01:50 +0000
Manifest next update:     Thu 14 May 2026 02:01:50 +0000
Files and hashes:         1: J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa (hash: VJE0x80m0wxxgNfwYsal4K/ZZSwAp/QnDuAp90J4C0U=)
                          2: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
                          3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 3zNs3hgyhVbwPR90NzFOY+c57SVOTJFIFDbpZ3etEhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:a3:d6:09:46:09:96:95:ae:a8:ef:8a:78:4c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
        Validity
            Not Before: May 13 02:01:50 2026 GMT
            Not After : May 14 02:01:50 2026 GMT
        Subject: CN=5a0807939d314ed69e2d269e1aa6bb87848ca81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:87:3d:69:1e:b5:f3:5e:3d:15:42:11:0f:
                    a3:20:c8:be:6e:d6:47:1c:78:c1:93:1c:eb:84:22:
                    df:a2:49:cd:62:bc:de:6f:8f:01:04:51:0a:49:ee:
                    fa:a9:51:1e:3e:4b:57:5c:bf:ff:0f:52:04:4e:17:
                    0e:81:00:b2:79:8b:08:60:61:bd:bc:93:3e:23:95:
                    45:95:bb:92:bb:a3:3d:32:50:5d:ed:39:6e:ad:0c:
                    c1:6c:11:34:cd:f4:f8:9a:6a:15:13:4e:9d:3e:7a:
                    06:94:19:36:e0:e0:55:c1:bf:ce:7a:26:45:23:c7:
                    9f:03:c5:47:dc:72:6b:ea:0d:8c:7d:1d:29:dd:d2:
                    9d:4f:3a:61:15:4c:b5:9a:d6:ae:a5:f8:06:80:a5:
                    9e:14:d0:c2:d5:74:fa:01:bd:13:76:85:8d:96:57:
                    6c:20:a1:ba:bb:95:1b:11:f0:87:d3:75:03:b2:28:
                    84:df:23:e5:1e:51:32:22:65:2d:da:3b:8f:92:8f:
                    6d:5e:82:ed:bc:71:70:2a:80:4c:26:a6:da:f1:7f:
                    16:f2:d0:a0:29:a6:9c:1f:76:5e:7d:c7:8d:ea:21:
                    53:6c:7f:e8:7d:5e:17:22:ad:06:be:49:53:57:1c:
                    45:25:10:64:44:54:3d:25:14:9d:bc:07:fe:56:5f:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:07:93:9D:31:4E:D6:9E:2D:26:9E:1A:A6:BB:87:84:8C:A8:1C
            X509v3 Authority Key Identifier:
                keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fd:82:d5:42:95:c6:92:21:60:4d:35:ea:fd:a9:17:47:e4:
         9e:82:8a:52:d9:74:b2:be:95:3a:5e:5f:7f:c2:57:21:f5:8e:
         c3:0a:20:65:2e:3f:02:c3:d4:76:e3:6f:ec:3f:03:46:c1:5d:
         5f:51:6d:be:ed:6a:af:e4:42:db:69:60:c4:b8:7c:0c:0a:18:
         ef:b5:71:e8:dd:a4:a4:20:6b:b2:63:51:65:27:84:c6:ac:f5:
         53:e6:71:22:c0:d7:41:6b:8e:d4:d5:bf:32:e1:f1:5f:70:3a:
         81:90:3f:a0:ee:94:37:16:d5:e0:11:b5:5b:30:ab:89:8a:49:
         44:76:5e:42:53:48:b2:0a:64:22:b7:6c:50:6a:a5:0d:be:b5:
         1e:67:3b:3f:2d:60:79:a0:96:16:05:63:c8:b0:10:0c:85:10:
         3b:9d:7f:ae:e8:54:20:a6:8d:df:77:c7:8c:8a:cf:01:15:1f:
         68:dc:d8:ca:f5:e8:e5:14:76:76:f3:49:a5:16:68:a9:5e:3b:
         1c:f6:3c:1d:8f:85:a4:b7:df:d2:ce:d4:27:51:2f:28:49:95:
         f3:94:48:99:60:cb:b2:60:6b:c9:9f:97:0e:80:38:5a:27:30:
         0a:1d:bb:c2:08:ef:36:84:ed:0a:89:e9:2b:fc:17:eb:16:92:
         f2:c4:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:35 2026 by rpki-client