Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          w0+8SqsFFxlPh2Uv2P6D76etAOxLrp/LUNZeI5277bQ=
Subject key identifier:   A6:83:FB:24:E1:7E:E9:C4:BD:36:F5:1B:49:60:C3:D4:62:58:8E:CC
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       019E20240A213DFE7698D9ECB225814BE435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          1370
Signing time:             Wed 13 May 2026 07:01:33 +0000
Manifest this update:     Wed 13 May 2026 07:01:33 +0000
Manifest next update:     Thu 14 May 2026 07:01:33 +0000
Files and hashes:         1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: Wa+3add6ycufUrj22Oz/TDhK7u3Ud3IjDJsllPqVixM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:0a:21:3d:fe:76:98:d9:ec:b2:25:81:4b:e4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: May 13 07:01:33 2026 GMT
            Not After : May 14 07:01:33 2026 GMT
        Subject: CN=a683fb24e17ee9c4bd36f51b4960c3d462588ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:a3:08:00:6a:61:22:4c:1f:9b:88:b6:43:
                    49:d2:aa:5a:27:02:b7:61:9f:52:5a:eb:0a:a6:54:
                    c8:b9:93:a8:0f:73:9d:15:67:67:5f:fc:13:43:84:
                    01:1d:12:38:d6:c5:f7:af:6f:ce:95:97:b4:05:47:
                    d5:d6:f2:f4:e2:b6:9a:4f:65:ea:b3:fd:57:7c:58:
                    51:8a:d9:71:0e:3c:71:eb:7f:96:a0:74:b9:10:1f:
                    62:cb:19:f2:27:c5:0a:91:6a:79:cc:0a:d8:01:80:
                    1d:0c:ca:36:0e:49:4f:42:0a:4e:f1:bc:b2:32:1f:
                    88:8b:47:cb:0b:30:09:f7:82:f8:ca:fc:16:7b:4b:
                    30:d2:a7:4b:60:c7:73:34:c3:14:a3:74:3f:32:65:
                    79:59:e9:53:6f:9e:af:58:4c:c4:2c:91:10:7d:3b:
                    db:85:d0:51:34:07:3e:3b:04:ea:b1:06:f0:f2:0d:
                    28:f6:13:a4:64:86:47:b8:1b:06:db:53:d1:a0:7b:
                    78:04:75:ea:e6:5c:97:53:ab:9b:0c:84:67:01:22:
                    3f:cd:fe:b9:55:b5:23:35:1c:f3:35:89:30:f6:b8:
                    48:d0:b2:46:26:9f:63:fb:0b:1a:fe:b4:46:15:98:
                    bc:16:c2:fd:80:22:54:c4:c9:fd:7c:02:d3:65:c2:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:FB:24:E1:7E:E9:C4:BD:36:F5:1B:49:60:C3:D4:62:58:8E:CC
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:da:1d:15:3e:30:5b:5e:ff:f9:b2:70:1c:70:95:2a:01:0e:
         d9:ab:3e:9c:4b:9a:e5:80:f0:75:f8:86:34:7e:ad:12:da:62:
         8e:67:c2:f3:d7:d3:fb:2b:41:1d:46:cc:42:ad:bb:2c:43:f5:
         b3:42:f2:1d:12:2c:6d:95:b0:97:41:ca:69:5a:10:76:85:2a:
         6f:b1:00:b3:fc:02:5a:ce:1b:cb:d2:2b:e8:e5:c1:d2:4f:c9:
         b4:17:08:3e:df:e5:ab:2b:4d:8c:00:b8:b6:c9:e9:c6:76:42:
         3a:85:be:e0:db:a1:45:7f:4e:ea:90:36:5b:8a:2d:e2:ad:5e:
         3e:5c:ab:5e:a9:e5:5c:45:cc:5d:41:09:d4:8e:ce:23:0e:18:
         8d:ef:4e:bd:12:e7:1a:7b:1d:03:2c:d7:e2:67:42:ae:90:4c:
         3f:3b:63:cf:79:68:e3:0d:61:a1:5b:7d:c7:2e:3f:4e:1b:73:
         a1:cc:15:19:33:9b:08:54:79:92:42:3a:0d:94:43:76:d8:e0:
         06:46:be:86:37:6c:de:0b:f2:33:85:13:32:0e:95:70:44:74:
         44:de:9e:1b:8a:76:c4:8d:13:6d:b9:ef:92:60:58:55:c5:f0:
         2b:db:c7:8b:ec:ba:99:9d:f3:78:0a:c3:97:4c:04:61:d5:99:
         39:7d:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:49 2026 by rpki-client