Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File:                     z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier:          NRc8OE94Si3Lo8+ly5adbhbSk+L2LSyI/BfyQPHTY3M=
Subject key identifier:   E0:CD:40:0E:C3:B5:5E:71:F6:21:C9:05:DB:53:B1:96:3C:FF:83:6D
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer:       /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial:       019E1D59D8C8B63F2524CADBACF4EB0E091D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number:          0926
Signing time:             Tue 12 May 2026 18:01:27 +0000
Manifest this update:     Tue 12 May 2026 18:01:27 +0000
Manifest next update:     Wed 13 May 2026 18:01:27 +0000
Files and hashes:         1: 9Lw22K23J7w-6XzIDg67QJLRG6o.roa (hash: ztr8UWAWB/buB6JT5GD2YfXKLhYvXE9x4n0VRU8ceQo=)
                          2: G5FnSUz31AbVLph_XF_b2V-WE4k.roa (hash: OyarEjklBShgcZGA7xw5r7NANY/GN4xIbQ4B1wFv/ow=)
                          3: RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa (hash: exNJaK8lpq9kvpL01DCgkaVHl771CgqPSPw4MI32Txo=)
                          4: Uh0-hSK_XWDc2RnwMwkKmaaS-80.roa (hash: BJW5l+5BPbkG+XCltX7aXXNnUzSiJ2XCIUfhxIHiCPk=)
                          5: fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa (hash: WGVPl1NHnlzzsePSOzjj+Gl8SDY0jb2m343GSbYT0V4=)
                          6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: ghZKLPFfGckVrAOZmnxoU+Er3RPpL/so98hnPnVSzKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:d8:c8:b6:3f:25:24:ca:db:ac:f4:eb:0e:09:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
        Validity
            Not Before: May 12 18:01:27 2026 GMT
            Not After : May 13 18:01:27 2026 GMT
        Subject: CN=e0cd400ec3b55e71f621c905db53b1963cff836d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:c4:04:8b:28:d3:ae:77:99:80:05:49:52:
                    a8:f9:0d:4d:ef:60:a9:96:78:4b:e8:e4:a5:24:19:
                    2a:9f:7f:32:b7:4d:d8:a5:eb:30:00:65:f6:5f:fd:
                    1a:ee:09:b8:68:1f:e5:ed:47:94:8e:e3:fa:b3:82:
                    c3:5d:c5:a5:94:0f:f3:cb:90:a8:a0:6f:3e:62:45:
                    93:c3:c2:24:b3:4b:53:fd:4a:31:b3:23:97:fb:ec:
                    d3:bc:b9:b2:73:60:06:dc:41:8e:ff:e4:b5:94:86:
                    93:b6:b6:a7:bb:5f:65:11:98:12:e5:ca:f1:cc:e0:
                    8b:29:ce:c9:3f:32:00:f5:2e:4d:2c:68:f5:e3:e4:
                    ff:3c:ec:63:0b:85:f3:18:55:0b:3f:ea:ce:fb:7a:
                    64:2d:19:b2:84:be:13:89:89:dc:b3:cc:20:93:76:
                    84:c6:c5:82:f5:67:a0:82:89:76:cf:e1:1f:d3:8e:
                    fb:43:c7:07:fe:bc:ec:7c:1a:43:fe:06:14:3c:6d:
                    0c:2f:2e:49:bc:d7:96:38:c7:e7:a9:dd:dd:28:5c:
                    84:6c:bd:94:7e:46:26:35:a7:56:5d:7c:c7:2b:ed:
                    ca:72:da:3b:90:08:45:c0:1c:b4:09:be:a5:2a:38:
                    a6:f5:7b:2e:e4:e1:74:2d:2f:09:8b:d0:bd:5c:a9:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:40:0E:C3:B5:5E:71:F6:21:C9:05:DB:53:B1:96:3C:FF:83:6D
            X509v3 Authority Key Identifier:
                keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f0:86:94:fe:23:6d:d5:39:06:e0:d0:8b:50:f7:4e:39:97:
         b6:4d:16:91:0c:7f:23:fe:28:66:ae:34:0a:3f:94:94:d0:6f:
         de:20:b7:aa:07:30:70:ac:bc:2d:a0:60:90:bc:a4:b2:c3:a5:
         64:2c:86:27:69:1d:dd:d4:46:ac:07:a0:a4:2e:33:53:14:db:
         78:f9:b3:0d:f2:4c:34:ad:7b:de:ed:7c:46:88:52:f3:f7:da:
         33:06:d9:84:a7:8b:81:86:fa:d9:1d:21:2f:82:0b:08:b3:32:
         87:f1:24:9e:9b:6b:74:9d:fe:7c:0d:e5:94:79:f9:2b:c1:1b:
         ce:da:89:ff:17:0f:3c:27:48:cd:dd:f1:a6:f4:5d:30:3c:10:
         5a:2f:cf:d5:13:46:55:54:14:d3:dc:8c:d1:fc:4a:91:76:a5:
         ab:87:9f:70:25:45:40:e6:4c:90:16:b7:9b:b2:97:c2:95:98:
         85:b5:e4:4b:57:bc:e3:af:4e:b8:f8:e7:9b:cf:18:d5:e2:08:
         1b:f2:4a:ae:c7:6c:d1:43:83:e5:a0:25:e3:5b:0b:98:83:0a:
         33:69:01:91:c9:f8:30:cc:df:22:32:89:a9:7b:60:8e:18:f9:
         1b:04:ae:57:74:c1:75:cb:4c:b2:80:c3:f0:f0:bb:85:88:3e:
         57:9f:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:09:49 2026 by rpki-client