Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File:                     Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier:          8UT9KP99Rbvv5krDWzQTtgbJqF7tTFELj7BnZtapPMA=
Subject key identifier:   0D:E1:6B:BE:2B:FD:6C:D8:84:48:05:FA:0F:3D:D7:4B:17:BE:95:63
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer:       /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial:       019E1F7F28A08A029AF10C58C92649404DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number:          157E
Signing time:             Wed 13 May 2026 04:01:27 +0000
Manifest this update:     Wed 13 May 2026 04:01:27 +0000
Manifest next update:     Thu 14 May 2026 04:01:27 +0000
Files and hashes:         1: JG-FpgO91koLXjHnrbLdw0m_DUc.roa (hash: fj1OTuklppVkirqmv0QJOcnEevrxbA10Hf/01NWY+bQ=)
                          2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: xyWx4dPszgCTlLGQO/S8ZqFXrX1c/DY4Kk9JxTZkvEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:28:a0:8a:02:9a:f1:0c:58:c9:26:49:40:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
        Validity
            Not Before: May 13 04:01:27 2026 GMT
            Not After : May 14 04:01:27 2026 GMT
        Subject: CN=0de16bbe2bfd6cd8844805fa0f3dd74b17be9563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:78:35:19:5f:6d:82:23:a2:9b:d0:f9:73:
                    43:ee:d6:07:9a:bb:3d:a4:4a:1e:42:be:e9:ef:c9:
                    67:2b:d7:ed:4c:cf:dc:85:66:ff:83:98:8c:c0:59:
                    45:70:ff:ae:02:23:4f:32:46:a7:65:e5:86:a5:4e:
                    a9:68:5f:ab:ef:de:fc:a9:fc:49:8d:3e:15:d9:9b:
                    9e:2c:46:ab:a3:4d:88:a5:38:5e:79:45:bc:c5:52:
                    4f:2e:e9:48:ce:d3:02:08:71:73:ba:53:a0:8a:60:
                    dc:92:67:b3:ae:b7:66:93:c8:75:29:83:20:55:e1:
                    1c:7e:64:fa:a4:5e:ee:6e:16:28:d0:ca:89:21:fe:
                    3b:d2:6a:29:b1:7e:ce:e0:c4:2b:0a:ec:8f:8f:22:
                    1a:22:bb:a4:f1:33:d6:0e:61:dc:b8:1f:9c:16:59:
                    c0:8d:65:25:7c:95:87:24:48:74:eb:dc:b2:ea:e0:
                    9f:f1:05:7d:04:3b:eb:33:77:8c:9b:8c:9b:11:b3:
                    e9:ef:a3:f5:93:8f:3e:fa:f1:5b:9b:6c:d8:06:05:
                    4a:ff:95:de:a7:83:ff:90:f5:58:78:8f:4e:e0:85:
                    fd:ae:4e:1f:74:7b:e8:c6:0e:48:d9:72:ef:5d:e9:
                    d9:16:94:66:22:07:13:d4:ce:8f:52:e1:e5:b3:a7:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:6B:BE:2B:FD:6C:D8:84:48:05:FA:0F:3D:D7:4B:17:BE:95:63
            X509v3 Authority Key Identifier:
                keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:ad:13:fd:0c:01:e4:13:6a:5b:e6:d1:b4:2a:fc:f5:37:
         31:49:20:f4:d4:f3:07:b5:3e:04:c8:d6:83:44:d9:67:f7:3b:
         4e:4f:e4:9d:1f:7a:06:7c:26:30:00:67:16:9c:6d:d9:d4:74:
         8d:4c:81:0f:14:6d:79:f1:6f:1b:d6:15:f6:3e:73:ae:68:56:
         5b:08:62:58:17:c0:07:be:c0:da:5f:df:85:c1:b5:a8:91:53:
         51:98:a6:f5:bd:ca:5b:89:b1:e4:3f:17:ad:74:b6:fd:4b:53:
         79:1a:9a:f8:6c:4a:fc:2a:43:a2:b3:a0:ad:04:ef:b9:83:d3:
         7f:20:fe:d4:33:93:46:0b:21:1c:a5:a9:8e:92:b2:b5:0c:d7:
         95:4b:a8:c8:64:75:2f:5b:3d:ff:a0:4d:b4:d9:45:2f:ec:b7:
         5c:94:8a:f7:2b:ab:d9:b6:c7:12:e0:4a:b8:02:5b:5d:6c:46:
         07:ec:fd:38:18:be:47:14:77:ee:f6:23:e9:39:12:21:fe:19:
         de:e0:ab:1b:3a:8b:58:a8:00:82:73:b3:6f:ec:90:bf:82:e6:
         5f:72:4a:d4:b7:06:d0:bc:d6:5b:ed:31:a0:b2:9c:87:1a:ab:
         21:cf:26:aa:41:6b:57:91:0d:ff:b5:a0:a6:4c:60:38:1e:e5:
         7a:17:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:00:36 2026 by rpki-client