Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File:                     zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier:          T+J/tAQ9b6j5JxoEZW9Ri2fAJKRyYtPG4/qyI6lxEpI=
Subject key identifier:   C7:AC:6E:CB:0F:9F:E1:6B:91:E7:8F:BA:0A:0A:7D:A0:4A:23:9D:54
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer:       /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial:       019E2091B0BC9749F12704053563E0D8F7E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number:          103F
Signing time:             Wed 13 May 2026 09:01:19 +0000
Manifest this update:     Wed 13 May 2026 09:01:19 +0000
Manifest next update:     Thu 14 May 2026 09:01:19 +0000
Files and hashes:         1: nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa (hash: qFZqmcvD3VdssLZWKysthIOIYoxtOvRq6+nL6RJRO2k=)
                          2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: 1Qm227BKhF3wu+rDYpnFz0gV8rhfgqmQxYpzHVMHSiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:b0:bc:97:49:f1:27:04:05:35:63:e0:d8:f7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
        Validity
            Not Before: May 13 09:01:19 2026 GMT
            Not After : May 14 09:01:19 2026 GMT
        Subject: CN=c7ac6ecb0f9fe16b91e78fba0a0a7da04a239d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1f:43:02:25:84:44:27:2b:84:d3:96:b1:cb:
                    cc:dd:ef:34:f4:71:8e:73:5b:68:d4:8b:ae:89:ae:
                    39:36:48:eb:4c:b8:60:fb:36:f5:e7:2f:cb:79:60:
                    fe:a4:66:18:7e:50:03:fb:7e:70:da:d7:a5:f5:bf:
                    eb:fc:df:ac:d2:72:1f:63:41:5c:c6:24:3c:a8:e3:
                    c5:33:19:2a:42:5a:d7:4f:cc:bd:7c:8f:cf:30:6a:
                    3e:76:11:a4:d4:54:c5:49:83:a1:c7:7b:cc:b2:56:
                    2b:4f:4f:02:ab:c7:51:58:87:38:59:07:9a:01:42:
                    af:c0:a5:29:8d:41:c4:dc:28:37:3b:6e:82:e6:54:
                    24:06:25:09:21:c5:61:53:45:be:2f:4e:bf:54:16:
                    47:68:d3:00:2d:3f:7a:61:c0:46:51:ac:07:37:3e:
                    e5:63:aa:b1:e2:9f:b8:8b:3b:c1:aa:85:e4:42:ce:
                    02:20:69:5a:27:d8:ec:c8:0c:8f:fd:48:0e:d5:ff:
                    09:6c:21:4c:43:11:16:3a:c6:5f:27:d1:86:71:0d:
                    59:70:0a:05:c6:a3:94:47:15:d9:1a:97:e9:02:a7:
                    c4:57:b8:92:bc:67:5e:8d:1c:96:c9:2d:c6:a4:61:
                    e3:a1:bf:1c:ea:6e:39:58:f1:c6:38:83:19:36:57:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:6E:CB:0F:9F:E1:6B:91:E7:8F:BA:0A:0A:7D:A0:4A:23:9D:54
            X509v3 Authority Key Identifier:
                keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:83:26:42:29:58:be:38:e8:da:9e:4e:53:95:4e:af:59:94:
         9f:47:a4:b2:60:4b:c0:51:14:fc:46:ce:4d:ea:80:0a:7a:1a:
         c4:15:e2:0c:d0:49:da:5c:57:f1:f2:39:af:6e:02:d9:24:60:
         80:42:46:be:3b:6f:11:6d:3b:b9:6e:da:f6:ff:df:bf:f2:c3:
         6e:08:24:d0:51:fc:67:8b:8f:f8:05:9d:6b:b2:40:8d:cc:13:
         30:ab:79:17:27:db:ff:b5:80:cb:1f:ef:20:40:16:a6:8e:61:
         03:83:65:30:40:d3:9d:b9:c7:45:dd:c9:85:e5:21:ba:60:73:
         64:c8:ab:e3:e9:51:74:7f:eb:27:b1:d7:80:51:ff:5f:9d:bd:
         5e:e9:21:1c:5e:20:fa:27:81:ad:a0:96:b2:9a:43:31:76:12:
         5c:04:d0:4d:7e:1c:30:fb:26:e0:7a:51:05:31:ac:c8:b1:00:
         4c:a3:6b:04:8e:51:1c:04:cf:5a:35:31:a4:02:b2:cd:24:d7:
         21:c1:6f:52:00:0d:f2:d3:98:b4:cc:7e:0f:25:6a:a0:3c:8a:
         48:62:dd:2d:99:ae:20:9a:80:50:c8:79:c2:ec:65:f1:b8:c1:
         2b:91:bc:e5:fb:67:a1:a2:3d:c1:11:48:6b:1a:6a:c3:e3:81:
         ac:a9:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:45 2026 by rpki-client