Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File:                     Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier:          p6SSdhWAkU304mNSPVw+jxejAu+y8aTVmuQnZrSgWwM=
Subject key identifier:   24:66:53:05:3D:34:91:71:F4:E0:7F:BF:DA:B1:26:F7:5A:9E:86:39
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer:       /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial:       019E1F7EBB8E99D5C2C2998E455005E910B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number:          164E
Signing time:             Wed 13 May 2026 04:00:59 +0000
Manifest this update:     Wed 13 May 2026 04:00:59 +0000
Manifest next update:     Thu 14 May 2026 04:00:59 +0000
Files and hashes:         1: 4Vb2Z58skB5iaPHsQ2kB44NxzFQ.roa (hash: 5A5FJnxgAX+cotWcxBj+MU91tiU2mlONPgMHabpzNSY=)
                          2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: xjLe9hTrRUVsUwbTS95crY4LnkfkrBLCJ4IbURzJeEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:bb:8e:99:d5:c2:c2:99:8e:45:50:05:e9:10:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
        Validity
            Not Before: May 13 04:00:59 2026 GMT
            Not After : May 14 04:00:59 2026 GMT
        Subject: CN=246653053d349171f4e07fbfdab126f75a9e8639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:3c:8f:7d:d0:7c:5b:a7:75:3b:cb:20:a8:
                    40:c3:a5:33:15:15:b0:9e:d3:38:a4:a1:c8:c4:33:
                    72:69:aa:ce:a4:76:dc:58:45:28:ea:22:4f:ee:fa:
                    4b:1a:ab:a7:74:9e:d1:8e:21:49:ba:c2:f6:f5:f4:
                    fd:78:78:10:7f:c3:6f:b7:49:df:b3:4d:5b:65:6d:
                    c3:d1:f2:12:df:df:ee:fe:34:7e:71:c2:d3:98:28:
                    c2:56:69:89:4e:e2:86:6b:7f:7c:a2:04:97:e8:5f:
                    d7:a8:a3:eb:f3:b1:76:e4:60:ef:d4:5f:22:dd:93:
                    57:af:f7:4d:c7:7c:b9:7c:f6:56:69:55:c4:ec:08:
                    2a:f2:a5:e7:33:bd:e9:d7:f7:fc:4f:7e:e7:4a:db:
                    13:23:83:d3:4f:71:2a:ee:41:e7:1c:b3:cd:78:13:
                    53:ca:1d:ce:6b:6d:4f:6f:9c:30:78:5b:2d:b2:b2:
                    74:18:e8:92:0b:e9:0e:5b:b7:1f:94:d0:b3:b1:51:
                    49:2f:c0:10:c7:41:bf:bc:79:26:0d:c6:72:b9:39:
                    07:3d:15:8e:e3:ca:65:f7:3b:4a:15:3d:d1:92:93:
                    8b:d2:9e:c4:45:53:4f:34:4b:19:87:5d:b0:3c:2e:
                    cf:22:79:af:ef:b0:20:29:29:e0:60:ce:f8:0b:49:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:53:05:3D:34:91:71:F4:E0:7F:BF:DA:B1:26:F7:5A:9E:86:39
            X509v3 Authority Key Identifier:
                keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:d0:a3:82:63:59:99:90:14:f3:37:ea:be:be:b4:f7:95:
         d7:b7:e0:e7:8b:f5:b9:fd:79:e8:0e:20:b4:29:83:a4:49:09:
         49:97:c7:85:c4:a0:d1:49:06:fd:68:50:f2:ea:85:a4:e1:7d:
         ad:41:f2:c0:a0:ad:72:38:d8:c4:05:0c:27:89:d0:e9:62:25:
         1c:ca:12:a3:41:77:83:7f:9c:42:4f:1d:0f:f2:b3:6c:f9:18:
         97:e5:32:4b:38:97:33:d3:96:9c:59:a3:f8:be:36:2a:ea:0e:
         98:49:ef:c1:d8:81:85:88:e9:35:72:2c:dc:7b:77:c0:9b:e3:
         ff:58:3d:7d:71:79:1b:20:26:1a:01:b3:04:a1:ab:04:44:70:
         25:fe:fd:48:b5:10:9a:15:ba:79:63:43:ad:52:da:7b:31:0e:
         4d:d7:13:91:ec:c6:ed:18:3b:96:f1:71:b7:c6:e8:0a:5a:c7:
         68:da:fb:90:93:7f:71:f6:c4:66:0d:36:dd:83:43:54:ba:97:
         6f:c8:8b:d2:d9:24:f3:cc:24:27:df:7f:f5:37:55:63:23:f9:
         4d:bd:3b:5e:17:50:4b:5b:34:11:6b:93:6b:47:5c:c4:58:3a:
         32:3f:81:ce:ff:66:0c:62:5a:f4:39:0e:39:be:f5:2a:31:ed:
         57:3d:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:50 2026 by rpki-client