Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File:                     Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier:          BPt4tCfeVM/NxO8YGOFCey9pRoYmzh5N1Yt+HIOpyS0=
Subject key identifier:   77:52:F8:68:D2:67:CB:E0:91:AD:87:C9:FD:CF:19:4A:FA:AD:12:7D
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer:       /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial:       019E2024721456DB988B697839B63D27AD21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number:          04D2
Signing time:             Wed 13 May 2026 07:01:59 +0000
Manifest this update:     Wed 13 May 2026 07:01:59 +0000
Manifest next update:     Thu 14 May 2026 07:01:59 +0000
Files and hashes:         1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: 5oDnRPbzLPXFPthm8b3zSRef7qNuIrWEkWiCnQKAFy4=)
                          2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:72:14:56:db:98:8b:69:78:39:b6:3d:27:ad:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
        Validity
            Not Before: May 13 07:01:59 2026 GMT
            Not After : May 14 07:01:59 2026 GMT
        Subject: CN=7752f868d267cbe091ad87c9fdcf194afaad127d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:6a:f4:94:96:08:ce:ab:36:a6:e6:a2:ca:
                    2d:c7:28:bf:e9:b1:5f:f3:c9:79:b8:fd:fb:d2:3c:
                    f2:06:41:28:f7:78:3f:47:7a:8e:88:3e:31:3f:a3:
                    bf:82:c2:b0:4f:78:64:d2:43:a6:3e:fc:af:43:9a:
                    00:11:a7:17:e8:f1:df:af:20:c0:9a:a7:76:81:59:
                    8e:46:da:3d:f5:c5:aa:b8:e7:46:e6:15:38:2c:5d:
                    ec:ac:64:c9:28:cd:0d:2a:c7:a3:c6:5e:27:07:c4:
                    d8:ef:5b:2c:61:a9:ae:b3:c4:82:f5:58:21:c2:8c:
                    15:23:42:05:a5:a6:22:2a:5e:08:89:ab:44:c8:d4:
                    e4:6a:01:ff:51:dc:2f:04:6a:73:73:64:3e:a8:c9:
                    8d:d4:9e:fa:5f:22:4f:65:f0:80:82:15:23:e7:c0:
                    a9:aa:27:86:06:8b:91:74:c5:3d:27:ac:dc:71:1f:
                    1f:83:49:9d:69:03:1e:8c:e6:06:48:d6:e7:2e:76:
                    f0:bb:67:f8:7c:43:14:22:cf:e9:18:be:f5:31:93:
                    51:52:31:dc:e7:6a:95:30:02:fb:37:11:b6:4f:21:
                    76:dd:70:93:ae:96:4e:77:7f:d5:35:eb:81:b0:9d:
                    a6:22:d7:81:e3:fa:c5:8a:57:42:c1:f6:c4:e6:c8:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:F8:68:D2:67:CB:E0:91:AD:87:C9:FD:CF:19:4A:FA:AD:12:7D
            X509v3 Authority Key Identifier:
                keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:8a:17:97:1c:74:7b:78:4e:13:fa:c9:e5:5f:84:76:02:
         d4:06:1a:35:5d:08:e3:75:0e:5d:cd:7d:8e:49:e2:ba:79:db:
         fd:28:c1:93:50:c0:64:4a:fc:93:63:9a:28:e7:07:ff:4c:65:
         f8:16:67:75:b6:b0:ed:25:58:5c:91:c9:8a:0f:6a:a9:47:78:
         5e:f7:ef:df:35:c7:0f:c4:03:f2:aa:f9:8e:15:ae:43:9a:19:
         de:06:64:9e:55:2a:f9:00:43:36:48:e4:cb:32:10:9a:b2:5c:
         aa:4c:97:20:ef:5b:db:f7:29:81:f9:da:34:7f:06:35:12:53:
         97:12:99:4c:dd:f4:e5:3e:ec:fc:7a:a5:02:86:56:38:30:6d:
         dc:43:c1:e6:cf:ab:af:b7:40:92:98:08:9a:9c:c4:68:f3:b0:
         a1:40:8f:bd:ea:fd:ec:39:19:ca:f6:09:7a:5e:5f:08:bd:67:
         31:d7:34:74:8f:4b:c1:f2:a7:1d:72:7e:9c:14:e9:63:b2:7f:
         3c:f2:44:83:71:b7:3b:fd:12:fe:47:36:1c:3b:ab:f9:9e:37:
         b7:41:98:0c:4b:67:21:2f:71:be:cb:27:3e:c2:97:f5:ef:57:
         5e:ef:b0:e1:d8:2d:cf:51:6e:93:15:91:7e:fe:d8:9e:43:e5:
         ce:a5:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:02 2026 by rpki-client