Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          YdKlwq3JGiCOUv0/xT5F0JlW+ZBX0fy+SUX/E+2Fn4w=
Subject key identifier:   58:E3:0C:B9:FA:00:FB:67:44:FB:D8:BC:10:4F:F3:C0:35:9C:2E:64
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       019E1D594D6072D0FADEBEB59D2CCEDAB5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          1916
Signing time:             Tue 12 May 2026 18:00:52 +0000
Manifest this update:     Tue 12 May 2026 18:00:52 +0000
Manifest next update:     Wed 13 May 2026 18:00:52 +0000
Files and hashes:         1: 9823jxXqdCSIxcH288HnqavucSI.asa (hash: 3zFrnCZ3fk7mBk5UudxYVrRpKBD3GP7IzVn6x67AU6o=)
                          2: EwhrUJlTerpzDSxGJYXhc1ipbvY.asa (hash: Kifw3U236SfBdGCg3lUHGjK23zhhUU5LfhGOnN6eMXs=)
                          3: FhIJYPne7gPWVQQPlSNOQDYojyw.roa (hash: K6YwsovdJ/O0GUapO1LURNQtSxCoIhGALa7CIvhy8bI=)
                          4: Qqt98OgHdyagvtzakVb3zNMmwKs.roa (hash: BpO8bWnBPYn/bYjQyXDccWI2949LL94WM+S3q4wZu/4=)
                          5: VvqzmjNZq8EAn7upk3HKESnO2Sg.roa (hash: zi8li6T/eNUQAuUi6F1iTu5taSL1qMtfO51QFh76N4Q=)
                          6: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: cIWLZZ9KWum/lWGSrpJkhd64CVMhDE2yXZkODuvwLDE=)
                          7: zfs1n8rEspCcwaljPO1LWoriK7A.roa (hash: Cw4La7Iv+J3S/kv3dOrnyO46Wye0r7XGdA/N85GgLG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:4d:60:72:d0:fa:de:be:b5:9d:2c:ce:da:b5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: May 12 18:00:52 2026 GMT
            Not After : May 13 18:00:52 2026 GMT
        Subject: CN=58e30cb9fa00fb6744fbd8bc104ff3c0359c2e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:3f:15:1f:62:62:11:01:59:1f:79:9f:86:
                    bd:c6:02:8e:82:1d:01:89:c7:f4:6d:94:45:56:cd:
                    9e:f0:c0:f4:6a:d0:b3:75:59:99:72:29:9f:30:eb:
                    f4:f7:29:ef:63:96:d8:b8:2f:ae:e9:84:f9:79:62:
                    db:1b:bc:35:3c:46:39:ca:e1:58:9c:e7:bc:aa:20:
                    e7:f1:7e:13:c6:d8:63:46:c4:a8:15:34:fb:fa:ee:
                    60:8c:a4:ce:8d:a2:9a:b9:fa:a6:7c:fc:b0:ce:fe:
                    59:11:c3:e6:1f:e7:d4:c8:0f:f1:65:92:75:a4:80:
                    7f:ff:8f:da:52:10:8d:12:e9:04:6b:87:10:d9:f8:
                    93:b4:97:c0:10:25:59:57:0a:c1:49:ff:ab:c9:09:
                    6f:3e:1d:d5:d7:1b:e9:be:5d:2c:b0:e0:0e:45:83:
                    3b:aa:24:57:c7:fc:70:3d:6a:26:bb:94:1a:4b:be:
                    c7:a2:fc:1a:b0:6a:84:32:a9:53:c2:7b:13:6e:b5:
                    35:32:08:e7:0e:1c:82:cb:82:a5:c4:b4:93:0c:bb:
                    bd:26:bf:b1:b5:3f:24:31:01:5d:3a:e6:7c:ad:54:
                    bd:55:8a:a9:40:24:6f:31:08:61:ce:bf:1c:ff:6a:
                    e4:92:73:a4:4d:fa:5a:bd:dc:ca:23:71:06:0e:93:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E3:0C:B9:FA:00:FB:67:44:FB:D8:BC:10:4F:F3:C0:35:9C:2E:64
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b8:86:96:a0:6c:0a:e3:f2:6a:14:08:63:57:6d:69:ac:62:
         38:2f:66:82:72:db:bb:82:f6:d6:31:f7:d5:25:13:f4:90:c2:
         ab:5a:59:80:d7:fc:cc:02:a6:ad:d9:a0:61:9f:ae:86:40:f8:
         f7:8a:67:57:f8:05:95:04:58:1a:e1:31:53:58:14:cf:4a:66:
         8f:aa:8f:b3:cb:57:d3:25:31:d4:bb:60:2f:06:75:07:2a:fb:
         11:2a:cd:9e:2f:e2:f1:e5:03:fb:8a:3a:94:a1:38:89:3e:80:
         04:9f:43:f9:e8:9d:39:c2:aa:54:20:29:2b:c2:cc:7a:a2:a2:
         35:02:f2:58:82:ad:98:58:01:e5:a0:03:89:f1:c1:3f:6b:b4:
         cf:da:b8:2e:0c:8c:d0:29:83:e5:f6:f7:b8:04:b3:6e:5a:3d:
         f8:a8:8c:5e:43:91:b1:5b:e1:09:bc:54:9c:28:8e:7e:f8:52:
         35:68:30:e9:a7:da:53:20:30:2c:b1:19:c0:58:3b:35:05:17:
         04:97:05:b9:72:5f:9f:9c:40:96:14:48:33:78:9b:30:f1:a4:
         88:9c:93:3f:99:fe:a4:4b:61:e6:d2:e7:13:d8:84:c0:fa:54:
         e0:cf:97:36:c7:59:0e:52:8b:91:40:34:c3:2b:7b:0a:7b:1b:
         ca:04:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:23 2026 by rpki-client