Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File:                     ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier:          VM6lttPj+oWf3v3t+SbfCK3N+SxzYrPS6kFAL+U8GvA=
Subject key identifier:   67:DC:40:E2:E0:71:89:39:FD:69:6D:13:7D:D2:D2:8A:B2:B7:73:93
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       019E1ED9BFA265DB62A2CA1A40392D5FA365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number:          1275
Signing time:             Wed 13 May 2026 01:00:47 +0000
Manifest this update:     Wed 13 May 2026 01:00:47 +0000
Manifest next update:     Thu 14 May 2026 01:00:47 +0000
Files and hashes:         1: Cmjf0diDBjMpXK9Rg283uLnjsa4.roa (hash: 3GF0sphnOBAsl682z8e9nrFNXKLn18jG5JHQOBCJ7qE=)
                          2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: ONa6dj6YBgEnVwiajN2I+UDCU83H3/yQQn3nbi7hh0A=)
                          3: moqlfmKaE2Btn3qkc70wanITJss.roa (hash: b78qrODXBzetBQGVOPaslkoF1rHcqGwC5Req+zJKsno=)
                          4: z7Q7Uc4sfRearIOg2fguIub7LO8.asa (hash: 8s++qk0Ww4g7wtu1bl1zax9iy1ShimKiVPRsQryJkyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:bf:a2:65:db:62:a2:ca:1a:40:39:2d:5f:a3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: May 13 01:00:47 2026 GMT
            Not After : May 14 01:00:47 2026 GMT
        Subject: CN=67dc40e2e0718939fd696d137dd2d28ab2b77393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:ac:0a:b9:1f:ff:b5:31:c6:09:32:60:14:
                    7c:f3:ab:6d:a5:6f:29:f1:0d:be:6e:0a:8b:66:02:
                    11:66:13:77:26:ff:df:77:d5:a1:d5:fa:61:7e:27:
                    98:eb:e1:55:4e:e9:55:35:b0:d8:2c:cf:92:ac:e6:
                    d5:81:13:2f:6f:7a:23:29:dc:2f:6c:d9:9f:7f:3b:
                    21:1d:db:84:02:06:20:f5:5e:d2:24:6d:95:dd:8a:
                    de:60:7d:70:68:c9:fe:cd:87:df:df:ac:82:b1:60:
                    f1:d0:84:e1:ad:e8:21:f5:01:56:6a:cd:ee:32:98:
                    b9:a0:40:ec:bb:81:3a:b5:1e:42:fb:0a:94:a5:74:
                    d9:ea:a9:54:77:be:d0:16:a7:18:c6:8f:06:b8:8f:
                    c4:60:65:39:60:d7:76:3e:88:f2:8e:c4:a7:67:d5:
                    51:2a:4c:9e:de:84:9c:4b:87:72:a1:28:d9:f5:4d:
                    89:ec:22:54:97:bd:59:ab:4e:36:02:75:86:83:0e:
                    22:1d:59:b8:cd:8a:90:18:79:7b:93:0b:a4:b1:be:
                    af:bb:4c:c6:3a:4c:d1:74:3a:76:ad:67:32:aa:bb:
                    e4:dc:81:a9:e3:62:3f:47:ea:9b:7b:f4:f5:f4:4c:
                    68:80:21:79:58:c1:71:eb:04:96:25:c5:36:c9:21:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:40:E2:E0:71:89:39:FD:69:6D:13:7D:D2:D2:8A:B2:B7:73:93
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:77:7e:c3:1f:61:18:9d:4e:19:47:0b:ee:22:a9:a7:3c:de:
         07:ce:7e:e9:ab:35:22:1f:09:4b:8e:5b:34:0f:7d:bd:dc:b5:
         fd:e5:e7:aa:a9:32:5b:85:23:5a:c4:9e:66:5a:fa:7f:ce:c2:
         6e:a3:67:96:8e:7f:de:2d:2c:27:c0:e3:f2:5a:b3:33:88:4b:
         30:19:3f:08:cc:c0:0f:68:40:9a:b8:3a:e8:4e:21:3f:70:5c:
         aa:83:7d:ba:92:b5:c5:3f:2c:c4:4c:11:89:e1:7d:06:25:80:
         42:ef:1b:a0:78:ce:e8:93:c0:33:e5:a3:01:47:02:eb:cc:52:
         79:a1:a4:95:78:6b:4e:ae:6d:da:f8:cd:ab:99:9d:3c:32:09:
         d6:d6:c4:c9:5c:aa:56:1d:d7:f9:52:37:e3:d8:cf:c8:08:16:
         bf:d4:f4:ec:a0:5d:77:b6:d0:07:5b:e9:13:be:e6:be:84:e0:
         86:dc:60:dd:0a:d2:40:df:fb:8f:1a:88:00:47:a3:2d:a7:9d:
         9d:36:29:f4:ab:d0:94:fb:b3:67:41:0b:c0:9d:af:6d:3f:8e:
         d8:15:b2:40:b9:82:30:9c:7d:a5:2c:9c:40:ae:cf:f8:f5:85:
         31:70:dc:f1:91:3b:81:9f:2f:61:42:21:82:f4:ba:f7:38:55:
         52:50:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:05 2026 by rpki-client