Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File:                     Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier:          6aooxQAt5US+06GeONJrQKJZfqI6bEHVvOYnyC7XDQI=
Subject key identifier:   FD:22:E8:13:A7:7E:CC:39:E0:32:51:F5:84:63:79:A2:41:0A:B1:B6
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer:       /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial:       019E1FB5E24B797B41B8E7FF3ACFD3EFCB9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number:          1911
Signing time:             Wed 13 May 2026 05:01:13 +0000
Manifest this update:     Wed 13 May 2026 05:01:13 +0000
Manifest next update:     Thu 14 May 2026 05:01:13 +0000
Files and hashes:         1: 8fgtqwCkJq8DgaM9f569Bs0xaxc.roa (hash: QEUkALn73LxSmFsf5evgpfdPqAtmFu8hMHpLqd8W8OA=)
                          2: YytdvmUqMlUYaz2rUM4035jtC1g.roa (hash: shR9sZHCpyT2KbYpD+KESwIQfMOwq9VzuzMQm7Ip8Tg=)
                          3: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: OvTeajlKOBPbD97nffUGyvUSKfPPazkbw4rElDtehIk=)
                          4: _rX0Pp7-maFWlmqvdtFQDE9VMd4.roa (hash: JcwoPPYbwcTSP2znNESFrTnQNOV0v0WHsf0jgmgiH6I=)
                          5: by-UGjZnPxHASghfMrX3xMxAH0U.roa (hash: E+h5Wx406s4BfDje+75V+He27RZ6hOR4CfZDRt1lPHI=)
                          6: npI4kx8XN3dD9EUfXLup5Uxufpo.roa (hash: Wo/f0yd4mja7w18dDAZVOFDWsGvRVUgoh4pNDEcSTNk=)
                          7: zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa (hash: fhJgy4L5lI5bxEqwJcc/VgO0/xvWjnY5mfId21lwGRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:e2:4b:79:7b:41:b8:e7:ff:3a:cf:d3:ef:cb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
        Validity
            Not Before: May 13 05:01:13 2026 GMT
            Not After : May 14 05:01:13 2026 GMT
        Subject: CN=fd22e813a77ecc39e03251f5846379a2410ab1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:bb:7a:54:aa:14:df:34:e6:0b:b1:43:68:
                    d7:8d:f6:b9:ee:75:d5:16:ed:d4:de:6c:72:53:b8:
                    5e:fe:8a:d4:20:aa:90:d1:74:f2:ba:3e:5d:76:33:
                    27:c3:66:46:9b:d9:4f:b1:ad:9a:0d:b2:b5:42:72:
                    16:6a:33:71:af:ab:79:08:39:ab:67:3a:fd:d2:76:
                    d9:99:89:c6:b9:b5:d5:e4:ee:b0:db:c2:5d:bf:bc:
                    4c:27:5a:37:50:cd:53:d2:6b:14:f9:e7:99:9f:7a:
                    51:be:46:34:f0:a2:d0:54:50:43:d4:0f:f1:94:16:
                    25:f2:b6:cd:cf:7f:f2:10:c9:22:28:39:c5:37:e9:
                    69:18:40:f5:46:54:03:10:85:02:50:54:3d:d3:ce:
                    1f:24:e0:a5:e5:c6:cd:1e:7b:3b:8a:f6:db:33:b1:
                    29:2e:36:ba:c7:b3:3e:b0:84:b1:41:a9:0e:1f:8c:
                    10:06:9b:b5:85:14:54:e9:73:3f:19:07:ef:8b:e3:
                    cd:40:34:2f:93:67:cc:cc:06:f9:19:7e:8b:86:9d:
                    c0:a7:e3:a3:c8:51:3c:2e:1c:2c:87:c1:58:e9:52:
                    0b:b7:1c:63:70:18:41:51:5c:82:2e:da:48:a6:90:
                    ba:43:3c:bc:de:9d:6d:6d:4c:17:64:fe:a1:e3:3b:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:E8:13:A7:7E:CC:39:E0:32:51:F5:84:63:79:A2:41:0A:B1:B6
            X509v3 Authority Key Identifier:
                keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:f5:05:3a:f8:fe:32:68:73:12:20:6c:7c:92:09:d8:77:
         af:97:01:4f:59:13:d8:9c:0c:67:57:4d:e3:22:6a:b9:51:bf:
         96:50:b8:43:38:c2:ee:12:d5:05:59:3f:73:bf:9b:57:27:37:
         94:66:a5:b1:fa:2c:b7:7d:27:7c:5e:c8:82:af:4e:84:7a:63:
         e2:9d:1b:c7:a4:eb:eb:6f:fe:0e:8d:e7:2a:99:99:7e:d3:77:
         a9:a4:f7:f5:60:43:55:4b:cb:8d:2a:21:7f:19:f8:94:8d:9a:
         fc:c9:a2:ed:b2:75:f3:1a:13:38:a5:16:85:7b:32:9f:51:f5:
         8b:a9:ec:49:0f:3b:dd:d8:4f:61:4b:cf:54:af:77:68:d8:4a:
         39:12:b3:99:2e:0c:3c:fa:5b:45:2b:c9:5e:52:6b:a1:f4:98:
         3d:0b:26:ee:10:18:42:67:25:14:e9:70:41:34:bc:8e:74:7c:
         aa:95:cf:28:24:9a:e0:34:09:f5:0f:56:c2:fa:9e:6f:da:84:
         9e:9f:ab:e0:ab:ef:ae:66:7d:86:82:84:f5:8c:85:61:25:8f:
         5c:0f:c9:6e:ec:82:0a:6f:23:bb:f4:4e:36:0c:43:46:21:07:
         cb:8d:b1:3b:fa:68:11:0c:1d:48:1e:ff:e2:12:58:35:0e:da:
         ed:bc:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:41 2026 by rpki-client