Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File:                     zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier:          JdFfLZF4dtU/9BDGg0CR1nDsbczrriZhRKy9fZ8CwIE=
Subject key identifier:   5B:89:B3:38:B9:19:B2:0F:0D:65:B6:ED:46:30:4C:E4:03:D1:4C:CE
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer:       /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial:       019E2091AF2324DE564404DAB98B03B34FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number:          0B1B
Signing time:             Wed 13 May 2026 09:01:18 +0000
Manifest this update:     Wed 13 May 2026 09:01:18 +0000
Manifest next update:     Thu 14 May 2026 09:01:18 +0000
Files and hashes:         1: 0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa (hash: 2tTjB+QcoGOzx+5PBvD5G637D13fBCfUdr4GPNFvVKU=)
                          2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: rLBOUbwqpa+oWN8Iy/34wfgJq4Bk+6z7XUAX4x9F7Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:af:23:24:de:56:44:04:da:b9:8b:03:b3:4f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
        Validity
            Not Before: May 13 09:01:18 2026 GMT
            Not After : May 14 09:01:18 2026 GMT
        Subject: CN=5b89b338b919b20f0d65b6ed46304ce403d14cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:ae:60:fc:fb:7c:fb:d6:28:2c:e6:e1:6a:
                    da:46:cd:70:11:d6:97:e4:9c:97:76:47:b5:00:b8:
                    38:c8:f2:54:1d:b8:8a:8b:97:0a:18:bc:1a:25:5e:
                    26:d4:40:32:bf:6c:a5:65:ca:c9:44:22:00:5c:a5:
                    65:61:58:b7:3f:cf:1b:ac:09:cc:a8:c5:b6:9a:3f:
                    ab:51:45:c8:a3:fa:a9:49:2b:9b:0f:53:90:d7:96:
                    72:08:ad:d8:ee:8f:ac:35:f9:26:af:68:1a:8e:eb:
                    73:10:ad:24:e8:04:38:4a:dd:0b:2a:61:a1:5a:99:
                    84:c3:63:d2:2f:82:af:56:15:fb:7b:94:07:a0:62:
                    be:5f:c2:d6:58:4e:a1:79:ba:ca:47:47:3d:4f:64:
                    59:5f:0e:be:8a:25:c6:73:f4:f1:39:cd:2a:b6:9c:
                    f4:2e:c9:49:91:9e:2c:af:24:f5:99:25:e6:c4:9c:
                    cc:42:95:b4:30:09:b8:d8:77:05:ba:e4:31:fc:2f:
                    bb:f4:88:1d:eb:40:7a:81:78:b5:e7:b4:27:bd:0b:
                    48:69:5f:7d:7b:17:8c:77:f6:77:0a:fa:1a:47:9c:
                    a5:48:f4:0a:3f:85:c4:3d:ca:58:2f:35:a6:77:9c:
                    0b:0a:9e:41:b7:65:76:76:1d:02:33:df:cc:e9:b1:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:89:B3:38:B9:19:B2:0F:0D:65:B6:ED:46:30:4C:E4:03:D1:4C:CE
            X509v3 Authority Key Identifier:
                keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:6c:39:81:20:38:12:fd:34:d6:af:59:c6:3b:01:8a:78:
         ab:cd:ce:72:d6:52:b1:df:a0:f2:6b:cb:15:b2:0a:79:88:9f:
         32:9a:56:25:45:65:0b:85:fa:c8:63:dc:5f:57:e8:6a:8d:a1:
         8d:24:42:72:4c:4e:6c:54:e9:94:13:20:03:d9:db:df:40:66:
         ee:70:74:db:4c:87:16:2e:f9:6a:ff:bb:1a:5f:7b:67:4b:99:
         e6:7d:9f:05:11:21:e1:e7:57:5a:8d:78:5c:ce:ae:97:73:6f:
         fa:6a:69:b7:66:57:cd:d1:11:c1:3d:5e:48:f8:ea:56:fd:23:
         b2:e5:93:25:f4:0a:41:35:a4:71:74:1d:f7:d2:23:26:95:93:
         cf:41:1b:2d:00:7a:42:a2:fd:0a:4c:57:0e:6f:d8:94:09:57:
         bc:3d:ad:f3:49:be:0d:9c:7d:89:87:01:9e:39:95:24:9a:4c:
         df:9a:30:84:4e:c9:c0:3e:43:4c:7d:aa:50:13:22:3d:5f:28:
         eb:65:2c:8f:ac:7b:4d:fe:72:c6:8c:db:fc:98:0d:3e:bf:bc:
         4a:bd:5e:69:2b:4b:ca:60:4d:6a:1a:6a:fc:44:b7:cd:1f:a4:
         b1:c0:9e:41:a9:e1:fa:63:1e:2c:16:dc:62:bc:df:0f:f9:b2:
         e8:83:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:44 2026 by rpki-client