Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File:                     dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier:          0zH8a5nT5PGlTPhl+0fgxoYVahCiifKBvGNmmd/QRbA=
Subject key identifier:   3A:B2:77:78:D5:97:1D:C8:91:EB:D1:0C:53:77:40:59:E2:7A:FE:8D
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer:       /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial:       019E216D1E74AEA6C444A6089E6FF4A93630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number:          0A2D
Signing time:             Wed 13 May 2026 13:00:59 +0000
Manifest this update:     Wed 13 May 2026 13:00:59 +0000
Manifest next update:     Thu 14 May 2026 13:00:59 +0000
Files and hashes:         1: YY31Gx9OeO_-r0CoMnhr80yRfsg.roa (hash: jKbUUsk+kRRQP2A9rjJCw+n6agNn6MIWpqgM0oDWAoE=)
                          2: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: wyjtjka0s4sadSF7+OUNSx5/5bqz5zy+NRzbllmlnHA=)
                          3: uCHdbczowtuleN607t3-X8nqm8I.roa (hash: yiE7OXub7Co6WZANPsf3qZwNA4zRpdg1YwhmaQglGcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:1e:74:ae:a6:c4:44:a6:08:9e:6f:f4:a9:36:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
        Validity
            Not Before: May 13 13:00:59 2026 GMT
            Not After : May 14 13:00:59 2026 GMT
        Subject: CN=3ab27778d5971dc891ebd10c53774059e27afe8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:20:51:0e:b8:e1:07:06:62:e0:c9:12:67:
                    82:ca:e9:1c:82:e7:47:21:b6:57:56:9f:87:ce:56:
                    14:bf:0c:42:1f:59:8d:e3:c0:97:7e:3f:e9:30:a5:
                    6d:61:26:35:d9:37:d5:fd:4f:fc:54:47:8b:98:d9:
                    98:56:fe:2d:61:67:cb:53:a3:04:3c:88:d0:95:9f:
                    5f:57:4b:8e:e8:b4:57:ba:d5:27:68:13:e5:c3:6b:
                    d7:64:03:51:ef:16:a3:c9:57:cc:35:70:14:d9:48:
                    d9:49:77:84:86:85:35:be:5b:e3:bf:8c:77:18:6e:
                    35:1b:b5:83:cb:2b:07:b0:26:1d:e5:41:97:5e:d9:
                    59:a7:cb:96:3d:a6:a4:ec:c9:d0:d0:a0:9f:6c:f1:
                    82:9a:9a:a2:e0:13:b8:01:6f:b0:69:a7:65:0b:a7:
                    7b:fc:30:67:18:27:5d:21:97:3b:7a:2b:5d:6a:72:
                    ae:9c:cc:f0:dc:02:44:a8:26:c0:70:e9:b5:8e:ab:
                    ed:f9:61:de:b9:61:bd:5f:f4:26:33:69:a1:10:e8:
                    05:cf:5a:36:f9:10:e7:c9:b6:dc:71:5b:51:58:1c:
                    c4:81:30:1e:30:7e:77:9c:01:fe:7d:a2:4c:50:81:
                    7d:24:5f:d7:cd:f1:c8:20:a6:3c:be:3f:2b:3b:28:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B2:77:78:D5:97:1D:C8:91:EB:D1:0C:53:77:40:59:E2:7A:FE:8D
            X509v3 Authority Key Identifier:
                keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:c1:cd:7f:91:95:7c:bd:e2:71:fb:07:40:75:11:e7:c1:
         34:55:cb:0b:97:aa:31:19:aa:4e:1b:12:61:da:49:5f:89:f4:
         e0:f1:fa:bb:1b:d2:29:df:91:12:9c:47:7e:1f:27:30:4e:32:
         bd:75:75:62:c0:cd:73:11:00:20:d0:24:26:3d:89:4c:f8:e8:
         89:73:9b:bd:c0:d3:85:41:85:df:8e:88:d4:42:5c:1a:33:27:
         25:04:4e:3d:ee:b6:c1:b7:97:ae:c1:00:20:f3:34:4b:8f:3e:
         7c:73:96:28:eb:1f:56:8d:11:bb:e1:77:ab:63:32:37:e3:b6:
         c2:c1:cf:7e:70:74:53:cd:4e:25:44:c9:22:c2:ff:d4:12:6a:
         ab:58:af:a9:5f:85:bc:11:71:8a:06:2f:d2:40:e6:3e:15:9c:
         80:9e:55:32:b1:0f:db:e8:dc:6b:1e:0d:94:b4:67:fc:92:d1:
         d1:26:f9:96:ab:30:14:38:8f:af:5b:6d:f4:2d:55:e6:d9:93:
         2d:bb:85:39:65:17:28:98:b3:14:60:61:c9:4f:0d:ab:c3:67:
         8f:99:1c:f0:68:d7:cd:78:e9:00:09:4f:13:fc:7a:18:f6:c0:
         6f:ce:d1:e1:11:77:2a:01:ab:03:c7:d1:fe:2a:6c:78:dd:6e:
         d9:20:5b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:08 2026 by rpki-client