Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File:                     ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier:          UxKO9IN9Q3DdiZY5rdh/fMSdLkHQaY0wUP3rHO79yQg=
Subject key identifier:   52:D4:93:35:6B:1A:18:14:44:15:C1:54:94:F2:13:C4:71:30:EA:BD
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer:       /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial:       019E1F11B3022F94BBA9C364FCCEA6DA02CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number:          0E51
Signing time:             Wed 13 May 2026 02:01:53 +0000
Manifest this update:     Wed 13 May 2026 02:01:53 +0000
Manifest next update:     Thu 14 May 2026 02:01:53 +0000
Files and hashes:         1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
                          2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
                          3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: dZq8KnDqVOiSrhVQ0zFmcqL4Rs0yyt/CMS3GnM9wLi0=)
                          4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
                          5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
                          6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
                          7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:b3:02:2f:94:bb:a9:c3:64:fc:ce:a6:da:02:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
        Validity
            Not Before: May 13 02:01:53 2026 GMT
            Not After : May 14 02:01:53 2026 GMT
        Subject: CN=52d493356b1a18144415c15494f213c47130eabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:8d:e0:e8:9a:e0:01:61:b6:01:b5:13:f5:
                    5e:ae:c2:6e:ed:3b:b3:13:01:61:5f:5c:59:1f:6e:
                    63:d9:d5:42:53:81:cb:fe:18:17:09:ac:0a:77:fb:
                    b7:a3:ec:52:be:a5:c1:d4:a9:c9:b4:b9:e9:3e:61:
                    86:4f:6d:f8:d7:7b:b8:f3:d1:82:5f:5c:ab:f5:dd:
                    d3:a7:f3:71:f5:40:80:f2:c2:4b:ca:96:94:dd:e9:
                    49:a4:9b:b2:08:f4:e5:0a:0a:8c:38:70:0d:e3:01:
                    a7:82:40:2e:4b:bb:39:f9:a8:97:58:6d:2e:12:7d:
                    cb:ed:87:47:54:8c:24:95:36:e7:b3:bc:b8:7a:af:
                    67:8e:79:b1:d3:ef:97:9a:3d:25:5f:2c:74:d1:39:
                    9e:79:60:4e:70:8e:4c:47:7a:7a:8f:22:19:3f:ba:
                    22:89:1f:01:6c:a1:10:cd:b2:e8:bb:19:8b:ee:6e:
                    5f:63:b1:ee:3a:c4:1a:b0:4d:52:dc:fb:cb:14:4b:
                    9b:a4:92:d1:69:d7:58:b7:7b:db:c5:39:a7:d9:0c:
                    5e:c4:4c:ff:a2:3d:a2:14:68:98:33:af:44:c8:8b:
                    69:dd:1c:09:73:d5:ae:51:f5:6c:8d:49:81:a5:32:
                    96:ce:40:82:ee:fc:6d:af:c5:14:8f:5d:32:0e:2d:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:93:35:6B:1A:18:14:44:15:C1:54:94:F2:13:C4:71:30:EA:BD
            X509v3 Authority Key Identifier:
                keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:56:a9:7a:3d:b1:43:f6:91:40:ee:33:74:76:68:21:4e:70:
         55:ec:1f:4b:1b:5b:78:a0:50:bb:d4:4e:db:97:f9:a8:15:d8:
         3f:b1:d4:7b:5b:b0:d2:27:a1:37:11:4e:8c:dd:2f:88:3f:2c:
         6b:b6:3b:c3:87:18:21:8b:24:2f:2d:f4:7f:ad:c7:41:ff:57:
         7a:74:50:c4:85:ea:e7:0b:29:42:7f:92:a4:08:7e:3d:d2:db:
         2e:c2:ee:79:78:b1:2a:0c:c7:a4:ff:ab:cc:a3:fe:33:2b:e9:
         86:d0:ea:9a:13:86:54:16:b9:a3:1d:34:00:a7:c0:dc:58:4f:
         79:47:74:67:a4:43:9a:ff:b5:fd:2f:c6:ce:56:24:7f:9b:69:
         62:80:ca:da:59:8d:54:a8:09:c6:d0:6d:44:73:32:b5:5e:41:
         ac:4e:c0:6d:51:3e:ef:59:9f:d3:c5:7e:92:c6:26:41:cd:9c:
         16:8a:64:af:d6:d6:ee:33:4f:c2:0e:30:f4:56:cd:c9:b3:be:
         4d:8c:88:5f:bd:4c:4f:2c:be:09:cb:1f:7d:d0:39:62:ad:c8:
         5d:57:1f:76:b8:58:6b:d5:5c:a7:5f:5d:e2:2d:d3:f1:e6:5c:
         a1:76:21:68:06:b3:a6:b8:2d:9b:c2:b2:d4:82:5c:05:7a:8f:
         34:5c:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:14 2026 by rpki-client