Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          PClMAopbOjVREC1040kTSHEYfFJXVCUYTTzZvRFbtBM=
Subject key identifier:   65:30:0F:79:F0:42:31:B9:00:2E:F2:23:88:CA:07:AD:DB:D4:8F:DA
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       019E1E34CFD90B1E4C20BC4935A8F3400657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 22:00:37 +0000
Manifest this update:     Tue 12 May 2026 22:00:37 +0000
Manifest next update:     Wed 13 May 2026 22:00:37 +0000
Files and hashes:         1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: kF2zMAn57RCaJMtARNhYenpCkOOdGvU82sFK12SaCEs=)
                          2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:cf:d9:0b:1e:4c:20:bc:49:35:a8:f3:40:06:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: May 12 22:00:37 2026 GMT
            Not After : May 13 22:00:37 2026 GMT
        Subject: CN=65300f79f04231b9002ef22388ca07addbd48fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:11:1b:35:d7:38:5d:ac:b1:1e:94:31:71:
                    1b:41:84:77:4e:c9:10:1d:90:a6:4f:0b:63:d3:96:
                    1e:ce:2a:49:20:ab:21:74:f9:14:4d:04:55:0a:be:
                    03:c6:2e:97:b3:c0:5c:ee:12:96:cd:76:3e:17:be:
                    c1:bb:43:ad:f2:24:66:cb:7b:52:34:be:a9:9f:06:
                    84:18:4d:3f:2a:59:74:21:2b:2d:51:ff:d6:db:09:
                    3b:46:17:f8:6f:10:96:21:51:90:d0:fc:b8:43:b7:
                    99:f5:b6:a6:66:11:6c:61:fc:02:c7:2b:6e:c1:57:
                    36:88:cd:65:69:21:d5:b0:66:16:f5:db:01:8a:e1:
                    8e:98:e2:0e:3f:23:01:e5:99:48:3c:d4:f2:eb:fd:
                    36:2d:1c:89:32:de:59:75:ab:92:4f:2d:b4:e3:3c:
                    a0:80:54:d2:ec:e7:6a:db:70:6d:68:0e:10:08:ea:
                    f8:3f:9a:ec:86:f9:a1:fd:d8:4f:c2:19:6c:00:50:
                    08:02:49:39:8a:81:1c:6a:ee:79:b9:b4:68:03:e4:
                    d6:bd:2c:c0:d5:b5:3c:de:8b:33:d7:c4:0a:e7:3b:
                    93:9a:24:2f:18:1d:9e:75:39:0b:41:72:6f:8a:33:
                    d1:f7:b4:17:f4:fe:05:29:48:dc:13:ce:0f:3d:d0:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:30:0F:79:F0:42:31:B9:00:2E:F2:23:88:CA:07:AD:DB:D4:8F:DA
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:9b:4b:a7:de:88:d4:d9:d3:12:8b:58:5a:1c:f2:45:b6:
         1c:74:3b:73:c2:2d:ee:e9:8a:63:9b:72:fe:3e:0a:7b:43:38:
         97:20:25:1d:dd:34:8a:38:cc:82:ab:08:ef:2f:d9:6f:26:16:
         38:58:94:cf:ed:20:aa:07:21:e1:55:aa:a8:ad:3d:43:82:44:
         45:c7:f9:3c:d7:14:64:8a:72:3a:ac:5c:7c:3e:56:ac:21:d1:
         a0:ca:d8:40:d2:ba:36:65:89:95:cc:c9:ff:15:aa:cf:1a:56:
         f6:a7:e8:68:25:ed:9e:7c:f7:82:fa:02:41:a9:ff:eb:aa:d3:
         72:15:90:fd:95:bd:ba:e9:e4:2f:5f:6c:f1:37:54:51:df:55:
         66:44:cd:9c:77:ed:69:d3:cd:97:34:47:d7:07:9e:b7:dc:1a:
         ac:2b:21:ed:46:29:6f:8f:59:a1:62:97:35:21:23:2b:b8:62:
         96:92:0b:e0:0c:22:20:a7:31:64:33:47:64:bd:e5:03:0e:7d:
         42:33:a2:b4:8b:ee:14:e4:fc:5d:75:80:59:8a:2d:15:eb:01:
         a0:e7:0a:9a:02:74:fb:5c:ef:96:06:79:f5:4d:69:6c:f5:0c:
         bb:c5:7a:49:ea:13:f1:31:ec:ec:aa:7d:18:0b:77:b3:73:cb:
         50:eb:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:10 2026 by rpki-client