Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File:                     zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier:          2FaQqfRlwvHeNwjPi3dPWkdAalMKUSSB2cKd7fBuZWY=
Subject key identifier:   2E:F9:FC:63:4F:82:43:7F:F5:DD:2B:88:D1:2A:EF:F0:C6:6E:F0:DE
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       019E1FEC7F8819201E81059EA9406B764D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 06:00:53 +0000
Manifest this update:     Wed 13 May 2026 06:00:53 +0000
Manifest next update:     Thu 14 May 2026 06:00:53 +0000
Files and hashes:         1: 8q97JD8tJUeeOn9fKUKNm7YiLwU.roa (hash: +XZNxuku4QOLJPqFzFk8t0v4pn8/FyRgMW7pvdNX3CU=)
                          2: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (hash: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0=)
                          3: sPvIT2OpPdfQUjumOhMItUZScLE.roa (hash: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4=)
                          4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: MPaVfrM2cgjvXeX4ySjVDjW2HiaJF1MFXx0VwpxIFQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:7f:88:19:20:1e:81:05:9e:a9:40:6b:76:4d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: May 13 06:00:53 2026 GMT
            Not After : May 14 06:00:53 2026 GMT
        Subject: CN=2ef9fc634f82437ff5dd2b88d12aeff0c66ef0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:90:03:74:ff:c0:80:2c:d8:e8:af:de:58:
                    0d:26:e8:d3:f3:83:f2:1d:07:0d:3e:29:6b:0e:65:
                    4a:00:17:cd:80:16:0c:a8:c1:fd:43:1e:c1:b8:d4:
                    6b:e4:3c:2a:24:9a:74:00:82:b8:8d:96:47:28:4f:
                    0a:15:25:ae:20:9b:ca:18:fd:94:46:9f:f5:7e:37:
                    ba:51:bb:85:82:ca:c1:b3:21:c1:8f:cb:3d:43:13:
                    bd:5d:67:1f:76:94:c6:a8:a4:10:fd:d7:08:21:0b:
                    30:87:97:e8:a6:30:61:bb:8c:79:de:05:fb:b8:b0:
                    25:ed:c0:40:c0:48:ea:c8:9a:17:90:94:32:02:33:
                    51:f9:1b:95:e3:dd:18:11:59:e5:c1:d4:7e:e7:04:
                    7f:7b:f8:36:c4:54:8d:7a:a8:15:41:26:b3:8b:16:
                    93:83:70:2c:92:4d:96:40:ed:75:6d:84:d9:48:5e:
                    53:b8:24:2a:3e:80:54:33:d2:4a:64:9d:51:c6:37:
                    65:2e:3e:1d:49:f9:7c:9b:d6:0a:53:59:9d:ff:57:
                    9e:97:f9:75:a4:41:02:ea:be:88:af:38:c0:bf:3e:
                    02:4e:a2:4b:dd:bc:1b:69:53:13:95:7f:da:b3:ec:
                    b5:2d:8a:9f:1c:75:b8:10:5d:19:4c:8f:d7:de:24:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:FC:63:4F:82:43:7F:F5:DD:2B:88:D1:2A:EF:F0:C6:6E:F0:DE
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:b2:dd:52:af:bb:8f:7f:cb:c5:86:29:50:61:c6:f3:01:
         8c:6e:5b:fa:4e:1e:42:db:46:85:90:6c:c7:73:53:73:27:74:
         d0:e6:33:3d:df:83:e4:25:8a:88:40:76:35:6f:66:85:4f:9e:
         eb:98:ec:82:23:04:66:96:8b:1d:3b:c5:64:07:70:c6:3e:7b:
         c3:48:d3:f2:57:c9:c8:83:69:3f:84:0f:a4:ff:66:c4:23:5c:
         8e:89:c6:60:f0:4f:9a:a0:8b:d4:67:40:20:16:d9:05:16:fc:
         19:d0:1c:32:0a:e4:e1:97:e2:b4:e6:32:32:85:e4:5d:fb:de:
         79:19:51:03:f1:08:b3:59:9c:0c:e7:bf:02:02:fc:80:79:3e:
         8e:7f:5f:20:4a:31:80:d3:41:a9:9d:c1:a6:db:21:e3:cc:5a:
         b9:3b:cc:27:49:32:6b:d9:60:97:89:93:f0:75:f8:4b:5a:f7:
         44:49:47:a2:ba:d1:63:7e:08:87:9a:f2:39:89:7d:a1:a3:09:
         1e:32:13:b9:32:5b:14:3a:31:f3:8d:7c:f3:32:fc:f2:e3:c8:
         6d:f3:b1:e0:e7:e8:df:ee:80:f2:68:a0:58:16:6f:b2:3a:a1:
         bc:6c:0e:0f:79:f3:49:e3:12:43:c5:c6:03:35:1e:5c:a8:4b:
         fd:0f:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:39 2026 by rpki-client