Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File:                     zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier:          PzUCv0U+zOVK2/Y12ICNh7ER+GernIXGJ+Te1aJblrc=
Subject key identifier:   74:EF:3E:51:D9:B4:83:A3:FE:82:67:0E:D6:58:F5:30:DB:BA:E0:66
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer:       /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial:       019E1BD93F6E6F5846C97DFAAF7B36CD94E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number:          0B8D
Signing time:             Tue 12 May 2026 11:01:22 +0000
Manifest this update:     Tue 12 May 2026 11:01:22 +0000
Manifest next update:     Wed 13 May 2026 11:01:22 +0000
Files and hashes:         1: G8jTqhKr3RV9A3i4x6fuNRY1cNc.asa (hash: WEn0uVqKmubM0FrDQK4449fe1iaNFEijXh0/lWGhgzU=)
                          2: Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa (hash: lsd6lPp/ulgto4+3u4nnsXd9a7lg4D4o9xZaATfNY4Y=)
                          3: ZPVObgSQAeaiEJWCunUwUTPvT5o.asa (hash: XJQ5ytTnF2RAOuhg27UFX6k5++USz3ZVVC5spCrv3+g=)
                          4: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: 1RlACDLYYiI6U/LbLsYNf6rng/H8MJ9e/vVbPaqeRgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:3f:6e:6f:58:46:c9:7d:fa:af:7b:36:cd:94:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
        Validity
            Not Before: May 12 11:01:22 2026 GMT
            Not After : May 13 11:01:22 2026 GMT
        Subject: CN=74ef3e51d9b483a3fe82670ed658f530dbbae066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:b7:38:fe:14:d1:5d:64:d5:7b:d8:06:ba:
                    5b:cd:59:10:91:2b:86:16:b0:72:37:e1:3f:44:68:
                    e3:45:84:fb:0e:6c:ed:f5:d8:a4:b3:ab:f8:4e:83:
                    07:4c:2a:20:63:51:dd:8b:b9:eb:fe:ec:35:28:47:
                    06:75:9b:04:26:0a:1d:4f:d8:89:82:86:a6:50:d1:
                    8c:27:b4:ad:72:60:9a:4e:31:a5:25:6d:4f:d8:df:
                    c5:7d:77:af:a3:86:36:16:71:9d:6b:4f:75:91:0b:
                    ab:2e:2e:2c:5e:d6:5d:56:92:a1:85:6c:58:b4:16:
                    49:ba:76:e9:79:43:53:9c:2a:a6:fc:ea:a0:0c:1d:
                    a3:d9:8e:ba:b8:dd:ff:f4:5b:3c:26:10:44:96:8f:
                    31:b7:50:91:a2:78:0a:51:f4:ed:71:3e:93:64:e6:
                    e4:d4:40:48:6b:21:97:1c:b7:48:68:25:f0:c6:56:
                    0d:03:94:12:83:35:e7:45:d3:dc:44:13:ba:b0:15:
                    e3:11:7e:a6:1b:49:79:a6:3e:24:3b:fd:b8:47:61:
                    18:da:f0:f0:3f:ff:bd:ad:b8:ec:01:fe:1c:45:e0:
                    b2:a3:c5:19:df:9c:4f:6b:9d:2a:2f:73:da:93:44:
                    ee:cb:84:aa:5c:b6:04:22:9c:f2:0f:57:e0:3b:c8:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:3E:51:D9:B4:83:A3:FE:82:67:0E:D6:58:F5:30:DB:BA:E0:66
            X509v3 Authority Key Identifier:
                keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:22:9d:05:d7:fb:b5:26:dc:88:31:ce:7d:63:6c:a2:23:
         97:54:7d:a0:4e:27:94:5b:8f:41:75:26:52:09:c6:01:b0:98:
         ee:b9:8b:4b:e8:e2:10:ce:52:d3:1a:15:ef:59:64:1e:c8:8e:
         41:62:12:fb:c9:39:92:a4:cf:08:7f:8b:8f:ae:e6:c3:6b:13:
         7b:bb:80:b6:91:94:e4:16:f6:bc:ec:18:91:88:79:5a:eb:92:
         c8:60:e0:3b:0e:13:b4:7f:90:fd:bf:86:00:a3:4f:57:0f:a4:
         24:31:29:99:ad:b1:47:a7:e0:45:50:fc:c9:f3:81:67:6e:37:
         93:38:0f:a1:e1:90:cb:f8:fe:8a:36:c7:66:4b:d0:94:8e:a1:
         cb:de:46:47:6c:9a:7f:59:b9:af:2f:97:9d:d1:0e:fe:dc:89:
         1c:65:b8:46:61:a5:53:78:51:c3:3e:5e:7b:d2:87:9e:84:d6:
         b1:c5:13:b3:6b:9f:d3:4d:e4:73:b7:30:48:a7:a4:ae:26:1a:
         a8:bd:05:dc:b7:65:7a:ae:cd:ef:3a:80:9f:b5:7a:01:17:d8:
         02:21:87:01:70:3d:c4:61:89:6d:15:2e:8a:fe:5b:61:ab:ed:
         fb:35:01:a0:3b:af:31:74:7c:09:5e:da:89:9a:39:b8:fe:5b:
         59:d9:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:41 2026 by rpki-client