Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          MxmkEkJ/z6EHX5joOA1dYAIgSt9k3dlIM1MTg0zwHrs=
Subject key identifier:   A7:A1:38:C8:99:C4:04:22:DD:F0:91:B2:2E:02:84:77:E9:97:7D:C8
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       019E1F1110317FFE6D78D061D8EAD99C702F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:12 +0000
Manifest this update:     Wed 13 May 2026 02:01:12 +0000
Manifest next update:     Thu 14 May 2026 02:01:12 +0000
Files and hashes:         1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: vrM+F0C+XhdCgmKrkUyfs+ZpiCnUXE78P+Lk9hdHYSY=)
                          2: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (hash: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE=)
                          3: y1-SGhZC7LSQ3xAFEOGz9QyG038.roa (hash: G+7mp0FPcfU99vlwCxTLgDF4pbzcHad2tCEvXbWZJ1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:10:31:7f:fe:6d:78:d0:61:d8:ea:d9:9c:70:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: May 13 02:01:12 2026 GMT
            Not After : May 14 02:01:12 2026 GMT
        Subject: CN=a7a138c899c40422ddf091b22e028477e9977dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:c8:1f:73:83:70:4c:a6:b0:f4:9b:f3:27:
                    13:8b:99:5f:2e:eb:08:cf:24:7d:84:79:e7:e8:40:
                    17:ea:a9:0f:ab:31:5b:85:0c:43:50:cc:19:18:dc:
                    c4:27:da:f2:df:5b:1e:b0:d2:5d:b6:58:53:c4:b3:
                    23:26:02:b8:e5:e0:24:fc:44:94:07:70:92:1a:87:
                    ae:79:e7:10:fa:54:16:1b:5e:e0:4d:76:eb:f6:f7:
                    aa:a8:0c:34:ed:90:be:6f:44:80:16:a6:d1:c1:13:
                    db:34:a4:cd:b7:9f:ea:b4:79:4f:ad:2d:d7:17:1c:
                    f5:5a:ea:98:92:53:5c:0f:5c:6a:be:c5:50:a7:01:
                    ac:fd:26:c3:50:e6:d4:14:ea:43:1b:19:de:d5:9a:
                    f8:9b:d8:6d:ec:2f:10:bf:0e:c1:df:03:94:17:bd:
                    e3:53:5e:94:09:c5:e9:ff:9d:39:73:a3:d3:a4:23:
                    dd:be:ac:60:e0:4c:4e:cd:92:99:58:c7:e2:cb:31:
                    7d:98:13:fe:76:b6:b9:f5:93:66:9a:3b:99:44:a8:
                    6a:6b:a5:f6:d8:e4:79:66:11:a7:3d:dc:e6:e5:41:
                    8f:fc:97:09:70:e8:99:34:b3:10:70:4d:bb:21:02:
                    5a:de:02:ad:f0:2c:d7:04:79:f3:7c:77:25:53:af:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:38:C8:99:C4:04:22:DD:F0:91:B2:2E:02:84:77:E9:97:7D:C8
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:65:24:b6:1d:3a:f8:98:49:0f:b4:f7:da:8f:c7:01:72:eb:
         ce:92:6c:2a:e2:42:74:4c:cc:58:ee:cc:6f:85:9f:6b:61:28:
         b9:f8:63:26:15:ca:b3:73:b5:fa:cc:b7:ce:86:45:85:0c:9e:
         c0:48:a9:a7:67:2e:0a:3d:51:36:2d:8b:8b:35:8d:40:3f:8c:
         84:21:23:96:e7:df:8a:10:7f:76:95:23:96:4e:25:f6:86:f3:
         cb:81:62:97:ef:3b:bb:ca:bb:c5:fb:33:63:9d:ca:c3:5c:39:
         91:ba:82:df:c5:2b:2f:ca:ca:10:ff:ee:45:7e:74:d5:a6:76:
         74:f7:3d:eb:1b:5b:22:2d:63:38:e0:4a:0a:8e:1c:d4:ab:88:
         c1:fb:3d:05:81:e7:c8:2f:99:c4:a9:77:d7:9b:ea:15:be:d7:
         1f:b3:6f:cb:c9:d1:2f:7c:87:90:f0:67:e9:80:b1:fa:17:6c:
         15:94:93:52:94:18:8d:fe:6d:ca:4a:17:c2:b1:2e:45:a7:53:
         16:f3:6e:dc:dd:d5:0e:5d:a8:64:a5:8e:6c:e3:4e:19:ee:16:
         34:f5:d8:0b:ea:5a:68:47:40:12:b8:7e:29:f3:95:e2:63:47:
         9e:53:e4:11:14:74:17:74:58:f7:24:5c:cc:77:0e:f2:c7:fb:
         3f:7f:f0:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fERAxf/5teNBh2OrZnHAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNhMWY5MDUxOGQ0MjUzZjMyNTk0N2Q3ZjMyZGI3ODcy
MTY0N2MwHhcNMjYwNTEzMDIwMTEyWhcNMjYwNTE0MDIwMTEyWjAzMTEwLwYDVQQD
EyhhN2ExMzhjODk5YzQwNDIyZGRmMDkxYjIyZTAyODQ3N2U5OTc3ZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXzIH3ODcEymsPSb8ycTi5lfLusI
zyR9hHnn6EAX6qkPqzFbhQxDUMwZGNzEJ9ry31sesNJdtlhTxLMjJgK45eAk/ESU
B3CSGoeueecQ+lQWG17gTXbr9veqqAw07ZC+b0SAFqbRwRPbNKTNt5/qtHlPrS3X
Fxz1WuqYklNcD1xqvsVQpwGs/SbDUObUFOpDGxne1Zr4m9ht7C8Qvw7B3wOUF73j
U16UCcXp/505c6PTpCPdvqxg4ExOzZKZWMfiyzF9mBP+dra59ZNmmjuZRKhqa6X2
2OR5ZhGnPdzm5UGP/JcJcOiZNLMQcE27IQJa3gKt8CzXBHnzfHclU6+yOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKehOMiZxAQi3fCRsi4ChHfpl33IMB8GA1UdIwQY
MBaAFGRMofkFGNQlPzJZR9fzLbeHIWR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQt
YjkwZDk3NGU1ZmI1LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQtYjkwZDk3NGU1ZmI1
LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmUkth06
+JhJD7T32o/HAXLrzpJsKuJCdEzMWO7Mb4Wfa2EoufhjJhXKs3O1+sy3zoZFhQye
wEipp2cuCj1RNi2LizWNQD+MhCEjluffihB/dpUjlk4l9obzy4Fil+87u8q7xfsz
Y53Kw1w5kbqC38UrL8rKEP/uRX501aZ2dPc96xtbIi1jOOBKCo4c1KuIwfs9BYHn
yC+ZxKl315vqFb7XH7Nvy8nRL3yHkPBn6YCx+hdsFZSTUpQYjf5tykoXwrEuRadT
FvNu3N3VDl2oZKWObONOGe4WNPXYC+paaEdAErh+KfOV4mNHnlPkERR0F3RY9yRc
zHcO8sf7P3/w9w==
-----END CERTIFICATE-----
Generated at Wed May 13 09:41:53 2026 by rpki-client