Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File:                     ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier:          RBy7oQjEhqpJnsE/LfBvKkf1Ex7eHuAUhl6QQVSgfrk=
Subject key identifier:   42:42:79:6C:8A:48:3B:76:D3:51:4F:08:A0:13:34:05:D4:D7:5F:10
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer:       /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial:       019E2023ADB0FCE0C5552C0DF972592FABC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 07:01:09 +0000
Manifest this update:     Wed 13 May 2026 07:01:09 +0000
Manifest next update:     Thu 14 May 2026 07:01:09 +0000
Files and hashes:         1: RsnrJKwmL8cQaNh398zcQEeUvVY.roa (hash: LNyFYXYZiYI7HKKoks5EZWi0DK28Q+wkZrR9sNh6HOA=)
                          2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: +hRtQj1ctsskWoiew0Vk1NIPvrCnp0hm/osywPJhjuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:ad:b0:fc:e0:c5:55:2c:0d:f9:72:59:2f:ab:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
        Validity
            Not Before: May 13 07:01:09 2026 GMT
            Not After : May 14 07:01:09 2026 GMT
        Subject: CN=4242796c8a483b76d3514f08a0133405d4d75f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:13:0c:40:40:3c:cd:93:69:a5:b0:56:f4:
                    d7:28:b8:e3:64:3a:17:a8:3a:bc:b4:9a:d8:96:f3:
                    2c:36:0f:68:85:8f:98:14:2d:bd:ff:54:6a:1e:62:
                    4e:8e:40:8d:cc:47:a0:fd:f5:da:ca:71:fa:c2:86:
                    73:83:17:58:23:f8:c3:79:c7:31:70:90:12:9b:2c:
                    9b:53:59:c0:04:80:7b:b0:61:6e:23:87:ab:ab:47:
                    52:7e:8e:92:cc:19:2c:64:a9:34:e6:0a:89:13:cc:
                    a6:7b:4e:fa:a9:83:ed:7e:06:21:f6:3c:3d:8d:5f:
                    a3:1a:fe:6e:4c:8a:ec:9d:40:60:38:8d:14:b6:fc:
                    e3:6d:05:7f:5b:bf:23:85:37:3d:8a:da:be:ca:49:
                    64:de:62:b6:12:47:05:c6:73:1f:a4:c0:44:9d:1a:
                    63:04:fd:41:f7:31:40:0d:fc:42:96:a0:38:1f:31:
                    bf:aa:bb:7f:72:34:70:60:99:74:be:64:4f:28:aa:
                    f5:5e:30:78:78:ca:b8:16:b2:a6:ec:61:e5:73:fe:
                    c4:10:a0:2d:66:12:21:86:c3:08:ad:87:0f:30:94:
                    24:3d:ee:06:28:94:ff:70:99:6f:b9:81:ba:e3:fb:
                    ea:db:7a:86:88:ca:1e:f4:fd:3a:c8:56:14:f5:d0:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:42:79:6C:8A:48:3B:76:D3:51:4F:08:A0:13:34:05:D4:D7:5F:10
            X509v3 Authority Key Identifier:
                keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:63:58:0e:38:ba:da:d3:bc:0c:a5:a4:66:fd:73:60:c7:82:
         6b:83:d3:fe:78:72:cb:2c:3c:48:ec:67:45:66:a3:6b:f1:7c:
         8d:b2:d5:7c:09:9b:6c:59:b8:ab:5f:bd:e8:23:a6:ba:3a:34:
         b4:1c:40:08:6d:94:9c:8e:73:2f:cf:83:e2:d5:4b:0a:07:2d:
         be:8b:e7:60:d1:1d:73:8a:ac:da:a0:01:b2:04:ce:f0:ab:8f:
         ac:bc:39:e3:39:2f:df:2e:39:e1:c8:49:68:8f:99:01:97:cc:
         fb:e1:4e:73:de:70:b2:d2:26:4e:74:e8:06:bd:e1:d6:7d:3b:
         60:c1:f9:94:19:af:84:69:98:c4:69:8e:79:ce:ac:50:ee:d6:
         43:93:b8:15:7d:7c:a8:bb:88:4e:aa:05:61:0f:69:a1:09:60:
         df:0a:27:ae:df:1c:27:c0:46:f2:df:92:12:18:52:89:b8:95:
         e5:84:87:59:3e:d4:1a:ee:e8:99:55:98:51:60:53:d5:d6:77:
         05:8d:4f:17:e8:0d:ab:82:1a:1f:15:18:7e:ad:d2:86:93:30:
         26:fd:2d:44:0c:7c:0c:36:32:13:cb:76:b0:ae:d6:4b:33:29:
         65:c8:21:62:2f:1e:5f:a5:7a:d9:0a:dc:49:97:42:aa:20:cd:
         21:7d:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:34 2026 by rpki-client