Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File:                     z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier:          Ze7dncaQHKqXhW/3fIUsmw8UOZRKeKjbHNm/szjQlNY=
Subject key identifier:   46:A8:9A:85:8D:9C:E0:EC:53:36:68:5C:14:C6:17:C7:69:54:61:D0
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer:       /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial:       019E1EDA512F0581D2A74B8B44A2488A9B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number:          117E
Signing time:             Wed 13 May 2026 01:01:24 +0000
Manifest this update:     Wed 13 May 2026 01:01:24 +0000
Manifest next update:     Thu 14 May 2026 01:01:24 +0000
Files and hashes:         1: m0gmPNIgnPQiOcpSUIvNpyX690M.roa (hash: CpJvjfUdN7rFRz32OhTizxDvTNJv8yNfGS+CrGfqROI=)
                          2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: bwO2g1IWHGFz1TzGu1JPXyTurlc38Yi4kT1KCzC/b74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:51:2f:05:81:d2:a7:4b:8b:44:a2:48:8a:9b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
        Validity
            Not Before: May 13 01:01:24 2026 GMT
            Not After : May 14 01:01:24 2026 GMT
        Subject: CN=46a89a858d9ce0ec5336685c14c617c7695461d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:5b:c0:fa:87:97:fa:63:9a:1d:f8:eb:96:
                    72:6d:8d:76:b4:75:77:ab:6a:8f:db:fd:f6:3b:a3:
                    e7:58:ca:e8:7f:91:57:90:b9:1f:52:ab:a4:63:f0:
                    fa:aa:13:c5:ce:1c:0f:cc:01:6e:26:62:f8:bb:70:
                    c1:06:1e:f3:65:b7:60:d0:0c:86:25:06:36:aa:36:
                    2e:43:23:83:e4:02:0b:d7:0e:4b:84:a0:cc:d9:b4:
                    07:f1:25:ca:bd:2b:e9:d5:4d:03:fd:db:a0:81:8e:
                    6a:b8:08:5b:1f:56:e9:d1:d4:f5:3c:a1:aa:ce:f7:
                    af:a4:12:17:81:34:e8:57:0b:f0:b8:74:2b:81:71:
                    c2:53:1a:5c:49:20:55:2f:2c:0d:d0:2d:f4:10:95:
                    0c:42:9a:0e:3b:e3:41:ec:29:35:44:10:aa:a0:06:
                    e5:59:1e:03:f9:3b:c8:a3:da:aa:64:d7:b5:12:3a:
                    fe:70:10:e5:7e:ea:a2:ba:ab:91:42:04:f0:b0:d7:
                    f3:c9:5a:71:80:97:7f:27:ba:fb:a2:3e:fb:0c:75:
                    74:3e:18:cd:6f:14:99:4e:ad:64:34:0e:ba:3b:d2:
                    f4:a1:06:48:c6:71:a3:62:c1:95:4b:f5:6b:7c:45:
                    0d:e7:b0:b3:fb:65:e4:b7:2e:5d:f3:bc:b5:91:01:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:9A:85:8D:9C:E0:EC:53:36:68:5C:14:C6:17:C7:69:54:61:D0
            X509v3 Authority Key Identifier:
                keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:e1:c3:fe:32:16:cb:7d:70:48:7f:dc:69:f3:68:2a:9a:
         c5:ec:dd:fa:59:96:68:e0:77:e5:9c:a1:57:e3:e1:2a:d9:1e:
         27:5d:cf:f4:79:70:70:d9:56:25:5d:bd:73:34:42:75:5b:ef:
         61:9e:9e:c0:53:ac:31:8c:a1:1d:7f:42:43:0b:d6:4d:8b:24:
         d6:72:a5:9c:d7:be:48:4d:0e:ff:23:e2:96:47:77:a9:77:a3:
         1a:3d:37:16:a4:94:61:da:c6:48:51:28:db:90:f0:d2:ba:15:
         c5:55:ae:ef:a8:ff:6e:c2:54:8c:ee:eb:ea:db:7f:d6:a6:2d:
         37:17:e7:cb:05:5a:fd:2c:bd:ff:e2:58:00:6a:a0:ac:54:cb:
         04:7b:82:4f:48:26:77:45:e0:7e:f4:e7:87:e0:a4:e5:be:d0:
         06:a2:a5:59:c7:dc:64:9b:3c:b3:8c:71:09:91:4b:28:22:69:
         77:15:30:65:d4:d2:73:5e:ae:93:7c:06:f6:8d:0e:54:fa:ee:
         1f:46:09:27:7b:e3:8b:fb:4c:4a:73:b3:19:ec:85:39:63:0b:
         be:e2:c1:2b:0f:3f:c0:56:8e:d9:bd:c2:00:9a:7c:8e:41:5a:
         1f:f9:8d:66:68:66:b8:e0:b9:29:dc:99:53:af:99:f3:44:f2:
         c1:ce:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:59 2026 by rpki-client