Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          zQLbaT9Qv2UDcDtBzjO8UBAVXkMaNsmPWx4/94847OU=
Subject key identifier:   C1:25:54:38:86:40:DA:8A:91:FD:DE:94:E4:1C:ED:6B:96:4F:D2:14
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019E1D90637486A0497651404E054BF5D5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          1918
Signing time:             Tue 12 May 2026 19:01:02 +0000
Manifest this update:     Tue 12 May 2026 19:01:02 +0000
Manifest next update:     Wed 13 May 2026 19:01:02 +0000
Files and hashes:         1: 8OPf-TYppgb-lWxDdXUmvn4lAOc.roa (hash: hCC9pcZlwckfG4uw3UFpwoter9oKt9FivUAlBWxQl7Y=)
                          2: L66cmmlC06Wcdn7XL6i2OjeyJz8.roa (hash: 98r7JlYeRTjaXUzjuxu020n7woB7ZmKJCIQsHxK3ViA=)
                          3: LT0Iyo1R8YEuaI1JHoSd3uYiu4U.roa (hash: doboAOIfjYNyHdw1r6xfrE7hmv8gQ0YwGnxIdc/ApGY=)
                          4: Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa (hash: 5usbDenLcJwn1HnlbKVb9xkpHXYP/L2fciKVWt4yeXw=)
                          5: cOUUKUyq3fFSSy6l5-mjbaxhQhs.roa (hash: KLqb5U6DgNfIS88yDz/06LUw3OWjpinY/pIyqKDYmR4=)
                          6: jEDoIOuzE2brdF7d7iq9hFOFlPY.asa (hash: kX7sndI49J41h5949MxSdq1CeT/ptM/wjBq7+tQD3mw=)
                          7: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: STnyZzvLiN7i8FJ7LHRrOsV9BkOxkYadK7nkfanWEmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:63:74:86:a0:49:76:51:40:4e:05:4b:f5:d5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: May 12 19:01:02 2026 GMT
            Not After : May 13 19:01:02 2026 GMT
        Subject: CN=c12554388640da8a91fdde94e41ced6b964fd214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:ce:a4:83:32:e6:56:56:6d:8f:e0:40:37:
                    46:46:91:b7:2b:15:f6:88:15:0d:08:63:31:7f:bc:
                    79:2f:0f:95:48:90:f1:db:a0:1a:f2:f9:9f:dc:40:
                    8a:14:6c:da:72:a4:9e:e5:c3:91:6c:f3:b6:2f:8c:
                    56:ba:86:3b:50:a3:fa:12:71:f2:fe:5a:95:72:ff:
                    18:2b:bb:10:2c:f0:09:78:1e:fa:3a:7c:7d:10:3c:
                    e6:02:be:bf:4a:fd:ea:aa:2a:df:21:ac:9a:0b:93:
                    68:fa:51:94:5a:ca:87:87:6a:d7:d8:d1:de:61:ee:
                    b4:01:fa:24:9d:63:95:16:52:c0:5d:a3:df:87:11:
                    69:1e:40:a1:27:35:4f:3c:12:b1:28:56:8e:8c:40:
                    96:b4:cd:af:df:19:ed:96:cd:da:7a:5a:cc:f9:d4:
                    23:71:a2:da:55:04:f6:1f:fd:52:f0:75:7a:53:b8:
                    26:87:9e:30:d7:5b:da:e4:3f:88:de:52:01:a1:d1:
                    a1:b5:46:c3:c5:ab:21:39:c4:29:cb:84:9e:2a:36:
                    5c:73:67:44:3f:a1:a8:b1:47:c9:da:da:6f:49:0d:
                    64:e6:c8:a2:0e:bd:91:91:c0:ba:d6:78:46:d0:f5:
                    bd:1e:3b:c2:04:38:68:2d:23:29:6e:06:d1:22:21:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:54:38:86:40:DA:8A:91:FD:DE:94:E4:1C:ED:6B:96:4F:D2:14
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:35:70:62:9d:d6:1b:02:2f:80:f9:f6:27:6c:b9:f9:15:f5:
         55:86:d3:b7:16:c3:54:29:84:31:9b:fc:0f:d3:12:55:26:96:
         d7:28:8d:91:80:53:38:22:a4:14:98:bb:01:ec:8e:32:43:b6:
         4a:74:0d:53:fe:04:3b:91:cc:ef:3d:a7:bc:62:a8:bc:34:15:
         e8:75:18:2a:16:95:09:9a:ce:59:cf:63:ec:aa:6a:3c:e4:2e:
         e9:be:ac:4a:6f:2f:58:5c:ec:f6:aa:b5:92:e3:23:b2:bb:17:
         bd:a1:5e:ef:c7:2f:39:64:75:0c:6c:b7:91:03:ed:91:85:fe:
         22:b9:07:1f:b3:1f:1a:f0:75:41:62:8e:98:9d:bf:24:3e:27:
         44:9b:ea:6e:ab:da:d3:bb:7f:b5:b4:ee:c5:74:9b:0c:00:95:
         83:cc:8f:1e:bc:a7:34:8b:22:7d:31:6e:41:e9:84:1d:0e:e5:
         8d:47:5a:29:37:73:85:91:b0:19:9b:c0:50:8d:9a:89:ac:77:
         9d:f9:64:38:40:57:ef:ca:c2:e6:68:22:aa:65:3f:9c:54:87:
         d7:12:40:84:94:05:8e:74:1f:db:13:68:d8:94:22:35:df:cf:
         e5:68:a4:2d:36:ad:5e:1c:43:42:5f:95:27:3e:b8:64:ee:f0:
         57:fe:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:20 2026 by rpki-client