Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File:                     _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier:          Si7gb8OIhC9/xXy+e4TolJCfJ9m+WKuVO6p+cZoaRMs=
Subject key identifier:   60:82:C0:D8:E9:E2:7A:DC:ED:DC:19:C5:C9:06:B7:92:97:C8:A1:09
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer:       /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial:       019E1F10E8261D852F3B0A30ECD10D25B051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number:          18CF
Signing time:             Wed 13 May 2026 02:01:02 +0000
Manifest this update:     Wed 13 May 2026 02:01:02 +0000
Manifest next update:     Thu 14 May 2026 02:01:02 +0000
Files and hashes:         1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=)
                          2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=)
                          3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=)
                          4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=)
                          5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=)
                          6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=)
                          7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=)
                          8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=)
                          9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=)
                          10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: ddsL9CYxd5ezRmjNo6nVy6AXBGM/swf5Ffqd/FIIPto=)
                          11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=)
                          12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:e8:26:1d:85:2f:3b:0a:30:ec:d1:0d:25:b0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
        Validity
            Not Before: May 13 02:01:02 2026 GMT
            Not After : May 14 02:01:02 2026 GMT
        Subject: CN=6082c0d8e9e27adceddc19c5c906b79297c8a109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:0f:33:8b:6e:93:5c:93:3b:52:69:73:1c:
                    c9:67:ca:55:84:fe:f8:43:9f:fa:38:06:0a:c4:c9:
                    d7:06:f2:46:de:60:40:ed:7a:83:73:4a:92:1e:f0:
                    64:07:c0:df:44:13:82:b6:81:9e:aa:f4:28:71:c3:
                    65:09:f8:d4:58:1d:bd:8e:2e:08:69:e3:a2:9b:04:
                    27:91:ed:c3:b8:f0:93:6a:3a:06:11:bd:39:c8:65:
                    48:c6:54:c1:65:ef:63:f4:74:1c:0d:10:fe:40:0a:
                    4f:f0:b2:93:b7:90:45:16:a2:a2:26:32:1f:35:c1:
                    5e:8a:d2:d8:1a:c6:7d:b3:f6:66:3e:93:e8:77:a2:
                    a8:78:17:b1:95:23:67:83:57:cd:68:a3:46:b4:d8:
                    32:fa:56:d9:71:d8:ec:73:10:71:d0:b7:cb:1d:1f:
                    5c:28:81:88:29:73:af:6b:59:fb:4e:c0:4e:06:dc:
                    57:69:23:22:4b:5e:92:bc:48:84:42:69:2f:cd:ce:
                    ba:19:8a:ba:a3:3c:90:47:b3:f7:d7:fd:bf:1d:eb:
                    fc:b3:01:f4:3b:2c:7b:53:de:f2:5d:75:82:68:51:
                    aa:be:93:e5:01:25:26:34:02:cf:ad:74:62:56:c2:
                    21:46:04:26:19:6f:ad:b9:04:ad:56:35:5e:bd:8b:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:C0:D8:E9:E2:7A:DC:ED:DC:19:C5:C9:06:B7:92:97:C8:A1:09
            X509v3 Authority Key Identifier:
                keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:42:23:c4:27:26:24:ff:c8:6f:3d:0d:16:dc:6b:88:6f:6b:
         26:7a:fc:f0:44:56:41:fc:92:07:72:86:8f:22:b2:9f:80:72:
         b8:19:c6:16:c2:40:35:5a:28:ff:e1:a4:ee:43:9b:e6:e7:ff:
         10:39:8a:28:a6:f9:25:dd:0c:af:ec:c1:23:b7:db:55:ca:9d:
         7b:cf:20:8c:3f:aa:41:08:d7:49:35:b3:9e:cc:3f:f8:16:e7:
         12:18:3d:f6:83:a5:2f:a5:a1:ba:db:c0:42:71:c5:04:51:11:
         81:0f:34:1f:06:5c:29:78:56:bc:14:ea:41:fe:e7:12:47:e2:
         52:f9:90:2b:2c:44:1c:9f:97:10:a7:aa:2a:8c:1c:44:f6:d0:
         df:d6:25:65:f3:12:3c:4d:11:51:28:55:3f:f9:a6:8a:d8:7b:
         c4:3b:88:a8:96:c9:b6:5e:32:66:7e:13:a0:90:43:fc:48:f7:
         99:c2:e7:6e:2b:1a:88:1a:88:59:04:e1:1b:47:ed:14:4d:21:
         f2:32:fe:a7:ef:59:39:79:e9:50:7b:1b:19:de:57:74:42:f8:
         58:9b:b6:a1:db:07:d4:b7:0f:d9:e4:13:b2:08:66:ba:57:52:
         f4:25:58:df:cb:36:2c:be:00:ba:36:79:da:3c:13:86:46:01:
         2e:37:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:37 2026 by rpki-client