Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File:                     zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier:          EiMLentyJLkdvggyFVayng28GPn3hCY5SEfWR3f0s4U=
Subject key identifier:   9D:8F:3D:A5:41:4D:F5:D9:83:0D:2F:B8:6C:E6:38:D8:DE:65:19:FC
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer:       /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial:       019E1D90D7B4B79B7865A488D4333417ABBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number:          13BC
Signing time:             Tue 12 May 2026 19:01:32 +0000
Manifest this update:     Tue 12 May 2026 19:01:32 +0000
Manifest next update:     Wed 13 May 2026 19:01:32 +0000
Files and hashes:         1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
                          2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
                          3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: yZ1kdWRuTS9dIVBr5Les8ahq6ixLva1Jz51Hsm1G8E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:d7:b4:b7:9b:78:65:a4:88:d4:33:34:17:ab:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
        Validity
            Not Before: May 12 19:01:32 2026 GMT
            Not After : May 13 19:01:32 2026 GMT
        Subject: CN=9d8f3da5414df5d9830d2fb86ce638d8de6519fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:b9:db:3e:0a:a7:c7:54:8a:a2:fd:d4:11:
                    07:ed:11:d1:e0:3b:a8:4f:fb:c8:34:02:28:7e:c7:
                    f7:64:50:56:e2:95:f8:fe:b9:c4:84:35:fa:8b:69:
                    9c:f7:c0:65:4b:00:56:98:95:4e:7e:cc:20:f3:26:
                    44:0f:c8:d4:4f:c9:07:9e:10:b3:6a:e3:e0:3d:05:
                    3b:7b:b2:65:69:e2:9c:eb:41:85:7f:ae:49:51:3e:
                    40:44:52:27:f1:00:df:be:ae:6d:24:1b:b8:e2:2e:
                    00:ac:2a:77:7d:e2:db:96:b2:20:96:27:1c:c5:e7:
                    7e:be:47:28:24:11:f8:04:90:f4:91:b4:13:f5:a0:
                    c4:f1:e0:85:0f:15:90:57:da:db:41:25:c8:11:22:
                    d7:bb:02:65:67:93:6d:01:d5:39:e7:a0:bd:94:a6:
                    b6:a5:9e:f0:e5:15:f4:8d:c8:5b:8d:fd:93:81:99:
                    a6:4c:57:57:8a:69:d2:7d:59:a9:a2:67:91:36:d2:
                    63:b8:86:00:f9:03:8b:d6:99:4b:e7:95:34:fa:76:
                    d8:8e:6f:77:df:45:12:b7:46:50:40:6f:a0:24:67:
                    41:44:25:46:b9:ad:35:eb:3c:98:7c:7f:d8:db:a7:
                    fe:23:5b:e7:7e:ac:72:1e:82:d0:2c:f7:c2:42:29:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:3D:A5:41:4D:F5:D9:83:0D:2F:B8:6C:E6:38:D8:DE:65:19:FC
            X509v3 Authority Key Identifier:
                keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:37:91:df:e6:fe:67:38:7c:da:ef:62:23:23:35:ee:02:5b:
         91:39:53:ba:cd:96:3a:22:50:79:04:3f:81:09:fd:71:83:fc:
         1e:96:25:2a:c8:69:5c:2a:8d:45:7f:7a:d5:c5:26:81:66:24:
         ee:4a:39:30:08:8b:2b:f2:5a:4a:65:11:73:c7:67:65:a7:39:
         42:ef:20:e1:54:41:f5:c4:f0:7a:25:46:28:3f:1e:e0:ef:36:
         63:0f:22:93:a6:ac:1c:60:44:4b:d7:d1:b6:80:d5:b8:36:95:
         df:d7:7c:54:46:ef:f8:2f:9b:ee:c3:f8:32:3f:65:62:4d:3a:
         63:d3:5d:68:02:f6:be:ae:5c:1f:58:a3:49:32:1a:15:4d:39:
         2c:78:30:44:d6:f7:dc:c6:8e:6e:26:27:cb:f6:b4:c8:42:da:
         a0:7b:7e:67:b3:75:ea:e8:05:e7:86:5c:52:df:70:5d:ff:88:
         99:56:ee:23:71:c4:02:9c:25:f3:51:58:87:bd:f9:e5:3a:74:
         af:0e:0b:fa:9e:95:74:2e:b7:cc:ed:c7:ed:af:bd:b2:c9:70:
         bd:39:53:b7:ad:67:1e:64:11:2b:c6:1b:e9:cf:f5:af:db:f2:
         89:eb:71:46:ff:88:87:f5:94:9c:67:c8:0d:86:d0:87:fe:67:
         56:7c:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:28 2026 by rpki-client