Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          zIslsctLou5jkUshOX9NEDS/Hlrvuki//X3BlG6JuxM=
Subject key identifier:   2B:AD:D7:4D:19:0A:E8:C4:FC:26:33:99:0D:6B:0C:51:DF:83:A4:A9
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       019E1E3503E3A31B3B7334CD69BD88731B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          190D
Signing time:             Tue 12 May 2026 22:00:51 +0000
Manifest this update:     Tue 12 May 2026 22:00:51 +0000
Manifest next update:     Wed 13 May 2026 22:00:51 +0000
Files and hashes:         1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: TcAZ7bzdr0SzSScsfYpk6oWwnTimf/aVIrl/mOifg00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:03:e3:a3:1b:3b:73:34:cd:69:bd:88:73:1b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: May 12 22:00:51 2026 GMT
            Not After : May 13 22:00:51 2026 GMT
        Subject: CN=2badd74d190ae8c4fc2633990d6b0c51df83a4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:65:b5:88:b6:74:15:99:02:60:19:e6:a5:
                    a4:47:81:12:19:fd:bd:bc:8b:86:ad:1e:1b:cb:5e:
                    88:84:bf:4a:a9:45:5e:c5:b5:93:8a:32:19:6f:07:
                    f2:7a:61:94:68:50:27:69:ba:a0:74:1c:04:2d:74:
                    ee:07:89:27:d9:90:c5:16:c9:ab:da:a1:8a:18:d4:
                    04:e6:e1:79:4c:d7:cc:e2:e2:4b:ea:fb:d0:6c:48:
                    60:cc:3a:60:c3:53:5d:79:de:1a:f3:88:d9:5f:fc:
                    42:9b:86:d8:4a:73:7a:ae:76:80:31:43:17:32:8e:
                    e2:dd:14:30:49:ff:dd:c7:84:cd:c1:61:84:43:13:
                    31:dc:de:66:6b:05:6a:3e:79:18:c6:8d:6d:4e:99:
                    13:3f:c5:41:0d:db:12:9b:95:52:13:2b:82:d3:82:
                    fb:8a:01:ac:7a:88:f0:80:0b:4f:fb:a1:13:24:21:
                    db:ae:2a:6b:e0:6f:47:3c:66:52:35:1b:5c:33:f6:
                    96:be:37:a2:60:63:61:f6:44:a6:0d:a3:c3:50:b4:
                    1d:8c:f0:9c:f3:19:a9:2d:74:62:e1:c2:ea:4b:e1:
                    2d:b4:e8:2a:97:ce:0d:3c:21:f8:27:aa:62:cb:3f:
                    00:b1:56:d3:ee:da:c3:9f:05:01:fc:2b:4b:8a:2c:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:D7:4D:19:0A:E8:C4:FC:26:33:99:0D:6B:0C:51:DF:83:A4:A9
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:b3:59:b3:00:1e:02:06:91:30:6c:d3:5a:a6:b3:8e:fb:
         d4:d7:9f:65:7a:b1:20:16:59:a9:58:49:69:c1:8b:d5:e0:1c:
         a0:c4:c6:fa:13:ff:32:8a:a7:b5:03:2e:83:91:c5:20:65:a1:
         56:6a:a6:f1:f5:57:cd:1b:20:d9:5d:98:7c:c7:7a:a9:c5:9c:
         ae:f2:46:a2:c7:fe:d8:63:48:ef:7c:82:09:3a:ea:06:31:22:
         35:da:a2:81:8d:a5:63:d0:22:ad:0e:dc:1d:fa:f3:72:22:88:
         34:24:86:ee:2b:52:65:68:d1:0d:a8:cb:10:c4:08:e4:47:2a:
         18:df:0e:47:9a:67:70:f7:9d:b6:c6:ed:41:94:e2:02:0b:a7:
         0b:bb:c1:d6:3f:bc:b5:97:6a:4a:e7:6a:72:53:fe:9e:66:34:
         f2:bd:f2:15:c4:0e:5c:7d:4f:b5:c1:ab:27:4f:1b:7b:41:cd:
         28:ec:d5:75:37:00:34:17:e9:e5:41:de:94:6a:16:aa:0e:9d:
         1e:d5:da:83:ca:31:6e:7f:e7:cd:01:80:97:7c:be:46:e0:06:
         83:b3:6e:69:d0:0a:2e:f7:a6:5d:b2:89:5d:1b:4b:95:8b:fc:
         34:aa:be:b5:4b:58:3d:be:84:20:17:91:6a:5c:71:50:6c:5a:
         0d:ff:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:26 2026 by rpki-client