Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          wT/TfyKOUWR82ONuEoJPCe/sEb7DT63ZbF8qB+wjg10=
Subject key identifier:   12:D1:42:98:DB:56:A7:F9:40:F0:14:07:89:D0:12:0F:9C:04:5C:38
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019E1D90D77DC7F5B2EED97A20743A65A763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          0740
Signing time:             Tue 12 May 2026 19:01:32 +0000
Manifest this update:     Tue 12 May 2026 19:01:32 +0000
Manifest next update:     Wed 13 May 2026 19:01:32 +0000
Files and hashes:         1: GOVhumxEPoL4neQZjjckJeN-KNI.roa (hash: z0Kl7cRQ4EqgIEyAr3hQ9onG9NvsLkz7qIrC+ywOwnQ=)
                          2: JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa (hash: mtH7HEjcUoSWBPqGTrN+mDrgbsMUT6MnlsAyD0vzcjQ=)
                          3: MvgVDAqPSE3okj5m3PcFfzXBk1w.roa (hash: WTJgxLOGGaH3LR8ATwMwf+dORKDlRpVth28vAu1Woxg=)
                          4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: AczrycNmeqgFXUcHBl43yulFCP5YkAIux6tT2eoVEwM=)
                          5: m5nd6kFiv9cEJ3YGISzOiJTcIuY.roa (hash: l/6MeKI5nL12kgOCDxiIjShRIf4nZLpNk/deaFd6nrY=)
                          6: qtFDXfqFUBLJDQBHvKu-Ftisy3I.roa (hash: qvGoNoCRQntmYEg+0c4U7acM5ZfQZI3DoYIhNNGSNp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:d7:7d:c7:f5:b2:ee:d9:7a:20:74:3a:65:a7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: May 12 19:01:32 2026 GMT
            Not After : May 13 19:01:32 2026 GMT
        Subject: CN=12d14298db56a7f940f0140789d0120f9c045c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:25:56:42:48:2c:08:54:24:2b:3c:1c:85:65:
                    7f:bc:ea:b1:91:05:df:36:0b:05:8d:d8:90:82:ff:
                    4c:14:ad:f5:fb:02:d6:1c:c4:3a:dd:a8:f3:43:6e:
                    71:ef:df:d5:85:5a:60:a8:34:57:cd:2f:3d:7d:6b:
                    6c:f5:91:9f:49:13:8c:33:2c:5f:3d:31:27:22:b4:
                    93:3e:81:03:81:98:b5:ff:89:ed:3c:92:ab:03:ca:
                    ac:f4:85:b9:7e:1d:63:eb:c1:9f:05:74:fb:6f:5e:
                    bf:48:fa:20:46:b2:39:2b:c7:4a:a4:c0:84:c1:18:
                    a6:6f:07:a9:8a:a6:0e:77:7b:22:e3:25:23:09:97:
                    7d:85:c6:a8:1a:15:7d:0c:d5:31:e9:b3:f1:9a:92:
                    e7:57:c8:22:e6:a9:fd:38:90:a1:09:cb:3a:87:6b:
                    f7:04:d9:20:ef:dc:44:35:7f:e5:9a:be:9f:e3:94:
                    76:ee:a0:47:84:66:18:5d:c4:ea:3d:fd:e3:71:44:
                    27:2c:fa:a5:ca:c7:da:20:37:cd:bc:5e:65:d5:22:
                    41:09:b1:b8:f3:c3:e8:7a:f8:30:aa:91:ce:fa:32:
                    69:72:7a:3b:c1:61:f3:e0:2f:18:21:ad:9f:f8:e6:
                    3a:3a:64:88:b6:07:7a:a6:e2:23:31:8c:f6:89:a6:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:42:98:DB:56:A7:F9:40:F0:14:07:89:D0:12:0F:9C:04:5C:38
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:52:bc:cb:39:b6:0f:e2:80:c2:dd:99:f5:fd:30:8c:8d:e8:
         15:a1:bd:c9:74:5b:6d:46:50:43:8d:d5:87:e9:f4:c3:fe:a9:
         3c:74:fe:ad:b1:a4:3e:f7:b6:ce:18:e5:4d:b6:77:29:f0:2e:
         b1:22:14:c2:ee:ec:2e:7a:2f:da:38:92:ea:65:bd:82:96:e7:
         a8:60:7c:ce:dd:8b:4d:d1:57:13:33:2f:be:9b:9f:e7:36:83:
         c4:91:2b:f7:e3:80:2f:98:16:d5:cb:14:33:14:fa:31:90:7a:
         ab:fb:3a:a8:8b:c3:79:1d:44:6a:81:97:31:91:3a:25:a5:f4:
         2e:31:ae:68:62:e0:80:8e:28:03:7e:ab:d8:67:46:06:62:dd:
         a4:f9:26:8b:a2:9a:c0:bc:5d:a1:41:1a:24:a0:00:b6:99:c4:
         3d:0a:3e:b8:bc:4c:4b:d0:d1:91:ed:ee:df:53:f4:8c:09:1e:
         7b:b3:b0:7c:e3:fc:cb:cd:3f:11:14:e0:bd:c8:c7:51:ee:ae:
         e9:29:fb:05:56:92:84:3e:89:09:0e:3f:cd:0c:de:8f:9c:46:
         98:02:84:3f:eb:8a:17:18:82:61:b8:eb:2b:3e:a2:3e:1f:d2:
         3d:e6:72:44:4e:e2:8d:e1:57:68:d8:95:41:6c:ca:91:d8:88:
         a9:60:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:11 2026 by rpki-client