Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          1SBpFdtDPAsuBCeZrBENqXwXqkk9u0i6OJkbloK5+P0=
Subject key identifier:   71:10:97:C2:39:53:E7:87:8B:AB:D4:2B:F2:18:2D:65:17:B0:A7:0C
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       019E2091201320494048DF87CD75BCACD45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          088A
Signing time:             Wed 13 May 2026 09:00:42 +0000
Manifest this update:     Wed 13 May 2026 09:00:42 +0000
Manifest next update:     Thu 14 May 2026 09:00:42 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: BnAiYBif52N+hrRlaTYOm9yv/Iv1oMLNlCIzvTNOIFA=)
                          2: io0GvTpo_VyMUyPyaPwaY5qhYQs.roa (hash: o71eBkqnQim23+RZGUgawhsMcbHLdUbBzsu6ep4SKt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:20:13:20:49:40:48:df:87:cd:75:bc:ac:d4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: May 13 09:00:42 2026 GMT
            Not After : May 14 09:00:42 2026 GMT
        Subject: CN=711097c23953e7878babd42bf2182d6517b0a70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:31:9e:96:c0:c1:be:98:49:b1:f8:c5:a5:
                    70:b1:1b:b4:1c:c3:c9:cd:34:21:f9:40:55:86:e2:
                    f8:ae:6a:82:e7:80:e4:dc:6f:97:de:26:54:a6:96:
                    26:1a:f2:9d:9e:2e:3e:a3:35:6a:88:d7:40:23:0c:
                    a1:8f:d4:69:e1:61:f7:a2:28:53:24:2b:96:47:39:
                    53:44:a3:ce:64:a4:1b:57:ff:0a:a4:bb:70:37:e1:
                    96:ef:69:7e:41:f6:59:bb:ec:f0:03:a5:6b:9f:21:
                    55:84:71:a7:c0:97:b9:7e:e6:95:04:6f:c4:00:b7:
                    93:61:67:45:ec:af:8c:8a:c2:76:01:06:92:bc:69:
                    8d:61:c3:68:bb:05:ab:b3:de:50:53:20:e5:c3:41:
                    c2:92:7e:4a:37:0b:40:6f:e9:16:6e:22:1a:17:37:
                    5c:08:67:50:a7:24:45:de:33:12:a8:ca:00:6b:79:
                    ac:77:0b:20:60:ba:11:50:0c:9c:c8:fa:75:93:c7:
                    be:5a:a1:61:38:8e:ba:17:1c:28:32:88:f7:1b:06:
                    b6:81:4a:32:8d:9d:d2:b0:14:26:05:db:7a:43:10:
                    e7:be:d4:7f:7c:8a:76:19:38:7a:7b:04:43:2b:fb:
                    03:ed:05:fd:b1:e9:01:c6:c3:c4:a9:8c:d2:21:a5:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:10:97:C2:39:53:E7:87:8B:AB:D4:2B:F2:18:2D:65:17:B0:A7:0C
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:00:3c:b5:84:cb:2c:30:f2:62:f7:5d:7e:78:b6:41:0f:
         55:dc:15:a0:9a:de:45:5b:e9:59:ca:64:5d:1a:61:cc:89:fe:
         04:51:1c:a8:9f:23:29:38:7c:49:6a:3f:12:93:66:d8:f4:96:
         9f:3b:4a:24:c3:d3:8c:8b:f6:62:4d:10:e6:79:6e:7b:e9:89:
         46:b2:b3:1b:85:bf:a1:8f:20:e8:95:44:2e:f6:39:25:07:a4:
         94:18:28:ed:7a:05:ba:19:e9:02:a6:94:90:ef:de:e5:45:c1:
         1b:59:c1:3c:d5:8c:ff:e9:bc:82:cd:fb:0b:0e:07:b0:36:20:
         07:99:29:08:c4:45:a0:3a:b3:89:ec:93:cf:3f:77:b9:75:c2:
         59:dd:9b:53:24:ff:30:87:90:1a:f5:bb:c7:b7:28:5b:d2:55:
         bd:51:15:ce:0f:c1:4f:84:54:aa:68:cc:a5:ff:58:cc:7e:73:
         12:36:a0:3b:43:a4:25:da:0b:d2:2a:78:ad:c3:2d:3e:5b:d9:
         fa:f8:39:6c:08:1f:67:cc:a2:3b:1a:c4:5c:b9:8e:53:f0:33:
         ec:44:4a:9d:f3:70:a9:71:f6:44:7b:5c:79:5f:f4:a6:a8:cb:
         50:56:f9:03:f0:f5:3d:9d:fe:92:58:87:6e:82:76:72:85:f2:
         9a:ea:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:08 2026 by rpki-client