Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          TPe8c4gz2v+kzxo90WdeibHOMsR5qOWk1x0+mv2gd0o=
Subject key identifier:   78:E8:72:4A:F4:57:6B:D1:03:28:0C:F7:1A:FF:79:14:A5:56:C2:95
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019E1F4780D1223A60B14876C0C80C9544D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 03:00:40 +0000
Manifest this update:     Wed 13 May 2026 03:00:40 +0000
Manifest next update:     Thu 14 May 2026 03:00:40 +0000
Files and hashes:         1: 4io-REhzFRxPhNR2ODLWtq5-pVg.roa (hash: wvYJq+OJ0yBLuz2nx1cnZCl0Nf5x5+pis6cfSb4TkHk=)
                          2: arrkUMPGlGp12fBDJz-y-TlydqE.roa (hash: FzEjkq/IJVG3rsaQp/9UZuy/iTz0QoR1J2fAeimur2Q=)
                          3: rDrbyqGHpXISP5iG3Y1GTyKdM24.roa (hash: IEFZML7lOlLhBvi4soPybXTGWqMozr/vczumNvS04HI=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: kybcWSgBCTsBYDhWoeOZjlaGSVgt/jLV8by4MtBZ0Yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:80:d1:22:3a:60:b1:48:76:c0:c8:0c:95:44:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: May 13 03:00:40 2026 GMT
            Not After : May 14 03:00:40 2026 GMT
        Subject: CN=78e8724af4576bd103280cf71aff7914a556c295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:94:0f:af:54:97:c6:e1:b3:10:e5:fc:d2:
                    22:3d:24:47:a4:73:45:f7:4c:ab:29:f7:e7:49:af:
                    a2:7e:6b:70:b9:98:aa:6d:3d:2b:4f:1e:eb:d7:96:
                    4d:87:56:f0:3c:39:96:13:41:11:5d:ee:9c:81:d5:
                    e1:67:83:9f:02:bf:50:cf:54:6e:f5:22:5e:a2:82:
                    f1:f6:43:ee:93:e4:17:49:0f:00:14:80:4c:0a:05:
                    3e:32:73:6c:ff:db:cb:83:57:47:c1:f6:70:43:dd:
                    fa:60:c4:21:c0:64:a4:2e:1b:f9:80:3a:ba:08:9b:
                    b8:f9:69:ab:b9:1d:9a:ad:40:c0:83:10:ba:95:cc:
                    3e:1e:70:33:6a:14:50:e5:26:68:69:14:71:95:99:
                    0d:95:11:de:c1:0d:35:41:f9:b9:e9:1f:8a:ab:ec:
                    73:40:9e:60:d2:3b:52:80:3a:a9:9e:f1:f7:06:7f:
                    5e:c5:49:a8:ba:f3:bf:d5:3e:7f:80:6a:9b:5e:57:
                    a4:42:84:76:40:26:40:4f:12:89:60:e7:95:85:71:
                    b2:2f:36:1a:e0:a0:a0:84:04:5d:e4:f5:ba:fc:73:
                    f2:e2:53:f9:2b:45:fb:05:6b:ca:a1:83:d8:b5:bf:
                    8b:d2:62:0b:13:ac:7c:15:fc:f6:fb:27:94:83:35:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:72:4A:F4:57:6B:D1:03:28:0C:F7:1A:FF:79:14:A5:56:C2:95
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:bb:26:b8:1b:5e:0d:2b:19:e2:9f:b3:9b:85:36:26:16:23:
         8f:1e:8e:ce:d2:7f:84:0a:f9:cb:79:cc:9c:da:6a:6e:0b:d5:
         1c:6f:ac:42:cb:4d:75:a6:ad:77:9a:8b:9a:02:55:1a:5a:86:
         c3:31:1e:7d:78:3b:ce:e3:59:cb:21:5a:8d:da:fb:5f:23:b6:
         d1:49:ab:75:5c:00:ce:65:ca:ca:15:21:f5:ea:ab:e9:4a:5f:
         58:99:1c:b9:ed:d9:e4:4b:a8:e8:e1:54:f3:65:7e:78:e4:42:
         b8:2b:a7:41:bd:db:54:1d:7b:ec:49:89:a6:e1:7f:8c:83:ab:
         ce:33:31:07:cd:49:68:d1:58:85:3c:c6:c6:1f:0b:7c:0e:e3:
         ef:fc:8b:6e:f9:aa:e3:8b:fc:3c:7d:ca:9b:dc:dc:36:32:84:
         c6:8c:27:bd:1a:ec:0c:b9:b4:8e:a7:84:32:04:19:85:ad:11:
         3d:4c:be:47:6c:db:ae:4c:56:f1:68:a4:fd:78:61:35:94:3f:
         81:a2:86:9a:9d:e6:79:62:8e:6b:76:61:bd:20:04:8e:66:77:
         fd:cd:94:39:86:f8:7b:d6:63:9e:2a:65:47:01:1e:05:6f:06:
         e6:0f:27:41:01:0c:68:c4:23:08:48:43:2c:5c:41:0c:c7:f9:
         d0:07:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:53 2026 by rpki-client