Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          9+hJMSjLs4LB/PnW4l7RpWRaQFto1L2Bii2NfyCN9UE=
Subject key identifier:   06:3D:1A:2D:EC:65:B0:45:19:94:F0:31:64:34:96:AE:C6:F7:CB:C6
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       019E1FB583AB5A30439EF1A77BE1CFCFDAF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 05:00:49 +0000
Manifest this update:     Wed 13 May 2026 05:00:49 +0000
Manifest next update:     Thu 14 May 2026 05:00:49 +0000
Files and hashes:         1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=)
                          2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: CIDYm7TmyFD7qIP0juQCAbp7jVwbiknt4/ruWf4+bCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:83:ab:5a:30:43:9e:f1:a7:7b:e1:cf:cf:da:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: May 13 05:00:49 2026 GMT
            Not After : May 14 05:00:49 2026 GMT
        Subject: CN=063d1a2dec65b0451994f031643496aec6f7cbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:0c:5f:be:96:54:14:1d:1a:2d:65:82:e6:
                    47:94:dd:1b:d1:17:b9:5e:fe:6a:78:75:f7:78:96:
                    c7:05:f1:7e:5e:aa:6b:7a:a4:fc:ba:47:68:32:30:
                    97:6e:ba:9d:a7:f5:25:2f:02:b0:ac:37:70:76:9a:
                    b3:3f:a3:5b:53:7a:b3:3d:8a:8a:31:f3:e3:01:42:
                    ed:be:59:e7:12:67:50:83:97:ec:ae:54:22:09:a0:
                    d1:a9:0d:5c:af:87:47:15:f8:8b:f6:76:90:4f:da:
                    c6:c9:9d:0a:0e:3a:12:8b:16:bc:0d:44:2e:aa:00:
                    14:50:6b:e8:42:57:df:6d:f4:fa:b0:bc:d7:cd:ee:
                    e9:fb:2a:c4:ca:4b:95:d5:60:a7:0a:18:aa:26:cc:
                    c5:3e:94:33:d2:92:e2:55:a0:77:61:36:db:4c:bf:
                    1c:c5:48:cc:b1:da:d2:63:0c:6f:96:39:7a:e4:19:
                    6c:7b:78:97:b1:75:78:22:ae:c1:97:67:00:cf:68:
                    23:7c:3c:cf:26:0b:a7:05:d7:90:1d:56:22:b6:da:
                    c7:e2:19:d6:bd:1f:71:c6:f3:cd:c0:aa:fa:04:a5:
                    54:32:84:b5:ad:0f:5d:32:bc:6b:c8:ca:2d:b9:12:
                    ed:ce:fb:71:68:ee:8a:36:15:6f:6b:5c:72:59:63:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:1A:2D:EC:65:B0:45:19:94:F0:31:64:34:96:AE:C6:F7:CB:C6
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:92:49:ef:76:1e:0a:79:23:f2:83:68:ec:f6:3d:54:3e:
         1d:04:16:89:41:f7:7e:3e:51:45:77:ba:da:80:92:60:6b:8f:
         11:74:10:4b:fe:84:e2:0c:e5:86:d0:33:07:8b:5e:5a:28:83:
         00:5f:51:71:8e:c8:cb:10:b7:a5:ef:3d:08:94:ec:7c:fc:36:
         62:a6:1e:21:53:75:17:6d:f8:8e:2d:1b:76:f0:74:1a:5e:db:
         e5:80:54:0e:eb:ba:ae:cd:06:a6:d5:ca:23:57:2b:30:fc:9b:
         08:13:fc:b0:5c:83:cb:2d:45:c2:44:a3:e9:9a:1b:ed:9d:d9:
         4b:55:07:ae:d1:70:14:fc:13:db:1b:f8:34:65:a8:58:65:05:
         92:cd:7b:8e:3f:fe:0e:66:ce:60:4d:1d:db:ee:f7:16:13:a1:
         dc:e6:5e:d5:10:0e:6d:11:7e:f0:54:7f:90:d3:d0:c1:42:09:
         c3:aa:05:3f:af:ed:bd:16:f3:fa:4d:84:b2:b6:aa:eb:71:5f:
         d9:d8:df:86:36:98:39:e6:3a:03:88:df:ae:29:34:96:8c:cf:
         7a:c5:ba:8f:88:26:6c:8e:43:dd:3b:fc:7f:9d:3e:9f:a8:28:
         b4:55:ef:e2:73:02:81:04:e6:6f:39:09:cd:b2:a5:0d:79:b2:
         4a:db:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:42 2026 by rpki-client