Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          mBZft90cZBtw358XJmM10U27F6LBM3N4SHPvTqLFjUw=
Subject key identifier:   24:27:C4:DF:0D:D1:1A:ED:F7:CD:B1:C9:A2:DC:5A:35:84:7F:BB:90
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019E1F118598C22C55093AFCD3AB4433E92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          09A3
Signing time:             Wed 13 May 2026 02:01:42 +0000
Manifest this update:     Wed 13 May 2026 02:01:42 +0000
Manifest next update:     Thu 14 May 2026 02:01:42 +0000
Files and hashes:         1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
                          2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
                          3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
                          4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
                          5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: VZbjjmAAqILhkfgy3zhWpAE3bD3jx1ejtbsMPGgYkQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:85:98:c2:2c:55:09:3a:fc:d3:ab:44:33:e9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: May 13 02:01:42 2026 GMT
            Not After : May 14 02:01:42 2026 GMT
        Subject: CN=2427c4df0dd11aedf7cdb1c9a2dc5a35847fbb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:1a:d3:53:3c:42:2b:57:48:7e:15:09:06:
                    c1:e4:fb:92:fb:33:6c:1b:3d:bc:fe:ef:ea:6e:6e:
                    8c:b4:7e:bb:b9:26:00:58:c9:1a:e8:b9:5b:92:c5:
                    60:6f:5a:a6:16:78:9f:17:18:8e:75:56:d6:ff:e3:
                    b3:d0:f7:42:10:dc:51:13:dc:99:a3:99:44:e7:f2:
                    b8:d6:08:72:23:f1:80:7e:92:94:21:fc:94:fb:cd:
                    dd:99:f4:c5:ed:1f:f6:6a:c6:3a:18:57:53:21:bb:
                    c9:49:65:05:9e:34:64:fe:88:2b:b9:30:39:d1:18:
                    be:19:76:fe:1d:f7:dd:da:be:e8:44:86:01:6a:96:
                    8d:b1:22:69:ea:11:12:c2:21:93:18:ac:8f:cd:00:
                    e2:53:b1:53:9e:19:e5:16:e1:71:b7:a4:9d:79:9c:
                    d8:b9:7a:f8:17:d2:cb:ee:94:6a:ee:23:85:9a:38:
                    02:72:64:30:e3:82:3a:e4:52:ea:ba:97:23:93:43:
                    d8:5f:5b:a9:8e:12:59:31:1c:02:80:bd:a8:d8:49:
                    55:f5:e3:57:a4:4a:c4:fb:96:37:d6:fd:96:f4:1e:
                    1c:22:5c:f2:52:e1:a6:87:65:b5:35:a5:68:c0:7d:
                    0b:b4:7b:4b:6a:be:3e:a1:62:3a:b9:b3:40:7c:be:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:C4:DF:0D:D1:1A:ED:F7:CD:B1:C9:A2:DC:5A:35:84:7F:BB:90
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:77:e2:89:86:b2:9f:4e:9d:2f:2d:cd:e6:63:20:3c:a6:54:
         2a:79:f1:2a:be:74:e8:5e:e5:ea:b9:77:e8:7c:73:f2:d5:2e:
         02:79:74:74:52:84:5d:9f:f8:6f:c1:36:a4:b2:66:42:6e:a5:
         8a:b3:86:6c:96:04:ff:f6:a3:71:64:72:fe:37:67:8d:9c:ec:
         4a:3c:ad:3e:96:87:4a:6f:d7:68:94:0d:5d:ad:79:90:8f:2f:
         8e:e8:b4:ce:a8:f3:53:87:36:7d:9d:2d:ff:fc:7a:c3:fd:aa:
         09:e3:36:af:16:ca:ef:d3:2e:9c:fa:e1:30:34:f6:71:72:53:
         d2:79:70:49:e3:b7:98:6c:b0:a3:eb:46:f0:48:7c:cc:52:d7:
         be:82:db:c5:8c:3d:cd:7e:f7:98:a3:e1:19:09:f1:ce:94:69:
         20:2a:eb:fc:53:45:ca:54:e2:25:26:63:b6:94:f3:0c:3c:c1:
         f1:f2:59:47:10:a8:cb:cd:15:0e:29:ae:47:47:81:6e:91:87:
         fd:09:55:0c:ca:5c:49:8d:df:f4:86:70:ac:d8:20:24:3e:f1:
         32:7f:b6:80:3c:ad:b4:7a:9d:07:0a:ee:9d:14:73:fc:24:45:
         7a:f5:83:03:dd:63:1c:c2:35:a5:3c:2c:31:ea:a1:7c:65:bb:
         33:5e:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:53 2026 by rpki-client