Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File:                     ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier:          U5fIbQSWMwtBa8guKTK4dsQOGKeC4nuC2tMNyeeh5ag=
Subject key identifier:   45:0F:28:8B:5D:D4:4F:15:29:92:88:6F:A5:BE:CA:34:3E:1B:BD:95
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer:       /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial:       019E1F48104181C627B7DAD92C28B40408FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number:          01CE
Signing time:             Wed 13 May 2026 03:01:16 +0000
Manifest this update:     Wed 13 May 2026 03:01:16 +0000
Manifest next update:     Thu 14 May 2026 03:01:16 +0000
Files and hashes:         1: UdVugfsn-jbvcmbV5Jcfgl859_Q.asa (hash: Gfx7SJwlbKwzjES0mva5QhtlHSSpQonUDCYASrpk2W0=)
                          2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: v1hXSDpKhRCqGz0pDfpewrrH6FB4/S11nz+NoHft8fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:10:41:81:c6:27:b7:da:d9:2c:28:b4:04:08:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
        Validity
            Not Before: May 13 03:01:16 2026 GMT
            Not After : May 14 03:01:16 2026 GMT
        Subject: CN=450f288b5dd44f152992886fa5beca343e1bbd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:9b:19:0b:64:b9:65:b6:9a:2a:fa:c9:e4:
                    8a:0f:f2:d7:c0:a0:54:6a:c8:88:94:03:43:44:e6:
                    27:63:7a:84:f8:06:a0:b8:f7:33:a1:12:1c:25:bb:
                    08:20:f4:48:f4:6c:81:a6:18:bc:37:19:2f:9a:49:
                    a4:20:f0:4c:28:f4:f3:c4:0c:ac:78:08:60:18:b6:
                    b0:2d:4c:6d:8d:8b:6f:4b:39:06:9a:f6:29:29:80:
                    4a:e5:80:e4:e0:38:57:05:ac:78:6f:30:29:3a:a7:
                    4c:dd:f0:66:e2:11:8e:80:3d:d9:02:41:7d:34:89:
                    ee:41:19:cd:cc:30:61:a3:5b:1b:51:66:44:39:44:
                    33:6c:51:9f:f4:ed:79:29:0b:79:48:f6:8a:62:eb:
                    8f:77:74:68:3e:4f:25:a5:01:97:1d:27:03:5b:9a:
                    02:d6:84:2f:08:14:b3:a8:64:93:45:98:6a:a8:f1:
                    6b:69:7f:e1:5a:19:f0:8f:af:57:42:75:34:42:c6:
                    d0:67:6e:d2:5f:1d:6e:1e:39:fa:58:74:e2:3c:85:
                    62:25:9a:48:99:0e:29:5d:3e:05:07:bd:c8:38:c9:
                    19:37:2c:a6:b6:06:11:1c:0a:16:ab:e2:24:e5:50:
                    73:63:41:6a:28:63:ba:fb:7b:1d:9c:b8:c2:a3:a6:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:28:8B:5D:D4:4F:15:29:92:88:6F:A5:BE:CA:34:3E:1B:BD:95
            X509v3 Authority Key Identifier:
                keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:52:89:e5:57:83:95:cc:6b:4d:22:e0:65:bd:70:5d:f5:24:
         7a:27:fc:ef:04:4a:e1:fe:89:07:d2:51:82:21:56:c7:d8:bb:
         2b:9c:14:97:5f:39:ce:8f:96:78:d8:f4:f6:96:45:6a:e6:a7:
         eb:47:8b:80:07:c6:40:5f:f7:77:0f:3f:d3:7b:30:0d:8e:91:
         a0:61:02:78:47:18:07:dc:db:9e:c5:05:a2:a1:5b:51:9a:78:
         48:de:02:69:3a:e7:47:a4:2e:08:2d:36:a3:ac:ff:54:fc:50:
         92:19:a4:f0:6d:4c:43:de:ac:da:99:20:a8:7e:cb:d4:b0:72:
         46:5b:b3:9d:78:d8:75:c5:3e:91:2e:f3:b2:9b:1d:74:d7:7c:
         9b:43:4f:7b:c5:12:84:56:0a:d6:fb:ca:63:a1:6f:e2:cb:a9:
         f3:d6:a8:93:ff:a0:76:35:e6:b7:79:15:4e:2a:9e:c8:6a:b2:
         a7:83:0b:14:52:2f:d0:27:ac:fa:70:5d:42:de:a2:50:b5:bd:
         f5:c9:82:9b:62:dd:44:76:44:fc:41:8a:cb:2b:c9:a6:c6:27:
         10:74:21:6e:21:6e:23:eb:dd:a2:4b:b6:9b:47:9f:2f:15:c7:
         c9:10:2a:2b:27:cd:90:33:3c:7f:36:1d:57:05:e7:09:38:0c:
         bf:59:81:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSBBBgcYnt9rZLCi0BAj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh
NzVjZDQwHhcNMjYwNTEzMDMwMTE2WhcNMjYwNTE0MDMwMTE2WjAzMTEwLwYDVQQD
Eyg0NTBmMjg4YjVkZDQ0ZjE1Mjk5Mjg4NmZhNWJlY2EzNDNlMWJiZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvebGQtkuWW2mir6yeSKD/LXwKBU
asiIlANDROYnY3qE+AaguPczoRIcJbsIIPRI9GyBphi8NxkvmkmkIPBMKPTzxAys
eAhgGLawLUxtjYtvSzkGmvYpKYBK5YDk4DhXBax4bzApOqdM3fBm4hGOgD3ZAkF9
NInuQRnNzDBho1sbUWZEOUQzbFGf9O15KQt5SPaKYuuPd3RoPk8lpQGXHScDW5oC
1oQvCBSzqGSTRZhqqPFraX/hWhnwj69XQnU0QsbQZ27SXx1uHjn6WHTiPIViJZpI
mQ4pXT4FB73IOMkZNyymtgYRHAoWq+Ik5VBzY0FqKGO6+3sdnLjCo6YHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUPKItd1E8VKZKIb6W+yjQ+G72VMB8GA1UdIwQY
MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt
ZTI5MWE1MmE5ZDE1LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1
LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVKJ5VeD
lcxrTSLgZb1wXfUkeif87wRK4f6JB9JRgiFWx9i7K5wUl185zo+WeNj09pZFauan
60eLgAfGQF/3dw8/03swDY6RoGECeEcYB9zbnsUFoqFbUZp4SN4CaTrnR6QuCC02
o6z/VPxQkhmk8G1MQ96s2pkgqH7L1LByRluznXjYdcU+kS7zspsddNd8m0NPe8US
hFYK1vvKY6Fv4sup89aok/+gdjXmt3kVTiqeyGqyp4MLFFIv0Ces+nBdQt6iULW9
9cmCm2LdRHZE/EGKyyvJpsYnEHQhbiFuI+vdoku2m0efLxXHyRAqKyfNkDM8fzYd
VwXnCTgMv1mBmA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:22:29 2026 by rpki-client