Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File:                     ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier:          3901Ee6ch3oO3biGMivEfcXIJAF/shc3IV5uptquZ3w=
Subject key identifier:   9D:6A:FF:5F:A3:28:3B:05:5B:A9:06:3B:D7:C0:50:44:33:30:E5:94
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer:       /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial:       019E1F47E854EA3A1001B276F50EFCA1C105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 03:01:06 +0000
Manifest this update:     Wed 13 May 2026 03:01:06 +0000
Manifest next update:     Thu 14 May 2026 03:01:06 +0000
Files and hashes:         1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=)
                          2: 43BDuYzZKT6GuNcPCdD6yFXu9KU.roa (hash: BR04tqYW3l6HUM2rcLyj1VGl9Tid3trcvH2fcQ2YbBo=)
                          3: 8auuTFL6tParorXPR_FX7n5-sMo.roa (hash: EPBMa3bgDg4K8XqsoSkRoxiHXy+VyA8XAgJy5cRLejw=)
                          4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: mZEZcvYCuS+dQpKy7Fvx9Tt9nLj2akvgmqxPMx+T/g8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:e8:54:ea:3a:10:01:b2:76:f5:0e:fc:a1:c1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
        Validity
            Not Before: May 13 03:01:06 2026 GMT
            Not After : May 14 03:01:06 2026 GMT
        Subject: CN=9d6aff5fa3283b055ba9063bd7c050443330e594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:6f:4b:83:f2:ae:90:cc:5e:c8:75:b9:04:
                    02:d5:4e:ea:ee:75:ea:8c:f8:13:fb:93:36:47:79:
                    97:2a:52:da:43:5f:b0:59:5a:6e:01:18:53:38:7f:
                    54:76:94:58:5d:23:bc:8b:23:42:4e:0f:ab:85:52:
                    c8:7d:49:42:61:db:8c:22:c1:05:33:da:1e:af:7f:
                    a7:bc:bf:76:28:10:3b:62:84:e6:42:b1:62:8c:29:
                    ea:76:e3:ce:4c:ae:53:d5:bb:8a:31:c4:f0:c8:78:
                    07:2f:48:fe:2a:35:2d:33:8d:c5:c8:7a:63:9c:16:
                    af:ac:4d:0d:17:49:25:2c:bb:ec:b5:77:d4:d0:f6:
                    63:0e:9e:08:1a:35:27:77:1e:7f:85:b2:c8:e7:e0:
                    5f:f3:25:29:0c:ce:64:19:fa:19:f4:d0:31:3c:6f:
                    51:f2:7e:ac:c7:80:8b:a3:5d:2a:03:c3:53:ab:9f:
                    3e:d8:89:28:70:f5:92:42:e8:33:24:5a:20:60:10:
                    53:05:3d:af:81:cc:99:35:95:a0:16:83:b9:9e:b8:
                    a0:dc:d5:ac:b3:c1:52:d6:fe:0d:5f:5d:81:65:bf:
                    2d:fd:30:72:b3:6a:2d:cd:8f:eb:cf:55:8b:2c:b3:
                    33:af:89:3d:3b:59:46:bf:8c:bd:a0:e4:e6:04:0b:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:FF:5F:A3:28:3B:05:5B:A9:06:3B:D7:C0:50:44:33:30:E5:94
            X509v3 Authority Key Identifier:
                keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:f6:4d:67:95:72:53:2a:9f:5b:d5:c5:b7:2a:1a:85:8c:
         f1:0d:d5:01:3e:6d:e6:c3:60:2f:ba:54:a7:cb:5c:f4:e5:16:
         9b:e9:7b:04:ea:32:26:fd:ce:6a:ec:ca:64:f1:a9:b7:b2:c6:
         a8:cf:ff:bb:f4:17:2f:90:c1:c7:14:63:98:81:8a:02:4d:0f:
         95:b9:c9:ed:83:0e:7c:ac:6d:d5:6f:61:5f:c4:4e:df:a6:ce:
         cf:f8:4d:18:30:bf:cb:7e:0a:e6:77:08:f7:0b:b5:9d:a3:8b:
         93:ea:b4:ec:ec:08:7f:18:8c:01:14:ac:01:61:e0:3d:35:24:
         df:0c:5e:39:d2:5a:47:45:66:a2:73:b6:03:cc:7a:f5:60:f0:
         83:43:de:51:9a:fe:4f:db:28:69:55:8d:e7:fe:49:00:1b:53:
         c0:6e:d5:16:52:eb:1e:ef:95:d5:e3:92:20:e3:c9:f2:98:93:
         bf:f2:67:e1:f6:07:46:af:87:10:1f:c6:85:e3:2f:c8:86:8b:
         dd:43:ec:ed:90:1c:08:44:c5:9e:88:f3:09:3b:89:80:ca:ab:
         18:ad:ab:b9:89:bf:db:42:4d:8b:58:b0:51:e4:82:68:2f:66:
         6e:75:62:54:ca:e6:3e:89:11:b1:3f:ca:ad:5d:58:37:eb:db:
         c3:b7:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:07 2026 by rpki-client