Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File:                     ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier:          y8SZWPKG0E5M7Z9bylUS/W2eG3d8ysQnXUA0rbeZ/VE=
Subject key identifier:   32:12:C4:82:91:92:FD:2B:3C:53:64:55:E3:90:95:8A:F4:B8:53:3C
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer:       /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial:       019E1F482A818C979E0BA56E0928ACF68F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 03:01:23 +0000
Manifest this update:     Wed 13 May 2026 03:01:23 +0000
Manifest next update:     Thu 14 May 2026 03:01:23 +0000
Files and hashes:         1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
                          2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
                          3: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: fIJp4vJc8vv59GNThX5AA3O/UILSg1aS9rztf6Fcb1g=)
                          4: yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa (hash: wEYOZFW3nRAdwU0jliufiMLAbI5/X3da3ron9zmXMns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:2a:81:8c:97:9e:0b:a5:6e:09:28:ac:f6:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
        Validity
            Not Before: May 13 03:01:23 2026 GMT
            Not After : May 14 03:01:23 2026 GMT
        Subject: CN=3212c4829192fd2b3c536455e390958af4b8533c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:6e:69:8a:58:89:17:4f:e5:0f:e4:15:5a:
                    76:8e:11:b2:16:b7:83:61:35:79:f7:29:34:08:95:
                    c8:ab:ed:d9:e7:06:b4:bd:2e:6d:f9:a2:6d:cb:22:
                    e1:34:bb:4c:f1:03:1b:86:68:6c:9a:fd:49:c5:a7:
                    9a:24:cf:c2:88:ed:eb:c9:8a:c6:13:8f:bc:74:84:
                    d6:62:fc:76:ca:a5:cc:f5:02:a1:6f:48:cb:fc:08:
                    d0:f1:42:5a:54:42:39:fb:5d:9f:98:8d:76:84:0e:
                    61:69:e1:12:ab:33:b7:9a:ab:b8:1d:b7:08:d1:43:
                    0a:2c:18:39:d4:23:01:af:78:88:4a:7c:99:77:41:
                    d2:b2:95:db:e7:15:33:68:29:c9:40:9e:82:39:46:
                    fe:dc:ee:7e:b7:40:d4:10:82:a2:5d:3c:93:2e:e2:
                    3d:1c:61:8c:f6:96:75:ae:e8:ab:46:0a:04:2f:0c:
                    48:d1:4c:b4:85:bb:69:35:4e:04:7a:6b:77:6f:1a:
                    43:c2:55:ff:2a:bc:cb:ad:17:a8:08:76:f2:48:5c:
                    c0:76:f0:30:64:28:9b:eb:8f:14:d0:df:00:1e:90:
                    75:66:aa:fb:e1:f3:6e:19:08:53:6d:01:23:a5:c3:
                    de:92:94:59:47:8d:26:06:a0:8f:98:7e:e1:e5:2b:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:12:C4:82:91:92:FD:2B:3C:53:64:55:E3:90:95:8A:F4:B8:53:3C
            X509v3 Authority Key Identifier:
                keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e1:64:48:cb:b0:50:5e:40:47:d1:09:91:ce:1b:96:14:f0:
         44:c9:cf:ed:85:5e:ad:a4:61:53:a7:f6:ce:ae:24:93:41:06:
         a9:4f:de:d9:56:06:93:ce:39:0c:0f:76:09:66:a2:95:62:f8:
         53:18:cb:bc:32:f2:30:87:dc:25:36:75:b0:a9:ec:a6:49:59:
         40:b5:9a:6c:51:64:99:66:33:bb:1e:58:56:cf:c5:b3:6e:9d:
         40:e9:79:c6:00:c2:c4:4c:59:60:ab:36:6b:37:04:a2:61:5d:
         55:91:6f:d5:2a:54:2a:84:11:bb:c9:98:35:1b:33:5d:4b:68:
         d5:c6:2d:5c:b6:3d:c3:15:3a:40:bb:9d:dc:4f:36:15:71:6b:
         4a:27:b5:2e:d1:8d:da:38:83:fd:d5:60:39:de:ae:f2:1f:a8:
         0a:23:a2:12:8d:88:f9:37:7c:1c:66:6d:01:c7:06:04:81:fe:
         3a:b0:0b:93:19:c9:dd:23:06:e4:86:52:54:93:10:cb:0a:7d:
         5e:2a:7a:52:b7:71:c0:f5:a8:cb:72:f7:e1:85:03:03:11:9f:
         8b:ad:9b:36:72:f1:f5:27:c2:ef:0b:14:b0:5c:bd:3e:ab:14:
         66:c0:ad:2e:fa:ef:3b:79:4d:d4:b4:e4:9f:19:0b:9b:fd:57:
         b0:62:6b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSCqBjJeeC6VuCSis9o91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw
MTQxMmQwHhcNMjYwNTEzMDMwMTIzWhcNMjYwNTE0MDMwMTIzWjAzMTEwLwYDVQQD
EygzMjEyYzQ4MjkxOTJmZDJiM2M1MzY0NTVlMzkwOTU4YWY0Yjg1MzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEBuaYpYiRdP5Q/kFVp2jhGyFreD
YTV59yk0CJXIq+3Z5wa0vS5t+aJtyyLhNLtM8QMbhmhsmv1JxaeaJM/CiO3ryYrG
E4+8dITWYvx2yqXM9QKhb0jL/AjQ8UJaVEI5+12fmI12hA5haeESqzO3mqu4HbcI
0UMKLBg51CMBr3iISnyZd0HSspXb5xUzaCnJQJ6COUb+3O5+t0DUEIKiXTyTLuI9
HGGM9pZ1ruirRgoELwxI0Uy0hbtpNU4Eemt3bxpDwlX/KrzLrReoCHbySFzAdvAw
ZCib648U0N8AHpB1Zqr74fNuGQhTbQEjpcPekpRZR40mBqCPmH7h5SsoPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDISxIKRkv0rPFNkVeOQlYr0uFM8MB8GA1UdIwQY
MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt
MDYxNjM5ODEyYzc0LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0
LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeFkSMuw
UF5AR9EJkc4blhTwRMnP7YVeraRhU6f2zq4kk0EGqU/e2VYGk845DA92CWailWL4
UxjLvDLyMIfcJTZ1sKnspklZQLWabFFkmWYzux5YVs/Fs26dQOl5xgDCxExZYKs2
azcEomFdVZFv1SpUKoQRu8mYNRszXUto1cYtXLY9wxU6QLud3E82FXFrSie1LtGN
2jiD/dVgOd6u8h+oCiOiEo2I+Td8HGZtAccGBIH+OrALkxnJ3SMG5IZSVJMQywp9
Xip6UrdxwPWoy3L34YUDAxGfi62bNnLx9SfC7wsUsFy9PqsUZsCtLvrvO3lN1LTk
nxkLm/1XsGJriQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:40 2026 by rpki-client