Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File:                     zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier:          elJH1yvC8FgnXAHdwl3jf6zbYsGLUvT90mcPtxbF04A=
Subject key identifier:   DF:52:96:45:EA:84:28:6F:0B:B9:C4:B3:46:BC:EF:1D:AB:3E:AB:E8
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer:       /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial:       019E20C88C427EAF87122B057A96C6FAB39F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 10:01:14 +0000
Manifest this update:     Wed 13 May 2026 10:01:14 +0000
Manifest next update:     Thu 14 May 2026 10:01:14 +0000
Files and hashes:         1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
                          2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: 9ij6o08J3Jqu/oy15qKfcBKO1ATMssCV1ipPWit7078=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:8c:42:7e:af:87:12:2b:05:7a:96:c6:fa:b3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
        Validity
            Not Before: May 13 10:01:14 2026 GMT
            Not After : May 14 10:01:14 2026 GMT
        Subject: CN=df529645ea84286f0bb9c4b346bcef1dab3eabe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:90:f4:73:40:1e:a9:8a:fa:77:ce:f1:40:
                    d1:90:97:0e:b5:c3:d1:bb:a2:57:56:e1:57:c8:1c:
                    0b:44:2d:57:29:4d:36:51:e9:34:36:eb:20:2a:11:
                    67:55:58:83:1b:66:19:fc:82:0c:aa:ec:71:13:49:
                    56:d8:08:28:42:99:b2:51:6f:c2:0b:2d:bc:a8:ff:
                    76:08:52:0d:c3:b9:cf:76:8f:ea:31:3e:bd:7c:61:
                    49:11:08:cb:98:9c:12:c6:3b:e6:b0:7f:1c:c4:c3:
                    5e:1c:ca:8c:38:25:d2:05:37:ed:32:e2:2f:4d:e5:
                    ee:74:76:3d:e7:18:e9:ce:13:17:fd:e5:2f:32:54:
                    00:a3:c0:c5:70:c1:c3:46:05:14:89:58:5f:d8:b2:
                    14:29:5a:1f:b5:88:d4:69:aa:93:04:a8:bc:86:4c:
                    fb:51:3b:a5:0a:b6:ef:f4:d3:37:87:2c:6e:0b:f8:
                    5e:8b:4d:96:ff:01:22:cd:1c:a2:ff:85:4c:58:0a:
                    24:59:f1:d5:a0:63:66:25:b1:ec:82:aa:6c:70:50:
                    7c:83:bd:58:99:ae:1b:ca:5a:2a:f1:8e:e3:a8:02:
                    40:72:80:70:61:90:8d:29:e1:1b:17:02:60:8d:15:
                    84:f1:24:8c:bc:d1:7b:39:f8:84:cf:1b:d8:ec:3e:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:52:96:45:EA:84:28:6F:0B:B9:C4:B3:46:BC:EF:1D:AB:3E:AB:E8
            X509v3 Authority Key Identifier:
                keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:db:cb:d3:54:60:b0:dd:7c:e4:85:4d:d5:62:fd:39:ac:f0:
         77:e7:82:e2:70:25:8e:83:bc:44:60:31:e5:7d:28:12:f1:6d:
         83:af:72:0d:0b:e0:63:70:54:6b:dd:c7:0f:3f:39:60:f9:f9:
         77:a1:ce:70:e7:5c:fd:4b:4e:b0:52:fe:e4:52:74:4a:56:97:
         23:c7:70:be:5f:66:aa:2b:e2:e3:d9:e1:20:24:96:01:e0:27:
         f7:3a:1f:b4:cc:e6:5c:72:7a:6b:18:07:ed:0d:47:b0:c8:28:
         6f:4a:fe:87:de:52:2a:a8:c9:df:3c:ba:03:ea:f6:ac:51:24:
         3b:57:11:22:bd:28:b2:12:7e:1b:e6:1b:39:b0:87:6c:18:f4:
         e3:31:00:91:14:86:e0:60:9d:68:79:8c:b7:f0:2b:df:e5:b1:
         66:31:d6:6e:1e:0d:09:a3:c5:8a:bc:d2:10:af:79:cb:69:0d:
         f4:f5:c8:b7:c0:79:1a:a8:e8:1b:84:19:1c:90:f5:fd:5f:67:
         f4:50:5e:c1:9a:dd:b6:38:1d:be:fd:81:76:e1:09:3b:f9:e3:
         ee:78:0c:ef:01:b5:50:76:e7:a5:97:5f:4f:25:33:cf:95:e3:
         d7:0f:fd:c7:6f:60:37:49:1e:58:db:b8:b5:dc:4c:a5:da:44:
         d4:97:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:40 2026 by rpki-client