Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File:                     ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier:          ucc8MSsiZ04ofSCQz8uRh+Ews2gJCYUohDk0Rk4O6pw=
Subject key identifier:   83:AE:15:6C:D0:9B:AA:E9:EF:66:71:B3:28:88:CA:7C:3E:72:D7:7F
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer:       /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial:       019E1FB57F2D80DE39FB7D3EACDD55E2816E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number:          1755
Signing time:             Wed 13 May 2026 05:00:48 +0000
Manifest this update:     Wed 13 May 2026 05:00:48 +0000
Manifest next update:     Thu 14 May 2026 05:00:48 +0000
Files and hashes:         1: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: daWFtHz2U32+V0Fy1i1KPhr/7hq5HQ/Iq/N0yDfGQ4A=)
                          2: c0zEfFDSZZWFy-vBS9NWpwPjwoE.roa (hash: Degy9LDZTNrQEBY/nXvirHbXKz42WXh/PcwFt1G3pj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:7f:2d:80:de:39:fb:7d:3e:ac:dd:55:e2:81:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
        Validity
            Not Before: May 13 05:00:48 2026 GMT
            Not After : May 14 05:00:48 2026 GMT
        Subject: CN=83ae156cd09baae9ef6671b32888ca7c3e72d77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:ca:77:a2:d2:e2:3c:a5:da:59:46:47:53:
                    86:73:30:19:9b:6a:26:bc:12:77:13:15:b5:74:68:
                    f7:f7:8e:f3:d1:28:50:29:d6:f2:f7:2e:a1:3e:3b:
                    e0:9a:8b:06:c1:ec:8d:0a:8f:2d:ce:72:be:48:d3:
                    1f:e7:a1:4f:e6:ab:e1:15:12:e1:e4:e9:a4:4f:fe:
                    fc:a7:05:8a:4f:48:d6:88:68:5b:66:49:50:7f:24:
                    ac:a0:d9:bd:fc:e7:df:96:38:a8:62:94:d2:3f:12:
                    8d:96:19:80:93:f8:67:d4:58:fe:b7:8e:d9:05:5d:
                    e7:f9:91:e8:23:69:1e:45:d5:2d:7f:eb:34:3a:ff:
                    fc:71:58:b7:3d:a4:2d:1e:0c:2c:1d:fa:53:c7:33:
                    a5:97:f5:fa:97:9e:6d:c1:7b:9d:8e:74:a8:e8:40:
                    89:1d:fd:34:85:5b:5b:24:62:38:f9:15:a5:9f:16:
                    22:ae:c9:ad:cd:53:1f:3e:90:bd:35:63:e6:7d:bb:
                    87:14:cb:be:a9:36:cf:9e:09:00:cb:59:da:b0:b3:
                    20:89:74:7e:b3:df:5d:1b:1f:28:3e:2a:5f:ac:56:
                    6a:ca:b8:05:03:69:7d:ca:73:7f:9c:b8:e8:88:3d:
                    10:92:c2:c9:23:0a:c8:26:53:cc:9f:d7:9a:f1:a1:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AE:15:6C:D0:9B:AA:E9:EF:66:71:B3:28:88:CA:7C:3E:72:D7:7F
            X509v3 Authority Key Identifier:
                keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:a2:52:9e:e7:9b:31:d2:37:ea:49:7a:dc:d0:cd:3b:46:
         35:5e:81:e5:44:95:84:bf:9a:7d:db:5f:ee:2a:6f:d7:5d:6e:
         84:a2:a3:ae:30:fb:5f:b7:e8:58:c9:95:9f:ef:35:f6:78:b7:
         76:1c:f3:4a:d3:f0:e5:f1:87:03:0f:d7:05:92:ca:18:8a:2e:
         58:4f:9a:e3:d3:fa:8f:80:5e:ef:e0:c1:f3:ca:9f:a8:dd:70:
         3e:7f:85:d7:8e:4c:83:d1:36:cc:d2:01:de:8c:1f:d6:89:a2:
         a4:9d:b4:58:6d:4e:f4:00:9b:0d:48:34:61:0d:b0:c2:bc:06:
         1a:54:cc:17:c1:e6:84:59:9d:36:e4:56:e9:e7:b6:3a:ef:bc:
         6c:05:d8:76:c1:4e:8b:f9:df:89:86:c8:5a:c2:25:40:8e:2e:
         1e:df:ce:5a:a3:1e:fa:7d:af:35:3d:63:c1:22:d1:e9:50:cd:
         59:dd:8f:7b:6c:c4:67:f6:42:bb:e4:f2:32:1e:26:b6:1f:e7:
         e5:79:a8:af:39:72:cd:76:a3:06:91:9e:7f:8d:9e:bf:d3:e6:
         36:1d:5c:ba:12:9c:be:ea:7b:ce:7a:8e:05:52:6f:52:b9:b6:
         f5:f0:68:4a:6f:f6:16:1f:1a:be:fc:31:c3:4c:00:49:bc:ef:
         88:7f:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:09 2026 by rpki-client