Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File:                     zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier:          yaMsU4Ko4c3uEZV3chkLsQDtIhjknMWGuMcTPNrM9jQ=
Subject key identifier:   71:B7:CA:92:69:76:DE:4E:88:E9:5D:90:84:0C:55:25:75:1D:DC:CC
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer:       /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial:       019E1E359A04E0FA8480209046461E8F27D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number:          83
Signing time:             Tue 12 May 2026 22:01:29 +0000
Manifest this update:     Tue 12 May 2026 22:01:29 +0000
Manifest next update:     Wed 13 May 2026 22:01:29 +0000
Files and hashes:         1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
                          2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: rdLc8GuNVz5TeefRTxov2DQXiQs7zzr7HDUWAXBH7nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:9a:04:e0:fa:84:80:20:90:46:46:1e:8f:27:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
        Validity
            Not Before: May 12 22:01:29 2026 GMT
            Not After : May 13 22:01:29 2026 GMT
        Subject: CN=71b7ca926976de4e88e95d90840c5525751ddccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:9c:e1:61:75:38:0d:f4:a3:e1:53:31:bb:
                    25:88:13:74:63:0e:ea:d4:3a:d2:ef:b2:46:df:74:
                    6a:27:ed:ce:8a:e5:19:91:31:cb:65:2e:ec:53:af:
                    a9:6d:e3:75:d3:10:8d:42:b1:f4:13:b1:f1:be:e3:
                    5f:5d:78:39:c4:52:97:e6:9e:47:9d:4d:fd:4f:07:
                    d1:1a:38:e9:2b:12:85:b9:b6:8e:47:88:0a:69:33:
                    0b:05:f0:f9:b7:0b:87:40:9a:fa:5f:ed:b3:83:26:
                    2b:fc:dd:5e:21:1f:d5:ab:b5:08:49:e3:2a:4b:df:
                    d1:08:eb:59:e0:37:c0:dd:36:52:30:98:bf:fc:39:
                    e2:39:08:61:ae:95:9e:d0:92:55:8f:1f:68:ba:d2:
                    6d:96:ac:a1:08:d8:93:9d:51:af:ea:9d:be:77:9b:
                    60:03:73:80:0b:df:ea:e6:25:d0:b5:81:70:6a:10:
                    19:e8:7b:7a:9c:ae:24:05:be:b8:f2:82:81:45:52:
                    cc:04:fc:97:31:ab:d9:ae:01:68:34:db:1e:4f:9b:
                    cf:dc:32:bb:9f:2d:1c:e4:ee:7b:99:db:cd:f3:70:
                    a3:ec:a5:2b:07:fc:5d:78:63:af:ce:ec:e2:cc:ca:
                    0a:b2:5b:20:40:6b:4b:ac:e1:45:68:e8:9a:8d:90:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B7:CA:92:69:76:DE:4E:88:E9:5D:90:84:0C:55:25:75:1D:DC:CC
            X509v3 Authority Key Identifier:
                keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:00:12:ee:75:59:cb:2f:72:b7:41:7b:dd:68:b4:44:5a:
         f5:8b:c6:3d:a3:33:b2:a3:00:5a:b9:0a:fe:4a:ad:49:6d:74:
         9c:6f:64:d5:78:ee:5e:c2:b6:47:68:e1:03:db:c0:eb:69:ac:
         f2:84:81:58:4e:da:fe:23:60:90:7a:da:2c:73:55:e7:c7:00:
         0d:06:8e:07:be:33:49:0a:70:8d:7e:67:f3:d8:c5:c1:3c:25:
         31:d9:18:a9:36:a6:bb:78:ef:bb:f4:0f:48:40:3d:9e:10:88:
         8a:24:5b:67:d3:6a:2c:d4:ec:ed:bd:a7:4d:c4:c4:c2:1a:7c:
         fa:cf:3c:37:55:94:ee:74:0b:d8:ed:38:5c:65:d4:84:f8:f1:
         4a:a7:88:e5:67:38:7b:b7:37:40:63:a2:b2:96:28:02:de:d2:
         09:32:80:32:48:a4:93:06:6d:19:3b:85:ad:57:09:d0:32:09:
         fd:fe:95:e4:d6:06:23:c7:3a:58:56:66:de:2f:69:2a:df:e9:
         49:39:27:0a:d3:0d:12:bd:f4:15:94:40:28:90:91:10:c5:84:
         78:4a:42:a7:8c:95:c4:3e:17:6a:77:8b:d2:7a:de:63:fb:2b:
         79:b3:13:8c:16:ee:73:15:11:89:fc:32:c2:aa:1f:f4:c7:32:
         40:af:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:26 2026 by rpki-client