Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File:                     Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier:          JkzPTOirjXZCrt46OesyD9gVDL28Mb6y9wR1gvZiqOU=
Subject key identifier:   1C:5F:2C:CA:C5:2E:83:2B:AD:E6:91:02:6A:D0:3A:4A:A3:A9:A7:35
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer:       /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial:       019E2023CFC3AEBD1B985B35F6D8CC706DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number:          0802
Signing time:             Wed 13 May 2026 07:01:18 +0000
Manifest this update:     Wed 13 May 2026 07:01:18 +0000
Manifest next update:     Thu 14 May 2026 07:01:18 +0000
Files and hashes:         1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
                          2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: QgSD/4qr56eeF0ovVVnH2XMtPhlq3wE2O0rry2vhF6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:cf:c3:ae:bd:1b:98:5b:35:f6:d8:cc:70:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
        Validity
            Not Before: May 13 07:01:18 2026 GMT
            Not After : May 14 07:01:18 2026 GMT
        Subject: CN=1c5f2ccac52e832bade691026ad03a4aa3a9a735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:dc:c0:78:c5:00:c8:f1:f0:b7:84:15:c7:
                    a8:8a:cb:51:33:e3:7c:58:87:c4:04:6e:e2:55:69:
                    ca:f4:17:19:d7:ac:d5:21:f1:4f:a5:b8:5a:ac:7c:
                    7b:d2:68:40:da:be:93:ea:f2:53:1f:35:5e:43:f0:
                    0d:ed:95:a4:3c:ea:90:f9:2c:45:0e:81:70:17:f2:
                    db:2e:15:1c:1a:57:90:a8:f8:3c:da:9c:76:78:71:
                    77:aa:76:91:fa:f5:81:4f:b6:1a:d1:2f:96:54:0b:
                    66:24:b9:ef:0f:e5:29:e1:c4:82:30:0c:40:93:14:
                    1e:e8:a4:f9:ac:12:67:18:b4:11:da:8b:8b:9b:b3:
                    c5:c5:ff:0e:16:f8:d0:ab:2c:37:2c:46:b4:a0:53:
                    47:be:2d:59:b1:62:a0:2f:5d:a3:67:b3:11:92:d1:
                    0c:19:ac:db:95:d4:c3:85:46:61:b2:54:f2:aa:b9:
                    fa:34:00:2d:a0:e0:20:34:8e:8e:5a:ff:3d:b3:a7:
                    5c:c4:29:48:6b:de:a5:3a:b2:bc:7a:e6:0f:5c:c2:
                    5f:47:ca:f0:d2:da:3c:08:88:82:ee:08:6f:e5:39:
                    99:e5:46:47:d2:c3:64:09:f6:e3:ed:ed:6d:56:f8:
                    74:48:f5:47:74:a2:9b:83:ab:b2:cb:c1:b1:be:36:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:2C:CA:C5:2E:83:2B:AD:E6:91:02:6A:D0:3A:4A:A3:A9:A7:35
            X509v3 Authority Key Identifier:
                keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:29:dd:97:19:89:19:52:22:b1:8a:a1:07:d3:5e:fc:96:
         fa:a5:13:85:10:65:70:b0:af:1d:c7:62:12:f3:fc:de:7a:bb:
         2d:28:66:95:24:0d:97:48:74:85:82:90:d1:aa:00:c8:c1:cc:
         92:ec:79:de:76:53:bd:f6:db:01:dc:e6:ae:0e:08:f5:7c:ab:
         81:aa:8f:9c:7b:54:f2:97:f2:fc:e8:c7:ca:45:f5:e3:96:5a:
         bf:38:d1:c2:dc:5a:45:63:e5:46:1e:4f:9b:f0:8a:d0:a2:67:
         58:e8:38:df:42:13:41:7b:ca:14:c4:a1:44:88:9f:a3:6a:29:
         63:5c:28:d7:16:04:82:a8:4b:c6:77:74:17:16:4e:55:81:2c:
         60:3d:96:f1:31:c0:15:db:42:0c:75:25:2f:a6:28:c0:1b:d5:
         7f:b4:53:18:8e:b1:dc:4c:01:38:ed:14:07:24:ad:57:62:5b:
         24:bf:89:e1:f4:b2:0c:89:a2:d5:7e:51:1d:f7:53:4a:c5:e4:
         5b:8e:93:1c:5b:96:27:9e:39:a9:dc:c9:c2:90:22:22:58:35:
         84:ad:f7:e6:e8:6e:28:76:c1:a2:a8:4b:78:59:cf:9a:ff:86:
         dd:1f:76:4a:c9:ef:1e:5b:a1:b8:65:70:d7:1c:2b:27:c1:86:
         be:cf:e3:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI8/Drr0bmFs19tjMcG32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2YzYmEzMDAyZWQ3ZTIzYTRiZDJlOTc4YjNhYmFjMzI3
ZmQwZDgwHhcNMjYwNTEzMDcwMTE4WhcNMjYwNTE0MDcwMTE4WjAzMTEwLwYDVQQD
EygxYzVmMmNjYWM1MmU4MzJiYWRlNjkxMDI2YWQwM2E0YWEzYTlhNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9HcwHjFAMjx8LeEFceoistRM+N8
WIfEBG7iVWnK9BcZ16zVIfFPpbharHx70mhA2r6T6vJTHzVeQ/AN7ZWkPOqQ+SxF
DoFwF/LbLhUcGleQqPg82px2eHF3qnaR+vWBT7Ya0S+WVAtmJLnvD+Up4cSCMAxA
kxQe6KT5rBJnGLQR2ouLm7PFxf8OFvjQqyw3LEa0oFNHvi1ZsWKgL12jZ7MRktEM
GazbldTDhUZhslTyqrn6NAAtoOAgNI6OWv89s6dcxClIa96lOrK8euYPXMJfR8rw
0to8CIiC7ghv5TmZ5UZH0sNkCfbj7e1tVvh0SPVHdKKbg6uyy8GxvjYjCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxfLMrFLoMrreaRAmrQOkqjqac1MB8GA1UdIwQY
MBaAFGfPO6MALtfiOkvS6Xizq6wyf9DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQt
MjM0ZTBkMTc2MzI1LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQtMjM0ZTBkMTc2MzI1
LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5gp3ZcZ
iRlSIrGKoQfTXvyW+qUThRBlcLCvHcdiEvP83nq7LShmlSQNl0h0hYKQ0aoAyMHM
kux53nZTvfbbAdzmrg4I9XyrgaqPnHtU8pfy/OjHykX145ZavzjRwtxaRWPlRh5P
m/CK0KJnWOg430ITQXvKFMShRIifo2opY1wo1xYEgqhLxnd0FxZOVYEsYD2W8THA
FdtCDHUlL6YowBvVf7RTGI6x3EwBOO0UByStV2JbJL+J4fSyDImi1X5RHfdTSsXk
W46THFuWJ545qdzJwpAiIlg1hK335uhuKHbBoqhLeFnPmv+G3R92SsnvHluhuGVw
1xwrJ8GGvs/jvA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:02:27 2026 by rpki-client