Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File:                     zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier:          /EMqxLPnaRAoYEk9vOtg2pkzBLwHcQo8LUUHlZhGOIw=
Subject key identifier:   68:3A:8E:AF:B3:2B:D5:1A:9F:EF:F5:0D:48:8A:EE:1B:47:78:D5:60
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer:       /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial:       019E1F108BA6FE813C367ACE1ECCA42474D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number:          091B
Signing time:             Wed 13 May 2026 02:00:38 +0000
Manifest this update:     Wed 13 May 2026 02:00:38 +0000
Manifest next update:     Thu 14 May 2026 02:00:38 +0000
Files and hashes:         1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
                          2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: DgDJUpp2I4Yxel3WLykkVW3TwV7p/Z4nhglwGiivTA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:8b:a6:fe:81:3c:36:7a:ce:1e:cc:a4:24:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
        Validity
            Not Before: May 13 02:00:38 2026 GMT
            Not After : May 14 02:00:38 2026 GMT
        Subject: CN=683a8eafb32bd51a9feff50d488aee1b4778d560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:7d:6d:0f:e7:b2:a0:13:82:eb:7e:e9:85:
                    a1:51:b6:91:ae:45:4a:53:54:09:e2:d6:8e:a0:d6:
                    10:91:69:fb:e9:01:a5:70:16:44:29:4b:b4:ff:dd:
                    52:9f:b9:87:13:fc:28:85:32:05:61:3f:2b:52:7d:
                    41:a1:8d:3d:0b:39:2c:1e:2b:cc:7c:67:39:bf:d6:
                    34:c6:dc:36:d2:e8:29:bc:40:df:2f:cf:37:01:84:
                    3c:26:a1:7c:c5:c4:b6:b9:df:7a:b0:dd:1a:5b:88:
                    a4:d0:f5:7a:9f:63:db:1c:e2:f8:e5:09:7c:9d:4b:
                    e8:ae:43:c7:5b:89:6d:00:65:b4:09:bd:63:8d:9a:
                    bc:0f:4a:85:38:80:8b:e1:9c:8b:6c:d9:38:d8:ed:
                    7d:b4:25:08:8f:0a:9b:75:fb:e6:9d:b5:cc:b8:4c:
                    87:0e:bb:68:58:38:a3:7a:57:ce:d6:91:1d:ca:dd:
                    e8:63:82:11:81:45:15:66:85:5b:05:89:29:c7:a0:
                    b1:3a:4c:04:2d:36:0c:8f:1a:22:bf:01:ee:73:71:
                    c1:6e:59:e5:fc:c7:c4:00:14:cc:1f:af:e7:9c:e6:
                    c3:31:22:5b:81:3d:6f:af:4f:0f:3b:0b:8a:7e:bf:
                    ba:fd:28:75:68:4d:39:87:7a:ad:f2:fb:18:2c:1e:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3A:8E:AF:B3:2B:D5:1A:9F:EF:F5:0D:48:8A:EE:1B:47:78:D5:60
            X509v3 Authority Key Identifier:
                keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:0d:46:f3:3a:39:c7:fc:76:a1:4e:42:d2:13:21:0a:d3:
         e3:b0:5f:d1:b6:ff:c8:de:ff:6f:0f:23:24:dc:f0:fd:32:b8:
         87:35:48:94:68:2c:3b:ca:9e:8d:f4:3b:2a:41:29:ea:2b:fc:
         8e:8f:a0:bb:93:51:6f:b0:3b:bf:3e:44:4a:21:a6:8f:ca:00:
         19:76:d0:14:59:60:a6:a8:81:6d:64:e8:dd:c5:53:61:d7:94:
         e0:fa:4b:49:89:d2:c0:35:fa:de:58:b9:b0:19:ae:58:3b:ab:
         db:13:47:54:f2:94:dc:12:45:97:13:5a:79:b3:c0:3b:e4:fd:
         43:d0:df:34:b1:a1:8d:30:c2:0f:13:ef:dc:5c:00:16:f2:0d:
         2e:04:2f:39:fd:d0:b1:fc:da:24:1c:bd:4a:ca:d8:c9:2f:f6:
         54:91:b3:fd:fa:ff:e8:89:8e:9e:de:38:ff:67:de:dc:7e:34:
         6a:00:c4:76:9f:f5:e2:2f:53:4f:0c:c3:a6:8d:c2:7f:b1:d2:
         bb:21:c7:d1:f2:ee:d0:4f:13:f8:05:4b:bd:82:21:8a:40:1d:
         6c:8f:be:60:82:ff:8f:aa:f5:77:a4:71:6f:9b:68:44:d1:0a:
         8b:56:65:53:7d:3c:ef:04:c6:58:a6:2c:52:87:45:f2:5f:cb:
         a8:84:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:51 2026 by rpki-client