Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File:                     zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier:          5DCxVJaQYK6xDDtidqhfh9S1RsD/2TM1pDt1k+0bg4s=
Subject key identifier:   B6:A6:28:B3:F9:4D:9E:15:7E:10:C8:82:DA:FF:DA:A5:0C:0E:0B:1F
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer:       /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial:       019E1D9081A1694039FB690DF9A8686F198D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number:          0791
Signing time:             Tue 12 May 2026 19:01:10 +0000
Manifest this update:     Tue 12 May 2026 19:01:10 +0000
Manifest next update:     Wed 13 May 2026 19:01:10 +0000
Files and hashes:         1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
                          2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
                          3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: u9fGAxHBQrd5X+FtJdnT70IvIZiRgXMvvXDwnQSLUi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:81:a1:69:40:39:fb:69:0d:f9:a8:68:6f:19:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
        Validity
            Not Before: May 12 19:01:10 2026 GMT
            Not After : May 13 19:01:10 2026 GMT
        Subject: CN=b6a628b3f94d9e157e10c882daffdaa50c0e0b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:f4:7e:19:ec:b2:74:12:1a:57:77:08:47:
                    18:5b:a7:b2:a1:a9:e6:dd:56:9a:5b:ae:41:f1:54:
                    a2:c3:7d:e3:29:93:37:28:92:be:90:00:2d:c8:13:
                    d4:3d:1e:bc:dd:c1:20:ba:a0:77:35:8f:b1:b5:e7:
                    8f:dd:24:63:86:97:8f:8e:e5:8b:28:9f:89:2a:65:
                    90:58:af:5b:53:70:71:10:80:83:84:fb:b7:04:56:
                    15:71:d2:96:4e:ea:b0:7c:76:c1:aa:1e:51:ce:8f:
                    b1:94:30:1f:bf:e9:d5:19:7c:e1:38:95:50:ce:80:
                    74:4c:26:5f:65:4f:bb:2f:48:b9:cf:7e:3f:a0:1e:
                    15:fe:7b:d5:d1:12:04:bb:b9:51:ff:71:d5:6f:48:
                    1a:9e:a2:b2:68:2f:eb:94:70:24:d8:46:f2:91:2a:
                    64:c6:34:ce:2d:a6:b4:b7:4b:20:f7:84:4e:b8:4c:
                    be:f9:3c:8d:15:33:e2:a3:a8:5d:eb:d9:ea:69:26:
                    d8:94:01:00:2c:a9:19:38:e0:ca:c7:a4:31:e9:63:
                    8b:0f:30:ce:9c:bf:a6:00:c8:9b:e3:84:83:74:05:
                    e0:cc:0a:1f:30:58:1c:d9:a2:0c:3d:d1:7f:63:05:
                    5a:73:c3:7b:3d:93:24:20:89:26:7c:d3:f7:f1:bb:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A6:28:B3:F9:4D:9E:15:7E:10:C8:82:DA:FF:DA:A5:0C:0E:0B:1F
            X509v3 Authority Key Identifier:
                keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:17:75:57:c2:c9:8f:66:0b:30:d0:1b:5c:39:aa:d7:f8:
         5c:82:67:ca:9b:24:c6:b8:81:7a:65:25:67:aa:a7:6f:a5:6f:
         97:d4:e8:86:14:29:d5:64:54:37:9a:f0:8d:ea:b6:d5:b0:5f:
         61:3b:6d:eb:96:f6:8b:de:ff:de:09:f2:93:73:21:f0:2b:10:
         b0:69:5a:21:28:cf:c9:11:38:12:3f:91:1f:10:68:42:af:56:
         19:53:aa:1b:04:6d:6f:eb:ec:41:d7:85:48:03:a3:2b:c5:36:
         20:24:f1:35:41:22:82:43:4c:f8:58:09:45:1f:18:e6:ed:a8:
         5c:3e:f9:38:82:63:2a:9a:3b:8c:c0:39:6f:3d:e1:fd:3e:a7:
         d7:1a:c1:c8:f5:14:5f:8d:f6:22:86:a2:87:b1:38:c9:4c:38:
         2d:15:9b:ab:65:78:73:34:9e:a4:ba:ed:43:cb:a1:48:14:09:
         4c:7e:86:88:6c:d8:9c:b8:2a:8b:98:00:9e:62:f9:91:59:8e:
         33:38:72:58:71:fb:48:34:eb:98:a5:6b:ea:f4:2a:e4:8c:b7:
         db:d3:98:dc:35:73:b7:5e:45:ab:16:89:33:19:bf:e3:68:73:
         26:1d:3b:2b:75:69:e7:ac:a1:e2:d4:79:c7:79:b1:44:ae:77:
         d2:88:fc:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkIGhaUA5+2kN+ahobxmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk4ZjdmM2Q1YjNiODJkY2ZkZWM5MDJiMDNmNzMzZDg5
NWRhZTcwHhcNMjYwNTEyMTkwMTEwWhcNMjYwNTEzMTkwMTEwWjAzMTEwLwYDVQQD
EyhiNmE2MjhiM2Y5NGQ5ZTE1N2UxMGM4ODJkYWZmZGFhNTBjMGUwYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcb0fhnssnQSGld3CEcYW6eyoanm
3VaaW65B8VSiw33jKZM3KJK+kAAtyBPUPR683cEguqB3NY+xteeP3SRjhpePjuWL
KJ+JKmWQWK9bU3BxEICDhPu3BFYVcdKWTuqwfHbBqh5Rzo+xlDAfv+nVGXzhOJVQ
zoB0TCZfZU+7L0i5z34/oB4V/nvV0RIEu7lR/3HVb0ganqKyaC/rlHAk2EbykSpk
xjTOLaa0t0sg94ROuEy++TyNFTPio6hd69nqaSbYlAEALKkZOODKx6Qx6WOLDzDO
nL+mAMib44SDdAXgzAofMFgc2aIMPdF/YwVac8N7PZMkIIkmfNP38bsIEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLamKLP5TZ4VfhDIgtr/2qUMDgsfMB8GA1UdIwQY
MBaAFM05j389WzuC3P3skCsD9zPYldrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAt
YWM1OGIyODdmYjY0LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAtYWM1OGIyODdmYjY0
LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhEXdVfC
yY9mCzDQG1w5qtf4XIJnypskxriBemUlZ6qnb6Vvl9TohhQp1WRUN5rwjeq21bBf
YTtt65b2i97/3gnyk3Mh8CsQsGlaISjPyRE4Ej+RHxBoQq9WGVOqGwRtb+vsQdeF
SAOjK8U2ICTxNUEigkNM+FgJRR8Y5u2oXD75OIJjKpo7jMA5bz3h/T6n1xrByPUU
X432Ioaih7E4yUw4LRWbq2V4czSepLrtQ8uhSBQJTH6GiGzYnLgqi5gAnmL5kVmO
MzhyWHH7SDTrmKVr6vQq5Iy329OY3DVzt15FqxaJMxm/42hzJh07K3Vp56yh4tR5
x3mxRK530oj8eg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:44:09 2026 by rpki-client