Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File:                     cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier:          ghmLGUGQqQOjW1RtzY7llFQ+7WNFCoMzyPetM8vAdAs=
Subject key identifier:   E5:7F:B3:A7:58:B1:F2:4D:4C:8C:36:1B:6F:22:1C:8F:80:0B:49:C2
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer:       /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial:       019E1F7EF89988A09FA22DD24393AE41328A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number:          1929
Signing time:             Wed 13 May 2026 04:01:15 +0000
Manifest this update:     Wed 13 May 2026 04:01:15 +0000
Manifest next update:     Thu 14 May 2026 04:01:15 +0000
Files and hashes:         1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
                          2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
                          3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: 7NjLG8Uf/7zeLVIDHrh8RnoD7snS7qgZ+yBmss287YA=)
                          4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:f8:99:88:a0:9f:a2:2d:d2:43:93:ae:41:32:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
        Validity
            Not Before: May 13 04:01:15 2026 GMT
            Not After : May 14 04:01:15 2026 GMT
        Subject: CN=e57fb3a758b1f24d4c8c361b6f221c8f800b49c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:2b:a9:1d:1a:f7:21:6b:26:2d:63:1e:d8:
                    55:fa:23:90:f5:cd:65:a5:48:08:0b:41:e5:ee:39:
                    71:d4:5f:95:b8:5a:0e:1a:b1:b6:bd:f8:c7:5c:37:
                    2a:1c:0b:54:5b:b5:0e:56:8b:ee:ea:80:ca:d7:19:
                    49:2a:f5:93:49:da:8b:6a:4a:74:ad:f0:3c:40:76:
                    6b:36:bd:23:60:44:a7:ae:43:c7:cf:a3:90:0f:17:
                    f9:0b:e9:4a:28:9c:dd:5a:c8:b4:4d:3e:ef:91:e5:
                    92:65:ef:55:ed:cf:d0:5a:b4:f7:01:0d:c4:75:42:
                    9e:6d:b1:8e:2f:a9:f6:47:a9:4a:78:12:b9:04:ab:
                    14:29:98:ec:8f:93:8e:53:44:13:47:6b:d3:b5:8c:
                    d0:74:74:36:8c:75:13:21:65:5b:f8:15:c4:a8:10:
                    03:b4:ea:89:ac:61:c7:18:04:16:2b:75:54:1c:d2:
                    48:ab:ce:8a:ba:f1:15:2e:69:f3:99:e8:22:d3:98:
                    6d:9c:46:a7:8f:4b:c0:12:5e:17:81:a3:ca:31:d2:
                    2f:c5:19:ff:6e:5f:f1:4a:4e:98:46:9c:c4:f4:f8:
                    1e:99:4d:98:f6:74:35:fb:c2:5d:4b:a6:2d:8c:ca:
                    5a:ec:af:99:08:88:8d:49:f5:1b:ae:a5:6f:35:22:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7F:B3:A7:58:B1:F2:4D:4C:8C:36:1B:6F:22:1C:8F:80:0B:49:C2
            X509v3 Authority Key Identifier:
                keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:50:3c:a5:b6:2c:44:eb:f6:df:00:e5:e3:df:49:99:5e:
         4a:92:32:06:ee:27:d7:95:4c:1f:c4:7d:8c:51:16:b1:f8:b9:
         6b:40:02:e1:da:22:0b:07:09:c9:25:e3:7f:15:b2:83:d2:79:
         f4:a3:74:0f:64:32:53:28:0f:cb:63:ce:68:a0:18:92:6c:c4:
         e1:38:9f:70:fd:36:69:21:65:3e:e1:3b:7b:18:70:cf:f7:f9:
         aa:8d:48:c3:50:34:05:d1:3a:be:0b:2f:58:f6:d6:ec:7c:2d:
         a4:28:d8:65:47:0d:f6:87:9d:26:86:6c:47:48:76:3d:3f:f5:
         08:c7:a9:dd:17:63:54:ff:bb:4e:a3:34:6e:e1:68:74:e1:a5:
         c5:0c:56:d1:b5:1f:63:cb:7a:dc:d6:2b:c0:69:96:12:cf:ff:
         93:a1:65:e9:f3:99:73:86:8e:87:53:04:27:51:ab:df:9f:95:
         57:29:5e:0e:5d:e8:30:29:c9:fa:1b:69:2b:f3:1c:7f:b0:bd:
         83:5b:f7:49:2b:07:b1:7b:5d:6d:e1:6e:7c:60:ab:a8:86:7d:
         10:c6:12:ee:b4:be:de:93:e9:b8:87:b2:9d:06:03:f1:af:63:
         0f:1b:48:96:26:c7:6e:e4:88:1e:d4:36:0c:bb:4d:d4:b4:cd:
         fc:74:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:31 2026 by rpki-client