Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File:                     Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier:          Xu9ZoS/JGAxUNFtPH5B4KPcntfmj4i0rHUMu7PPQF38=
Subject key identifier:   48:73:33:DD:24:45:B7:54:8A:A9:3E:E8:92:AB:84:00:0B:22:CD:A0
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer:       /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial:       019E314E25D40C48402D5B4AFFC938DC7D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 15:01:05 +0000
Manifest this update:     Sat 16 May 2026 15:01:05 +0000
Manifest next update:     Sun 17 May 2026 15:01:05 +0000
Files and hashes:         1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
                          2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: STP0sVOB2u/K81EO81JhdyetNcDhBpHH/edYMEBmjUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:25:d4:0c:48:40:2d:5b:4a:ff:c9:38:dc:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
        Validity
            Not Before: May 16 15:01:05 2026 GMT
            Not After : May 17 15:01:05 2026 GMT
        Subject: CN=487333dd2445b7548aa93ee892ab84000b22cda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:64:e1:d6:c9:ba:e7:62:85:26:59:82:b2:38:
                    21:d1:80:36:3c:03:ed:1f:bd:02:43:a2:ee:55:b1:
                    7a:6d:b3:6e:ea:00:12:25:3e:df:4f:6b:5e:42:e2:
                    68:71:7d:97:36:9b:b7:83:97:10:c9:55:c6:78:a4:
                    16:70:4e:1a:a3:ec:0a:b5:90:09:57:e4:5c:df:e4:
                    30:ee:a3:36:14:a2:cc:a8:47:a7:1d:67:90:be:2b:
                    28:b9:5f:c9:b9:41:51:34:df:13:b5:e7:e8:9c:db:
                    89:65:cf:3a:cd:2c:dd:31:a7:01:56:74:29:91:75:
                    95:69:0b:f5:36:38:53:c8:13:f6:16:bd:04:3e:a7:
                    92:4e:6f:20:c4:b3:90:82:fd:51:c3:2b:79:87:8c:
                    9b:c0:0b:d2:9c:27:a6:13:53:bf:63:4b:d4:bb:45:
                    29:5b:a3:7d:eb:24:f0:44:52:da:19:af:67:ec:21:
                    bc:f3:e7:2a:08:e4:60:17:04:4e:94:b3:ea:97:1e:
                    82:5b:ff:94:b5:3f:89:37:aa:cd:c4:66:a3:b7:61:
                    c4:bd:01:4f:fb:66:fb:2f:7b:8b:a2:96:d1:5b:07:
                    41:65:37:45:23:3f:21:26:cd:d4:81:d5:07:24:57:
                    f0:c9:fb:f4:49:f2:03:7c:f4:d8:b2:52:97:0b:cc:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:33:DD:24:45:B7:54:8A:A9:3E:E8:92:AB:84:00:0B:22:CD:A0
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:da:54:a4:f7:be:da:7a:8c:88:1a:69:3a:91:d5:99:5a:bb:
         ac:0c:55:69:80:82:43:94:50:b2:5f:88:7d:5f:e3:49:31:ce:
         f0:25:65:f0:f9:e8:b6:50:94:e4:9f:16:4a:b0:ab:13:8b:8a:
         d0:11:99:8d:44:38:42:11:cf:1e:74:65:fa:6b:5b:a0:ed:66:
         44:63:b5:e0:ca:d1:56:76:4c:bd:28:35:96:b4:05:ca:3b:24:
         ed:45:33:23:6e:cb:39:6f:9b:f2:79:4d:f1:d0:09:95:05:03:
         6a:d5:4b:e3:8a:85:4e:86:e7:a1:9e:20:b9:46:02:41:d8:1d:
         23:a5:fc:d9:a4:3c:ff:f1:46:12:5a:ad:c2:9d:1e:88:f4:f3:
         c5:97:85:eb:77:c0:22:28:48:f7:cc:3b:ec:50:8f:30:a2:54:
         94:4b:fd:fd:12:20:bc:ac:a9:d4:d3:87:07:17:ee:af:f7:ce:
         6f:b9:69:0c:de:7d:62:3f:c9:c3:c3:16:67:dd:b2:0e:8d:44:
         f7:1e:ae:21:b7:ff:28:c5:50:a8:f5:aa:b6:a9:04:24:a5:12:
         14:81:f1:7d:2c:69:1c:8f:f5:d9:7b:a5:8a:e6:d7:05:20:ac:
         f3:75:c6:d7:69:54:3d:0f:b1:83:72:8b:78:1e:74:4a:cf:23:
         f2:a8:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:28 2026 by rpki-client