Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File:                     ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier:          elYk6odUbr/QR+gjLU20R1CsEGA6OiCi8TDjVfQKTf0=
Subject key identifier:   92:38:CB:80:C4:A3:54:EB:B3:A2:25:E8:3E:DC:45:EC:97:51:EC:16
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer:       /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial:       019E295DE0332C81E1071D84DF7179EF3C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number:          190E
Signing time:             Fri 15 May 2026 02:01:18 +0000
Manifest this update:     Fri 15 May 2026 02:01:18 +0000
Manifest next update:     Sat 16 May 2026 02:01:18 +0000
Files and hashes:         1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
                          2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
                          3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: 5reQuA+SFka2vZM8zXpcYbwsTwcS0kDAlB7d3CZZnVA=)
                          4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:e0:33:2c:81:e1:07:1d:84:df:71:79:ef:3c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
        Validity
            Not Before: May 15 02:01:18 2026 GMT
            Not After : May 16 02:01:18 2026 GMT
        Subject: CN=9238cb80c4a354ebb3a225e83edc45ec9751ec16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:82:5f:db:9d:57:40:32:75:7d:d3:9a:2f:
                    3f:75:aa:ad:8d:ba:29:98:a4:68:88:f3:d4:45:19:
                    53:bb:00:42:23:46:17:a0:10:ce:02:af:18:f2:f1:
                    28:79:f6:86:bf:8f:59:27:74:ee:61:d5:d1:9d:39:
                    f8:b3:5f:d8:bb:d7:aa:44:2d:c8:44:f3:bf:52:a0:
                    88:bd:46:bc:6d:0c:23:02:6f:02:fb:f4:71:d1:55:
                    35:35:29:88:57:65:9c:12:b6:62:fb:e6:ed:c4:40:
                    f0:85:ad:c0:05:18:cf:15:36:28:71:c8:bc:02:c4:
                    06:95:f3:68:14:29:d1:bf:c0:b9:51:96:36:3d:38:
                    6d:e2:96:d1:22:08:a6:c1:a4:5a:ed:f7:0a:0d:34:
                    25:48:42:09:8c:23:1f:64:29:2c:c9:f2:94:34:5a:
                    e1:93:5f:17:4c:d8:03:da:48:58:a2:d0:6e:48:0a:
                    fd:12:89:89:ce:f5:b3:76:ae:dd:fb:3d:e0:34:bf:
                    70:fb:e2:b5:02:2b:a4:4b:52:b5:21:c6:1f:6e:3c:
                    0b:0c:f2:54:b5:97:86:82:3a:3f:66:02:46:13:9a:
                    64:f7:90:b2:d6:cf:71:7b:8f:55:10:ee:87:1c:52:
                    b4:05:ba:70:6c:3b:d1:a7:40:ef:0c:dd:84:b5:7b:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:38:CB:80:C4:A3:54:EB:B3:A2:25:E8:3E:DC:45:EC:97:51:EC:16
            X509v3 Authority Key Identifier:
                keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2c:d3:61:02:81:56:68:7c:b8:62:80:f8:f2:60:1e:fd:23:
         43:de:b6:83:65:0b:72:82:5a:e1:2b:c5:a0:09:2c:8d:dc:8c:
         4d:1b:5d:7b:48:ab:30:87:26:59:b4:c9:78:a1:17:81:23:3d:
         a4:1d:bf:fe:8c:1f:fc:ff:51:ca:dc:88:d7:d8:18:67:fe:6d:
         bd:8b:05:89:e6:1f:2b:9d:54:93:b9:6f:2f:91:71:e0:18:de:
         6b:bf:53:09:9d:35:ea:2f:2b:98:bd:d3:b1:04:4f:e2:34:e7:
         62:08:09:d0:69:40:3b:b1:ed:8b:75:24:3e:5a:71:a0:9a:8b:
         90:b4:fd:ba:18:76:25:96:cb:d9:cb:b6:4c:17:64:e0:46:03:
         d6:97:d3:1f:30:08:76:3b:84:c7:e3:7a:70:ea:da:c0:6c:04:
         4f:c8:5f:bb:bf:ec:f2:6f:55:0f:46:62:ad:94:4b:78:58:6d:
         3f:66:ad:71:db:8a:6f:77:92:45:a6:0b:34:f9:1e:ca:11:e1:
         b2:92:d3:00:e0:fe:61:c0:46:b6:b1:31:ec:80:88:78:bf:91:
         ad:c0:da:26:38:e1:f6:a8:47:2b:0d:2c:09:37:af:22:8a:63:
         08:23:10:99:32:c4:70:ff:19:b9:d1:46:d2:0c:b8:c8:04:6a:
         72:da:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:55:16 2026 by rpki-client