Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          ApU2fzwdZ5NRQC5+PH0pc5cmBZWHzmS9cFZxjT1G5x0=
Subject key identifier:   31:16:4B:92:E8:02:9B:70:1F:70:A8:81:59:0F:C6:1A:C5:BA:5A:0F
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       019DED48AC927B28BDED18A8D37232D8EFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          18EE
Signing time:             Sun 03 May 2026 10:00:56 +0000
Manifest this update:     Sun 03 May 2026 10:00:56 +0000
Manifest next update:     Mon 04 May 2026 10:00:56 +0000
Files and hashes:         1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
                          2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
                          3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: LaRchhHZkh8M9TYouovXzhWbwF64fHy6pfuH7oBD72o=)
                          4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:48:ac:92:7b:28:bd:ed:18:a8:d3:72:32:d8:ef:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: May  3 10:00:56 2026 GMT
            Not After : May  4 10:00:56 2026 GMT
        Subject: CN=31164b92e8029b701f70a881590fc61ac5ba5a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:3f:54:1b:19:8f:f4:00:cc:66:88:30:f4:
                    c1:d7:7c:11:5a:af:db:7a:bd:3c:b0:25:86:37:57:
                    23:bb:fc:fa:5d:7a:b0:1c:10:d4:32:2a:1d:8d:83:
                    46:23:24:ff:a7:2d:b9:37:c9:e6:d4:5f:20:47:00:
                    b8:0a:96:4b:31:f7:cd:39:ba:5f:01:d3:e3:fe:9c:
                    9d:af:91:f2:f8:32:c9:cc:33:83:c3:c6:f4:68:68:
                    ac:ad:40:ac:aa:c8:db:94:e3:7e:20:e8:9d:77:74:
                    1a:4d:0b:b2:5b:31:ae:3d:d5:a2:5e:56:41:dc:a0:
                    b9:fc:da:61:d6:57:49:fa:e1:e6:aa:c9:5c:32:42:
                    d1:cd:b0:68:fa:02:28:16:7e:a2:d4:11:37:bf:38:
                    fb:58:ac:bf:9f:49:03:83:bd:67:ae:cd:e6:c4:7f:
                    c2:22:7a:1c:ed:e3:17:67:e8:3e:61:44:e7:30:5b:
                    a6:9c:3b:cf:68:1e:e4:5e:5f:c4:61:f8:3b:7e:1c:
                    5f:1e:3d:3f:42:b7:e5:c9:4a:79:96:12:b3:6e:4f:
                    d6:00:80:2b:51:e2:a2:35:cc:b3:01:d8:c4:9b:c3:
                    17:7f:57:8e:cb:d7:8b:2a:23:8f:99:f2:38:af:fb:
                    13:c9:74:75:79:f2:1f:b1:a3:a0:fd:1e:12:ae:d3:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:16:4B:92:E8:02:9B:70:1F:70:A8:81:59:0F:C6:1A:C5:BA:5A:0F
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:9c:f7:ac:90:71:33:c9:c6:b7:56:3e:97:3e:90:52:0c:
         1e:ed:66:90:7e:e0:8d:31:de:b4:ca:f2:f4:ae:06:47:06:c5:
         32:af:5b:3b:25:ac:73:56:3e:19:ab:40:5c:18:4c:e2:d9:de:
         12:14:2a:5a:78:be:91:04:2f:d1:f3:7d:a0:4e:76:b3:fe:71:
         c6:ed:fc:b8:62:7f:37:88:67:5f:41:52:32:9d:76:93:86:fb:
         61:5b:fb:d7:b0:35:de:21:2d:31:94:2b:6b:46:50:75:f4:a6:
         85:34:6b:ec:f8:4d:2a:cb:cc:1b:a7:56:52:96:81:33:da:78:
         ef:c2:06:11:95:49:34:40:1f:29:20:e3:ed:1a:a0:98:de:5a:
         5f:b1:35:66:e5:7e:74:fd:97:60:e0:21:39:f0:11:25:4b:de:
         95:0c:83:98:31:38:74:fa:34:44:ff:12:71:cb:b7:4f:23:16:
         65:9f:f8:eb:b9:03:11:c9:8b:55:e2:05:8d:28:19:ee:5a:1d:
         0a:de:70:51:6e:92:df:19:9c:b6:9c:5a:a2:10:b8:b5:dc:b6:
         58:79:e6:c4:77:1e:26:5b:65:93:f8:8c:bf:2a:4f:5b:0f:bb:
         92:49:a3:b9:98:dd:54:1d:19:be:6b:b6:91:df:85:4f:df:f0:
         23:2f:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:34:45 2026 by rpki-client