Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          BVqFtJdZFq/DiAYN/s4hM2AFoywyL5sPoacIs/z3Bhw=
Subject key identifier:   67:F4:87:A4:B2:44:A7:AE:34:25:5A:BE:0C:5B:D5:23:70:5E:4A:CF
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       019E3260D8AC7DC9D098312FD1581E52B82D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          11EB
Signing time:             Sat 16 May 2026 20:01:08 +0000
Manifest this update:     Sat 16 May 2026 20:01:08 +0000
Manifest next update:     Sun 17 May 2026 20:01:08 +0000
Files and hashes:         1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
                          2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: W8nyVwfYydECGbHdqvzTbK3eN+YOLB7aTkfJUEQHRBA=)
                          3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:60:d8:ac:7d:c9:d0:98:31:2f:d1:58:1e:52:b8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: May 16 20:01:08 2026 GMT
            Not After : May 17 20:01:08 2026 GMT
        Subject: CN=67f487a4b244a7ae34255abe0c5bd523705e4acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:29:be:29:42:7e:70:84:c8:d5:e7:7a:fa:
                    fb:9b:d5:e0:73:27:7f:56:e5:54:eb:56:5b:8a:26:
                    53:f3:08:9b:f6:38:a5:94:95:33:e8:ca:19:ce:2e:
                    2f:1f:65:81:82:b9:25:7a:de:25:e8:e7:64:bf:01:
                    f4:1e:72:94:25:a0:9b:ce:6a:7b:ab:cd:ff:b6:fe:
                    03:fd:4b:79:a5:de:17:51:be:3d:0c:22:5e:88:47:
                    52:c0:3a:a3:a3:fe:72:c3:a5:da:d0:68:9b:cf:c1:
                    b6:83:1e:ef:bd:aa:da:75:56:59:7d:43:59:1b:94:
                    dd:13:9d:97:f8:a9:60:7d:6f:27:6c:23:4b:d8:70:
                    3f:7c:16:70:e0:bf:89:ea:06:ce:90:d0:3c:35:b7:
                    ef:c4:61:88:21:65:34:3d:08:32:ce:dd:19:c5:37:
                    8a:42:17:70:56:7a:8a:ca:ae:eb:d1:0f:8d:17:6e:
                    fa:82:79:b4:ac:0a:b6:1a:7d:71:98:d6:db:8a:fe:
                    4c:fc:e4:07:7c:3a:9c:c5:84:c1:ec:aa:08:e1:8b:
                    2c:b2:2f:64:6b:20:8c:e5:b5:33:08:6e:c3:c1:4a:
                    0a:50:2d:18:ea:2e:5d:ab:1e:1b:84:fc:2d:41:cf:
                    a6:0c:56:22:33:15:49:b4:5b:9e:dd:42:cb:be:a9:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F4:87:A4:B2:44:A7:AE:34:25:5A:BE:0C:5B:D5:23:70:5E:4A:CF
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:15:e9:a8:0f:16:d2:4b:3a:b6:bf:bf:67:ff:e1:0e:57:
         ba:6d:74:8e:e2:b1:56:f9:d2:73:dd:54:74:56:f6:2d:2b:d8:
         66:68:9d:00:77:bb:fd:25:12:61:3d:c9:8d:64:07:d5:a5:e2:
         79:9d:72:64:26:2d:43:95:a9:26:83:67:13:ac:32:d2:ec:31:
         f9:11:37:f3:87:7c:dc:c6:aa:f9:62:ab:5e:ab:d3:eb:7f:ce:
         4c:ab:66:16:a7:83:38:d6:f2:1d:cd:26:17:14:56:cd:7e:53:
         77:53:18:49:6c:cc:06:a9:7d:1a:c4:1b:73:58:a4:b7:50:f5:
         d9:8f:03:e4:64:60:cf:3f:6c:1b:a3:68:4f:77:7a:4a:9e:cf:
         39:22:08:a8:20:69:3f:1d:d1:0a:19:46:05:d1:15:1a:19:9e:
         d5:23:b9:8c:22:50:b4:4f:6d:df:2e:42:06:6b:f0:94:ab:fc:
         df:a3:dd:2f:37:25:4a:eb:81:e4:db:09:c6:d6:8f:4c:ba:b0:
         4f:b0:f2:89:04:26:f4:c6:3d:e4:6e:3a:99:5a:1f:74:8f:7c:
         8b:8c:98:ae:a2:9e:99:84:23:bf:9d:fe:3e:98:0e:c8:dc:98:
         f7:d8:f5:03:7b:de:a3:2a:ea:7a:9c:0a:09:0c:c0:ee:b5:9b:
         ac:b1:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:05 2026 by rpki-client