Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          490LUEVg20buThg5mvscLpKSKxDluf6D1v2ILMZx2LI=
Subject key identifier:   2C:0C:DC:72:AA:3F:C4:1A:F9:99:32:44:1A:EF:62:9E:0B:22:D5:3A
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       019E31F3C707A94316C2643A7AA5F3A77931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          1761
Signing time:             Sat 16 May 2026 18:02:00 +0000
Manifest this update:     Sat 16 May 2026 18:02:00 +0000
Manifest next update:     Sun 17 May 2026 18:02:00 +0000
Files and hashes:         1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: aNcJs4N4zPj6+0ysqE0JgNlT6a+01enM304WMmuzM8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:c7:07:a9:43:16:c2:64:3a:7a:a5:f3:a7:79:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: May 16 18:02:00 2026 GMT
            Not After : May 17 18:02:00 2026 GMT
        Subject: CN=2c0cdc72aa3fc41af99932441aef629e0b22d53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:28:6c:91:dc:be:f6:b8:f5:81:d3:03:e5:
                    fa:62:72:48:40:b8:6d:99:ec:bd:5d:b0:d3:d9:06:
                    9b:3a:67:60:d2:b5:36:69:66:73:b6:79:8c:f1:e9:
                    e0:8f:81:7e:d5:7f:dc:61:3a:52:e7:8e:be:a2:9a:
                    2e:9e:41:95:6d:67:2c:e0:89:c5:1c:19:44:a8:94:
                    97:6a:09:79:31:9a:aa:e7:59:05:d7:e5:3f:09:71:
                    f5:55:3f:84:e2:66:9b:8b:87:bb:07:6b:3a:23:bd:
                    ae:e0:c2:96:0d:56:2a:f2:32:f2:f7:93:d7:ff:ea:
                    f0:6b:49:d7:dc:28:48:57:53:f1:3f:28:3e:e2:79:
                    2e:5b:6c:11:08:62:7c:7c:4f:2c:5a:d5:30:2c:d2:
                    be:cc:78:7c:b2:02:bf:dd:22:4a:e4:d8:02:86:6e:
                    be:69:11:86:ec:fd:7c:67:29:4e:98:26:09:65:6c:
                    fa:b5:1a:b0:e2:aa:68:f2:af:29:5f:74:e6:d6:2e:
                    8c:cb:54:f3:94:ef:59:e7:6a:84:b8:9e:33:22:d7:
                    33:14:a7:b3:8b:0b:8f:71:0a:a2:97:c6:b9:5a:38:
                    76:4e:63:1b:3c:fb:42:b7:0a:e2:52:6b:20:1a:c1:
                    f2:9b:82:18:b2:57:9f:d7:1e:56:67:7f:2e:68:72:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0C:DC:72:AA:3F:C4:1A:F9:99:32:44:1A:EF:62:9E:0B:22:D5:3A
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1f:6d:7b:e5:0d:ef:12:6c:e2:00:21:00:42:c3:12:41:6f:
         2c:16:8a:cc:4f:01:bc:4c:9f:a6:da:fa:cd:c2:75:34:22:52:
         0e:50:c7:9e:ec:10:65:12:02:75:4b:cf:27:d1:23:b3:1f:89:
         9b:ba:4f:99:f7:fc:da:45:7b:3a:a7:af:61:de:c7:2b:b3:58:
         83:41:be:ea:69:ad:b6:a7:3d:a5:db:58:a2:43:6a:a1:1a:e9:
         eb:7e:64:92:10:02:90:25:d3:3f:7f:0f:9f:48:ee:92:6a:3d:
         0b:d1:d4:07:f9:88:b5:e6:e0:c5:8e:57:11:68:6c:db:22:56:
         33:3b:7e:18:8b:d2:c6:b6:2a:ce:be:59:dd:95:a2:52:04:77:
         32:2f:8f:4c:ea:6d:dd:73:3e:83:78:c7:45:53:16:78:71:1b:
         b3:f3:b2:61:6b:59:76:b7:ba:f4:76:70:89:53:1b:62:ec:c0:
         35:f1:3f:46:02:ce:8e:9d:5b:4a:8d:f9:92:ae:2c:70:6d:84:
         52:40:4d:36:b6:9c:7f:e3:b5:b3:df:d4:32:5f:21:71:49:a6:
         de:1a:d7:02:0b:17:45:2e:9d:56:6f:4a:ad:bf:fb:a0:b9:96:
         66:41:2b:5a:ec:de:d3:0e:83:96:e9:45:00:16:11:4c:d3:91:
         33:b6:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:22:53 2026 by rpki-client