Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          wSLBIpkABwKbKJPxWcI5CPk7NAbWDROGY1D3n4q1rYk=
Subject key identifier:   8A:FF:AA:22:B3:91:2C:75:23:80:5A:7C:F0:56:C3:27:3B:6B:F0:13
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019DFF1810FB82377E0E5DE5454B90692DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0924
Signing time:             Wed 06 May 2026 21:01:00 +0000
Manifest this update:     Wed 06 May 2026 21:01:00 +0000
Manifest next update:     Thu 07 May 2026 21:01:00 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          3: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: JLk2XhVWnlX/roTC5g6yqM31MZItKoXdeG6zRFqpBkY=)
                          4: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
                          5: yMfq4tl4tsm_eKrlq_IfqdTQXZM.roa (hash: nDCkpydlNUMF8c0eeQ/zyRieQdsyPAVg6iJ/0hF8kd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ff:18:10:fb:82:37:7e:0e:5d:e5:45:4b:90:69:2d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: May  6 21:01:00 2026 GMT
            Not After : May  7 21:01:00 2026 GMT
        Subject: CN=8affaa22b3912c7523805a7cf056c3273b6bf013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:13:20:22:25:e3:c7:05:98:64:38:ef:31:
                    51:00:5a:0c:64:3a:bf:87:d8:ae:1e:f6:ed:27:83:
                    6b:be:0e:e8:87:27:a8:14:c7:4b:d5:0e:bb:cc:bc:
                    94:4a:1e:6a:dd:af:7f:e6:83:e0:7f:e3:90:6d:5b:
                    8f:c5:38:0e:66:d7:07:e9:3c:73:76:58:76:7b:e4:
                    52:20:46:07:13:8a:71:a3:a2:9d:ec:6e:4c:9a:a1:
                    11:7d:36:c8:4d:00:8d:89:33:26:e7:68:40:30:04:
                    71:fe:17:95:96:03:23:e3:a6:85:29:68:81:20:88:
                    cd:e5:e6:a5:a5:3a:a2:8a:2a:09:0c:8a:c6:4d:ab:
                    b6:53:5f:63:54:79:ed:aa:e4:a4:ac:23:93:b7:b6:
                    4e:51:45:e1:5c:ea:f4:c1:02:c7:33:b0:9e:1f:79:
                    94:97:07:cc:71:36:80:df:23:26:d1:7e:0e:00:eb:
                    a9:69:ec:f9:77:cf:21:70:89:07:0c:34:13:1e:33:
                    6c:43:8a:34:40:4e:b7:3f:62:75:4b:99:2e:00:34:
                    df:e2:68:b5:2d:52:4b:7f:6c:13:4e:7f:74:b8:50:
                    12:05:a2:c1:0d:f8:0d:60:e8:e8:83:f2:01:f8:c9:
                    97:1a:70:06:c9:07:ab:bf:02:ba:e9:e1:42:53:a6:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FF:AA:22:B3:91:2C:75:23:80:5A:7C:F0:56:C3:27:3B:6B:F0:13
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:e1:b7:9c:21:77:8d:32:34:5e:60:b1:7f:01:f6:be:8d:
         1a:e1:b1:d1:52:50:b8:53:5c:f6:53:58:c9:05:43:12:a2:87:
         cc:7f:f7:ed:11:0d:76:ac:38:10:79:a9:80:29:30:bb:bf:04:
         d7:75:c0:8d:0e:0a:ee:57:51:1c:53:f9:f4:16:c4:65:07:89:
         7d:19:e8:19:f3:6e:e4:d4:3f:00:ff:0e:40:dc:d3:e7:65:48:
         32:7f:b5:be:b3:64:c7:57:7f:4f:53:fe:81:b2:84:99:d2:74:
         93:4a:bb:79:3c:22:ca:bb:46:10:b4:65:49:ce:b0:9f:1b:b8:
         69:f0:a8:e9:eb:b4:1d:a4:ff:89:6d:23:86:91:b7:57:6a:36:
         7b:fd:dd:da:9d:6a:98:b9:c4:a8:11:b4:01:0b:91:48:f7:d3:
         f9:2a:a8:98:80:4d:9f:3d:76:68:c1:4e:cc:03:6a:96:51:59:
         46:ad:ad:81:69:71:f3:9e:b9:71:00:8f:d7:d8:25:d9:0a:07:
         c9:cd:a7:3b:f3:69:b9:1a:28:c4:7c:fb:16:0d:a8:43:c3:1b:
         7a:c7:da:9c:ff:90:d9:94:93:2d:71:f2:b4:94:2e:61:64:91:
         8f:d6:a5:cf:a7:be:18:50:04:f8:66:e7:a4:74:c9:75:09:96:
         a6:57:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:34:21 2026 by rpki-client