Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File:                     zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier:          UJga0HUp8NHguy6NgdyjLZEMbtSUNcUs93j8GXRDzRE=
Subject key identifier:   B7:CA:F0:AA:06:39:D0:3C:3F:0F:B3:36:44:DF:B0:B6:37:B3:24:6E
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer:       /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial:       019E299512E1408AC297A74B924D08FD1539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number:          04C1
Signing time:             Fri 15 May 2026 03:01:36 +0000
Manifest this update:     Fri 15 May 2026 03:01:36 +0000
Manifest next update:     Sat 16 May 2026 03:01:36 +0000
Files and hashes:         1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
                          2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
                          3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: FQwEhdwUJpCLBy1l79n+Z4IBHY94CbdmECi9GS2i25I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:95:12:e1:40:8a:c2:97:a7:4b:92:4d:08:fd:15:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
        Validity
            Not Before: May 15 03:01:36 2026 GMT
            Not After : May 16 03:01:36 2026 GMT
        Subject: CN=b7caf0aa0639d03c3f0fb33644dfb0b637b3246e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:75:7f:88:31:78:55:a9:32:02:5d:59:68:
                    ef:db:bc:73:e7:4b:61:d3:76:a2:ad:6a:75:90:ca:
                    9f:a8:76:75:1d:21:54:ff:34:61:dc:d5:88:40:47:
                    03:b9:0b:4e:55:3b:b6:e5:e9:ba:eb:0d:89:b8:d2:
                    e3:f1:8e:94:a1:17:f3:4d:da:45:41:8e:74:2b:79:
                    63:80:bd:f5:96:26:a4:e5:e4:f7:77:1f:12:4a:b1:
                    3a:15:a0:ec:01:8f:0f:95:ff:b1:f0:d1:a3:97:eb:
                    f6:91:73:55:1f:bb:aa:e3:10:08:ec:7c:73:cc:97:
                    2f:44:a7:61:00:04:0d:f5:bd:db:d7:71:2b:fd:f1:
                    04:dd:e2:10:4f:12:b3:65:fe:f7:c3:9d:48:d8:56:
                    fc:8e:55:b5:6c:b9:41:be:6f:a5:19:61:06:21:f9:
                    91:14:15:25:cd:b4:7c:29:4b:6f:76:e3:da:8c:b0:
                    87:00:88:f5:c5:55:9b:2e:a5:ef:9f:9a:7e:53:61:
                    2e:64:dd:3c:6a:97:e4:e7:78:fb:5b:fb:6c:39:fa:
                    4a:58:e8:2f:6f:03:c4:0f:8f:7a:d7:6b:d1:71:e1:
                    c0:55:2f:0f:f6:8b:22:d1:54:91:d0:e1:63:77:e4:
                    30:86:3a:fe:00:7f:fd:62:69:30:a2:e8:13:87:8c:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CA:F0:AA:06:39:D0:3C:3F:0F:B3:36:44:DF:B0:B6:37:B3:24:6E
            X509v3 Authority Key Identifier:
                keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f9:fa:be:2c:2c:a6:1f:63:3a:de:2d:dd:bd:9b:06:a4:85:
         19:96:0f:eb:d6:25:b1:95:cd:aa:a7:8d:ca:5e:9d:11:40:53:
         37:8d:ab:02:94:08:7b:d7:53:51:60:11:7b:9e:63:56:0c:5a:
         49:39:31:9b:b7:3b:d5:db:00:32:7d:d1:ca:ce:74:3e:77:d3:
         18:5f:ad:78:e8:c7:2b:03:90:c8:73:e0:8f:65:2e:8e:a0:fa:
         6a:33:b0:65:7a:c7:3a:00:a2:7a:e1:0f:4f:cc:1b:42:d8:4e:
         aa:38:0b:65:9a:74:bf:21:2a:8a:fa:3a:d9:47:d4:d7:24:be:
         81:08:ff:bc:d9:7c:5b:3f:f5:8e:04:58:85:dc:41:6c:4a:b3:
         e2:87:2d:47:72:a7:4b:12:0a:bf:3f:06:a8:25:93:b5:4d:07:
         60:59:d1:3b:35:53:35:39:1f:3d:f9:11:fb:4d:b3:26:4e:e9:
         df:90:6f:60:ac:01:cc:d5:71:90:06:9f:f3:e3:36:46:b8:5f:
         d4:da:4d:08:b5:88:f4:75:4b:22:ae:54:80:3c:95:d7:35:dc:
         c9:e5:67:5c:46:54:90:ea:44:1d:e0:51:4f:fc:e3:41:a5:b0:
         62:1d:7e:19:da:09:fb:44:53:27:88:0d:b1:86:32:38:98:60:
         e0:30:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:23:03 2026 by rpki-client