Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File:                     ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier:          V7ZgOsQx8t5kwcqbLC31zTs0YIqR8N9VYgl68zZp3A8=
Subject key identifier:   0D:CA:0D:4A:1D:98:B4:9C:87:C4:05:24:78:73:3A:1A:34:E7:F4:50
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer:       /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial:       019E32CE44AF51B1A03F18E0A2AF195681B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number:          0DD8
Signing time:             Sat 16 May 2026 22:00:39 +0000
Manifest this update:     Sat 16 May 2026 22:00:39 +0000
Manifest next update:     Sun 17 May 2026 22:00:39 +0000
Files and hashes:         1: 6WoM_xG4wV-AhnwKf_EtMbG7hdA.roa (hash: 6pwcjqwtQhFnc6O4o0o2P45/PvuebPJ0qN/3US6rWIk=)
                          2: Hm7ix848xJAY1AJLhXlaj-jQ_BI.roa (hash: +YVIdKa/bQ1rJbGEdtGfoIRzYOMGIjr/vt5PbGNu18A=)
                          3: ReFkwY7yC_OqL_QtCLEERfe4ZYU.roa (hash: Uu5Ab9ANIRps6JfvpwU04cQY7DufU/VQnwBZqhMdO3Q=)
                          4: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: d58Y5+fN6tgJ4etpU7/UiSqXK+lvnEkGuOQTT21bkwQ=)
                          5: za0KCchEnO8zwmW-feM7Z3UncjE.roa (hash: cvLyxJf9J4OkfgwQV4Z4jYKejpKF+XIzROZmSetrmI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:ce:44:af:51:b1:a0:3f:18:e0:a2:af:19:56:81:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
        Validity
            Not Before: May 16 22:00:39 2026 GMT
            Not After : May 17 22:00:39 2026 GMT
        Subject: CN=0dca0d4a1d98b49c87c4052478733a1a34e7f450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:16:dc:c6:d9:a5:d2:20:d4:49:f5:1b:d9:
                    8f:c4:08:6f:7a:4a:97:1b:89:e0:8d:6a:e6:ae:c5:
                    85:a5:91:5c:31:3d:68:9c:b6:6c:6b:e0:f4:1c:61:
                    65:a4:2a:02:56:5c:25:4d:a9:ed:08:9b:b7:6b:63:
                    fd:c2:7e:b7:00:8c:41:5d:83:19:57:72:94:60:cf:
                    bb:ba:b2:16:9b:82:9a:05:e6:93:33:d5:59:83:41:
                    6d:7c:c1:70:40:21:7b:bb:d4:60:2c:ec:69:ef:03:
                    01:bf:45:84:1d:90:7c:3e:cb:44:04:27:6e:69:a8:
                    1b:c9:89:0b:ec:59:af:88:81:9c:0d:15:89:2c:9c:
                    2c:06:11:6e:12:92:bb:b2:b4:7b:db:e5:1d:e8:58:
                    ef:05:5d:dd:dd:81:f0:99:b4:a0:9b:3b:57:e4:53:
                    84:2e:df:e8:83:35:c6:74:95:54:13:ad:a6:67:b0:
                    20:b8:ae:1b:39:70:a3:69:87:cf:e0:14:7e:73:af:
                    3e:20:49:0a:29:04:a1:df:56:9a:23:b1:65:95:3f:
                    9f:a5:c4:69:0b:19:99:f1:e9:6a:54:25:4d:69:f8:
                    cf:c6:2c:3a:25:8c:0b:8c:c6:6f:f6:80:55:86:65:
                    2b:11:1e:ff:98:ab:5d:8b:68:98:ca:72:d1:31:c6:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:0D:4A:1D:98:B4:9C:87:C4:05:24:78:73:3A:1A:34:E7:F4:50
            X509v3 Authority Key Identifier:
                keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:22:a8:a5:d9:7d:ca:09:97:67:3f:d3:4c:f5:bf:08:78:fe:
         d1:69:b7:08:19:f1:46:b1:48:02:fa:3a:2f:aa:f9:ad:9d:a3:
         e0:b9:63:1e:8f:95:6e:70:52:eb:c4:2f:aa:ec:f6:8d:77:14:
         21:da:7f:5c:1d:20:92:f3:8b:b7:c8:00:b4:6b:df:7c:fd:da:
         15:b3:d6:e3:b8:6c:16:bd:74:f2:c2:3f:cd:b3:83:12:d1:74:
         94:49:8f:69:c2:7f:e5:ec:f4:29:44:a3:5c:da:d4:23:50:36:
         1d:15:9d:4b:a2:12:a6:32:3e:47:ab:94:64:17:24:e0:ee:b2:
         3a:95:b4:69:47:1a:94:f6:85:c0:1d:45:d8:3c:d1:19:76:27:
         b8:6c:19:e9:e1:b5:4f:cf:38:fc:9a:5b:42:01:3d:3e:3f:5b:
         ab:c6:b0:5d:16:c7:93:9e:5d:7b:a2:f5:fb:38:6d:5a:b9:fe:
         88:87:3b:9a:f8:9d:b5:81:47:36:a3:4d:c7:6f:de:be:54:f3:
         6c:16:aa:ed:cd:12:fb:91:b1:26:42:87:a2:b2:3d:dc:f8:38:
         d9:86:f4:1a:1b:f1:99:67:70:db:2d:c2:46:d6:b4:e8:bc:89:
         51:93:24:b2:07:c1:35:e1:fa:5f:ce:bc:b8:92:1b:63:8d:b5:
         4e:5a:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:01:51 2026 by rpki-client