Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          lCHCYCr6cxCCFgBPFp53/PWHE2oZoLf/upJRmc1el5Y=
Subject key identifier:   30:8C:9E:EB:B4:41:7D:92:15:41:D1:D2:4B:50:5A:7D:F7:4B:C3:23
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       019E314EA5ECFC189CDD11E26AB6D6BF102C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          1279
Signing time:             Sat 16 May 2026 15:01:38 +0000
Manifest this update:     Sat 16 May 2026 15:01:38 +0000
Manifest next update:     Sun 17 May 2026 15:01:38 +0000
Files and hashes:         1: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: zcSS+b4TeZks0+0l6XuQXsraHurDZvvSm4Bx1lcFWC8=)
                          2: __i6sIYUIBe7mo2fXsSB58_KDR8.roa (hash: xm+A31I7Z/MMOUkoqOHD6xRyGTCyQb2nbbsP/I4N0LQ=)
                          3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:a5:ec:fc:18:9c:dd:11:e2:6a:b6:d6:bf:10:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: May 16 15:01:38 2026 GMT
            Not After : May 17 15:01:38 2026 GMT
        Subject: CN=308c9eebb4417d921541d1d24b505a7df74bc323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:86:ab:5c:da:01:b9:fc:81:de:1d:7f:4c:
                    db:35:3f:ee:37:ca:16:bb:89:31:23:e0:64:ea:ec:
                    a9:ca:33:5e:8b:dc:fd:a5:ed:5c:40:32:98:d5:ff:
                    9b:55:96:21:60:22:16:29:cc:17:7f:b3:88:04:d3:
                    d8:cf:28:37:d5:67:16:3e:54:06:df:1f:6c:5e:69:
                    af:aa:01:9c:74:b7:98:e1:0f:d5:e9:68:8c:16:7c:
                    62:14:db:d7:a5:5a:39:50:14:29:e4:ce:d6:1f:33:
                    e6:99:84:64:4e:ef:bc:a6:b4:5d:6f:e7:b1:ec:c8:
                    5b:70:b6:c1:d6:19:fd:e7:80:b4:49:db:16:61:12:
                    6c:ba:c3:00:87:f4:e5:a7:65:91:f4:6c:b6:90:e3:
                    ec:c7:ad:39:34:af:7f:ef:b3:72:36:41:2b:98:b1:
                    5b:4f:b2:aa:82:77:d1:c7:b3:d8:af:8a:b6:c3:97:
                    76:c1:91:57:62:0d:4a:56:77:40:4e:cf:62:ab:70:
                    ef:f9:2c:be:6f:b0:03:a1:83:93:09:0b:d7:b4:cd:
                    3b:7d:e7:bf:51:91:ad:5c:3f:c6:7f:bb:d5:89:b7:
                    9a:7b:25:71:78:7a:05:60:ab:27:84:8d:3d:5d:ce:
                    20:a7:08:9c:68:1d:40:3f:06:ad:54:c8:77:c1:46:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:9E:EB:B4:41:7D:92:15:41:D1:D2:4B:50:5A:7D:F7:4B:C3:23
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:ba:fa:0e:ad:44:fb:39:3e:3a:33:59:c0:86:8b:77:0d:
         4e:e6:e6:17:1c:72:06:e1:98:53:74:09:b5:a4:24:85:aa:20:
         82:05:d6:a6:10:78:48:ac:4c:f1:58:16:ac:c2:2b:15:c3:d8:
         fa:0c:1c:7f:6e:56:36:ca:a3:2d:e1:4b:3e:18:69:25:4f:56:
         30:4e:72:86:58:9a:74:22:5b:39:0f:83:4b:55:f9:bf:ac:fb:
         bb:f1:95:b1:01:15:1c:fe:9d:a8:4a:c9:75:e1:e8:e1:0e:d0:
         65:65:2d:43:ff:5c:00:14:54:da:2d:8a:30:f3:0c:85:34:fa:
         a5:69:34:75:4f:47:25:68:30:08:e2:90:22:cb:23:8f:27:eb:
         d3:87:d5:99:fc:c6:33:4f:a0:74:cc:a7:b8:fb:9b:03:c0:bc:
         6b:d9:e9:d8:3c:8a:1a:e3:15:fe:9f:d6:fe:50:40:7f:1f:a3:
         60:f4:03:78:3f:46:5b:8f:4c:7a:d1:93:35:d0:a1:ea:2e:83:
         c3:7a:32:df:c8:10:97:f7:74:34:aa:9c:32:e8:f5:c9:85:0b:
         a3:c3:6d:00:1b:8b:84:b2:56:46:83:06:46:a0:64:1d:31:bf:
         55:d3:d3:08:a4:58:a2:09:bb:6f:f4:ba:2f:a9:7c:d4:3b:dd:
         da:18:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:32 2026 by rpki-client