Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File:                     Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier:          TUvExacUJI8Cw1QQ+DLjIOQ4Ftk3WEcAyt87fgTsDgM=
Subject key identifier:   2D:FF:A8:B4:E0:5C:EB:46:61:3C:4A:C5:35:51:2C:1B:5D:AC:AB:E1
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       019E0A0A030B426588A398661E61517DC1DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number:          0DBE
Signing time:             Sat 09 May 2026 00:01:28 +0000
Manifest this update:     Sat 09 May 2026 00:01:28 +0000
Manifest next update:     Sun 10 May 2026 00:01:28 +0000
Files and hashes:         1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
                          2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
                          3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
                          4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=)
                          5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: AgALbmJQZjb/Gjv2r2lrwOKsP7hueQiHL3yKvEbsQrg=)
                          6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
                          7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=)
                          8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
                          9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
                          10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0a:0a:03:0b:42:65:88:a3:98:66:1e:61:51:7d:c1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: May  9 00:01:28 2026 GMT
            Not After : May 10 00:01:28 2026 GMT
        Subject: CN=2dffa8b4e05ceb46613c4ac535512c1b5dacabe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:3c:f1:aa:02:b9:2d:0a:4d:ca:26:61:b9:
                    b0:10:07:2a:84:e3:ce:77:98:0d:46:9f:24:8a:ca:
                    56:03:fa:f2:6f:43:5b:de:4d:b8:ca:f1:50:44:4a:
                    9d:13:a5:27:31:f7:88:a5:41:a9:b6:63:e2:3d:34:
                    3e:7a:26:03:cd:ab:d1:68:a4:8b:79:6c:36:51:01:
                    a3:1c:84:6e:f4:e8:57:31:55:29:82:ed:9e:46:0d:
                    65:cb:7f:a3:ea:05:f0:2d:21:04:c7:32:a6:6f:8d:
                    94:0a:a6:17:23:90:c9:3a:21:8f:67:26:c6:fc:5c:
                    04:40:4f:30:dc:30:67:b8:d7:bb:ad:63:27:20:24:
                    da:49:e9:92:1a:40:33:79:56:14:6b:6b:c9:85:1a:
                    12:98:5f:75:a5:20:18:8d:36:2e:93:67:1b:f5:ce:
                    df:e2:a3:cc:08:21:be:25:c6:02:54:45:57:13:bb:
                    bc:44:5d:da:93:10:2a:4f:de:cd:a6:52:b0:55:64:
                    bb:88:4f:6a:6c:b0:bd:da:17:c0:15:4f:26:af:cf:
                    f4:49:a7:55:1f:e1:c0:64:7e:ab:5e:03:b5:a8:7f:
                    b7:93:cf:de:11:26:77:25:76:d3:e0:b4:35:1f:60:
                    7d:3c:bf:66:6c:15:49:2f:c1:a2:2c:f6:4c:2d:ce:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FF:A8:B4:E0:5C:EB:46:61:3C:4A:C5:35:51:2C:1B:5D:AC:AB:E1
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:d7:d1:81:8d:2f:ef:5a:ef:33:ef:73:5f:e3:ac:b3:4c:
         b8:69:5b:fe:03:3d:c0:59:7e:39:8c:3e:f3:ed:82:aa:ab:6f:
         65:d3:2b:52:59:91:b9:38:a2:f9:1f:3d:f0:f5:a1:fa:ff:9f:
         36:6b:de:2b:57:30:d0:c3:ef:5e:2c:0e:0b:a8:f4:30:d0:11:
         22:3b:4c:ff:1c:a8:76:99:ec:a0:98:5f:17:0f:9e:b9:84:a6:
         da:09:ab:71:45:d0:47:b9:74:fd:4d:2a:49:8f:b0:02:b2:f5:
         71:8e:6a:ad:72:73:fb:8c:a4:49:b2:30:32:7c:da:9d:92:4d:
         fc:38:b3:e4:c2:08:db:24:29:95:f4:40:2c:4e:eb:6b:6b:cc:
         b4:72:46:5d:09:5b:c2:61:88:34:44:d3:66:37:8d:a5:79:39:
         e4:a3:69:76:c9:ba:d3:26:d9:be:6f:73:37:91:3e:2b:3a:fe:
         3f:54:d0:21:dd:ce:c1:66:0c:29:66:1b:8f:7d:ef:04:64:85:
         78:97:ee:c2:84:d0:67:6f:f1:00:8c:a0:b3:b6:d4:49:df:ff:
         13:a0:0a:aa:17:ab:7c:e6:b6:cf:b4:09:5c:5f:85:2c:17:41:
         5b:db:67:12:55:d6:63:13:e5:1f:1b:c6:f7:16:a6:b7:03:11:
         ac:e6:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 03:27:02 2026 by rpki-client