Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          cA1sDvAFQe6uPiS6ELZ2DWJ6ENFnEe+PWItw3C9Gy5Y=
Subject key identifier:   56:6D:D8:B6:1F:B0:65:FF:A1:65:B2:92:84:10:69:55:30:0A:30:33
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       019E2F96886FE7EDA78590E85E7D39110B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          186F
Signing time:             Sat 16 May 2026 07:00:54 +0000
Manifest this update:     Sat 16 May 2026 07:00:54 +0000
Manifest next update:     Sun 17 May 2026 07:00:54 +0000
Files and hashes:         1: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: ng9c7Cel5khSuoZSlL7Cd5e2jSPXlrjDUot2IuIRAgU=)
                          2: CKM45MzLL-Kr-1wHUJmYArBZNQs.roa (hash: zgA0VgHxkkAugxLOcgin3giUJuyrnUWyjPbTTAbl/sg=)
                          3: GM95Gkx5v40txz6JbU4oknnskUg.roa (hash: LMfCIqVoDwxmGh6lnvANNLlJl1/dvbPCyO8BYHqtVfU=)
                          4: XZ_pdWGRqhhlMj-zc2J3G0feaPs.roa (hash: 4yRNuv1IZ/fNsWUIhuk4rvJep02AUkMta6LPy8d8AZU=)
                          5: fta7rhlIzZLyvEwKrTYOqXfaI1o.roa (hash: wkfvDv19UKd8c+ZsdmvASGpolGZNSXvJMP6wVwFy+38=)
                          6: tK3EhqbEq4QRtst0UgwLWHhIHck.roa (hash: h+i8ZfbhVVe94VVW1glcQ01dnDaLK8FTDkoi7l88dTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:88:6f:e7:ed:a7:85:90:e8:5e:7d:39:11:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: May 16 07:00:54 2026 GMT
            Not After : May 17 07:00:54 2026 GMT
        Subject: CN=566dd8b61fb065ffa165b29284106955300a3033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:79:c4:20:85:7c:a8:68:56:df:ee:9f:cd:b4:
                    f2:ef:c5:26:b9:37:5e:dc:07:d6:29:da:39:02:fc:
                    d6:71:cb:81:5f:34:7f:df:c0:e4:7f:95:0c:a1:cb:
                    d0:f7:19:35:33:31:8d:5c:2b:5b:61:62:c6:bf:f8:
                    75:b8:a3:27:8c:bf:d9:a0:5b:2b:5c:12:2f:10:dc:
                    a5:e5:66:65:37:18:12:b8:3f:de:40:c9:8b:a9:ab:
                    07:7f:81:db:b5:0f:a7:aa:4a:eb:64:72:26:93:49:
                    df:4e:7f:fa:67:da:ff:8b:2e:0b:d3:fb:57:2b:09:
                    31:28:e6:3f:4e:3c:49:48:7c:61:30:d8:9a:50:cd:
                    11:b4:73:41:73:2d:31:ba:5c:10:95:e3:59:af:09:
                    36:21:4d:d6:c4:67:94:5d:60:7c:fd:95:1a:62:c6:
                    79:73:c4:2b:cb:dc:31:23:b6:30:d2:45:d4:ff:b0:
                    c4:05:70:cf:db:07:3b:c1:7c:e2:26:c6:90:ab:be:
                    ae:ad:7d:4f:9e:ec:5a:c7:51:6c:5a:0a:94:89:63:
                    ab:02:60:4a:d4:f9:3e:3a:11:5e:d8:d7:c5:1c:07:
                    d2:9f:6c:7b:fa:d8:47:f9:dc:af:60:67:09:4f:9a:
                    49:36:48:b6:f1:43:61:d6:86:06:f8:78:59:0a:d8:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6D:D8:B6:1F:B0:65:FF:A1:65:B2:92:84:10:69:55:30:0A:30:33
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d4:d1:b4:9a:5c:d2:93:31:1c:c3:b3:5b:8b:72:71:54:50:
         42:82:64:6f:c5:9d:6a:7f:9a:18:93:e5:e2:f9:21:0b:31:49:
         ac:c9:5a:88:c2:b4:b5:9c:74:57:86:fb:30:41:6c:c5:4f:2c:
         03:a5:6f:31:21:7d:9a:d4:f9:08:5e:a7:3d:6b:d0:e6:87:01:
         ec:6c:9e:76:fb:f4:cc:f8:06:19:f0:4c:21:d6:23:cb:da:71:
         d0:d3:85:65:e0:6a:6b:3e:2f:39:68:29:9c:7b:f5:86:b5:68:
         29:72:0a:0d:b9:ee:18:ec:ed:c9:46:3b:52:a0:ff:67:da:47:
         b9:92:d5:8a:9d:cb:a0:7b:c7:6e:2e:cf:ae:7c:f6:36:0e:58:
         70:6a:f1:77:76:96:ef:c7:4f:23:d9:f5:29:e2:b0:ee:fe:ae:
         f6:fb:bd:41:56:79:65:2c:fe:7b:ec:6c:dc:c6:ac:ff:91:4b:
         01:44:3a:4a:a9:c1:3f:ce:9a:da:d4:b3:9f:0d:10:3b:15:b9:
         cc:9c:3c:bf:7e:64:58:b3:22:39:44:c8:38:92:fd:ea:8f:a5:
         a5:2b:0e:48:c1:95:48:d2:2b:6c:d8:93:ee:df:d3:de:a7:0d:
         19:46:ee:72:2d:9e:40:29:07:d7:06:3b:bf:de:b4:81:3a:a2:
         08:ba:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:07 2026 by rpki-client