Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          7lRM4Z93y/hW1BYG91ZR8W0j8TuHmtcHGcJGM+PRbAc=
Subject key identifier:   8C:7B:14:A7:15:E5:3A:C0:CB:45:E7:DE:DD:54:04:31:97:B5:7C:CE
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       019D93CECE4BC6FE2821EA29F3B5F79D7C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 01:01:36 +0000
Manifest this update:     Thu 16 Apr 2026 01:01:36 +0000
Manifest next update:     Fri 17 Apr 2026 01:01:36 +0000
Files and hashes:         1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
                          2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
                          3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: mZmpC9E/2l+20+iq44tmsZZMWuS7Qn8W7Lp1JpPn+6k=)
                          4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Apr 2026 23:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:93:ce:ce:4b:c6:fe:28:21:ea:29:f3:b5:f7:9d:7c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: Apr 16 01:01:36 2026 GMT
            Not After : Apr 17 01:01:36 2026 GMT
        Subject: CN=8c7b14a715e53ac0cb45e7dedd54043197b57cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:20:ba:94:32:d6:a9:83:d8:1a:42:aa:69:
                    1e:3b:73:e8:b8:2f:7d:00:a3:1e:5c:42:95:93:78:
                    1e:f6:5a:c6:e9:31:3a:f2:e1:66:0c:f7:a5:a9:76:
                    84:7a:db:ed:86:81:f9:0f:22:5c:38:b4:c7:75:3f:
                    11:98:f3:b8:1f:c7:5a:1c:63:64:88:e1:ca:d2:2c:
                    c5:93:40:fb:28:c6:0a:39:75:86:42:9a:ce:53:4b:
                    6b:8c:1f:40:e2:4f:63:a6:ca:32:b5:ab:94:26:31:
                    b3:50:1d:5d:d8:fd:8b:0f:c9:16:5d:0c:06:c0:91:
                    c5:ed:3b:02:6c:17:f4:26:9a:9e:87:c1:97:77:39:
                    c1:d5:da:f7:b1:9f:ea:63:57:88:dd:92:d7:d9:31:
                    d1:4f:8d:53:ad:84:b9:39:a7:1d:b3:7f:92:33:0c:
                    da:a5:b1:72:38:2f:f0:7e:f9:1c:e3:e8:e8:71:61:
                    45:6c:49:bb:f4:c0:2e:f8:3f:25:23:05:6c:ac:64:
                    4a:90:7e:96:da:c3:24:3e:eb:91:2d:69:af:bd:09:
                    23:07:d8:9d:1f:ae:1b:24:2c:0f:65:0e:be:1c:ee:
                    08:e8:7b:5b:73:28:c2:1c:6c:eb:5e:22:e4:3d:62:
                    39:61:4a:97:4d:db:ae:0c:61:91:e0:6a:81:48:07:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7B:14:A7:15:E5:3A:C0:CB:45:E7:DE:DD:54:04:31:97:B5:7C:CE
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:b0:f4:aa:18:4f:70:a6:c4:97:4f:c3:0b:23:ea:6d:ed:
         48:37:e2:1e:38:cc:8f:80:71:08:5f:86:21:57:95:bd:9c:98:
         6b:b2:9d:27:b6:ce:40:b5:31:41:ef:9f:5d:61:0e:df:59:7e:
         a0:e7:2c:c7:79:ca:a9:1e:ba:63:50:9f:7f:a8:bd:98:e1:6e:
         0a:1f:5b:96:a7:02:4c:e8:02:c4:08:c4:be:fc:aa:c8:e8:7e:
         a2:14:88:59:0b:24:a3:ad:fd:61:af:d5:94:14:13:1d:42:f3:
         e7:4a:4d:1b:4a:49:ab:73:de:25:2c:ff:c1:4d:04:c6:7b:6e:
         cf:65:48:be:ad:90:85:83:fe:3d:e9:76:fc:38:81:38:e8:f8:
         29:96:54:25:e5:c5:0a:57:d3:8b:89:cf:08:60:9e:1b:41:cb:
         24:1d:df:0a:44:30:51:23:8c:e3:b7:57:1c:4e:a6:14:ee:d9:
         9f:a2:38:71:32:8d:66:45:20:3a:77:77:b6:14:b5:a5:2a:e6:
         fb:e4:49:de:bf:9c:e5:93:b2:99:6c:68:21:f5:f0:f7:86:0c:
         7b:1b:f2:4a:45:c1:34:74:03:59:4c:2a:56:5d:de:bb:ea:01:
         0d:aa:a5:c0:5a:e7:23:8e:85:65:bf:f4:01:92:6b:4a:6f:0e:
         9c:78:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 03:29:50 2026 by rpki-client