Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          9dLEqXEpkSwjhUZFtHa1Cyk+Ig4uu7cAXuXdm1/mLeQ=
Subject key identifier:   DF:48:41:B8:C8:C3:CE:D7:CD:FA:2B:9C:34:BE:6F:70:7E:A5:34:B0
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       019DF08115757A12BAEA24CBBB848988AA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          18F1
Signing time:             Mon 04 May 2026 01:01:24 +0000
Manifest this update:     Mon 04 May 2026 01:01:24 +0000
Manifest next update:     Tue 05 May 2026 01:01:24 +0000
Files and hashes:         1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
                          2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
                          3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: V++CPbaudLMWi7r1GOterm0laWIGFibGOCYyVaQFwBc=)
                          4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f0:81:15:75:7a:12:ba:ea:24:cb:bb:84:89:88:aa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: May  4 01:01:24 2026 GMT
            Not After : May  5 01:01:24 2026 GMT
        Subject: CN=df4841b8c8c3ced7cdfa2b9c34be6f707ea534b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:19:6a:a0:75:99:3d:a5:78:c2:9a:51:94:
                    7a:3e:9a:76:9b:2c:71:5e:9e:44:c6:b6:35:6e:11:
                    a2:06:6e:73:a8:8b:96:b7:c5:2c:18:bd:a1:e4:f3:
                    cc:67:5e:71:34:78:0b:ac:e2:02:b8:e5:4a:86:7a:
                    f3:a7:d7:ef:5a:87:d5:aa:74:17:8b:ff:13:57:fa:
                    ee:f0:00:14:fa:d9:7e:a4:51:10:1f:48:83:fe:65:
                    10:d2:f4:8e:0a:57:05:9e:8a:cd:45:01:c3:66:ae:
                    b4:9b:21:17:6e:99:0a:cf:a1:49:da:7e:fe:c4:38:
                    d9:2b:4f:c9:50:9b:ae:5f:a5:76:b7:56:c1:72:6d:
                    f8:24:4b:22:90:c4:4a:bc:63:51:fd:93:37:b2:63:
                    c8:28:87:be:4e:76:70:5e:af:0f:80:98:62:83:50:
                    ae:5a:42:b2:29:5c:14:05:e0:cf:6f:31:ca:c7:30:
                    e8:01:ef:3f:96:5d:3d:3a:a3:67:b5:00:8f:e0:2b:
                    0e:75:71:b1:4f:e2:c3:84:6d:a1:27:85:b9:15:ad:
                    ca:1e:dd:52:7a:3a:07:d6:ee:46:40:cd:ca:f7:58:
                    5c:50:95:17:dc:19:04:1b:6c:ff:02:81:d2:6f:9b:
                    7e:54:01:b7:9b:ad:0e:7d:6d:c9:31:e0:a2:3c:c0:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:41:B8:C8:C3:CE:D7:CD:FA:2B:9C:34:BE:6F:70:7E:A5:34:B0
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:db:5a:1b:33:63:b3:c9:14:d3:72:cf:76:15:ab:cc:98:d2:
         91:23:24:3a:c6:4d:f2:31:41:d7:c8:0d:75:9a:74:c6:97:bb:
         ca:69:c5:d4:4d:d5:a7:34:c4:b8:60:5b:bf:2e:10:e5:5d:d0:
         74:c2:5a:f1:35:26:5b:bf:34:1a:14:48:32:14:e9:96:4d:e3:
         a2:1c:17:d6:ce:20:66:0e:93:1f:d1:eb:f6:80:82:9b:27:55:
         44:7b:49:7e:86:a7:97:fb:fd:22:4e:e5:d0:71:71:c3:8d:bc:
         24:c7:28:11:c5:a3:14:ce:48:27:a3:eb:bd:59:06:af:f9:e4:
         c9:9c:e1:2b:8e:ea:d7:7a:99:81:0b:68:c8:8d:b1:bc:56:5d:
         d4:c5:a2:3f:a8:64:50:8c:15:2c:c4:45:84:b0:10:5a:a9:8a:
         ee:18:21:4c:26:79:fb:3a:fe:11:5b:b8:24:ec:3d:34:79:45:
         f9:9d:66:e4:06:c1:e3:cf:de:2a:7e:6f:eb:bc:25:1b:15:91:
         c5:6a:61:18:f5:4a:23:48:32:dd:b9:94:53:e1:64:3f:40:80:
         2a:7c:e5:ab:44:61:26:1f:84:bb:ba:e6:21:43:3a:84:a6:8f:
         2b:7f:15:3b:d2:74:fa:92:7b:1e:50:08:69:cc:1c:39:6d:70:
         be:c5:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 09:42:10 2026 by rpki-client