Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File:                     zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier:          v3yIH3fADmEd5aZsCTWP2SluQ778MLUNHBovdYIw5E8=
Subject key identifier:   E2:AB:B2:2B:D6:5E:DA:F2:C2:D8:EB:E0:5B:B9:C0:B1:2B:76:E0:90
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer:       /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial:       019E32CF415583CE3053D85669FA9124B989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number:          033F
Signing time:             Sat 16 May 2026 22:01:43 +0000
Manifest this update:     Sat 16 May 2026 22:01:43 +0000
Manifest next update:     Sun 17 May 2026 22:01:43 +0000
Files and hashes:         1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
                          2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
                          3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: BkTjJITqBjgCtDFe5V2VrNZOhQbtW0nbebj6MceY9B4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:cf:41:55:83:ce:30:53:d8:56:69:fa:91:24:b9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
        Validity
            Not Before: May 16 22:01:43 2026 GMT
            Not After : May 17 22:01:43 2026 GMT
        Subject: CN=e2abb22bd65edaf2c2d8ebe05bb9c0b12b76e090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:d1:1e:35:d6:2e:35:c9:82:8a:5a:27:59:
                    15:c5:cb:db:81:72:f3:cd:0a:c0:2e:6f:b8:ec:96:
                    bb:ea:3b:3b:76:40:bb:03:c6:ea:65:38:20:27:4c:
                    19:24:db:d0:33:fb:03:2b:cc:95:bb:47:ec:b8:44:
                    05:3b:e8:7e:d9:b2:0f:2a:ba:4b:68:40:51:8f:fe:
                    70:e0:ee:74:bb:e9:35:df:d7:6e:75:ce:bc:b2:c0:
                    9d:6d:5e:ca:1c:02:45:27:be:37:5f:3e:1f:5b:be:
                    87:8b:72:89:7c:32:30:ba:95:33:4d:77:67:5b:f1:
                    7d:5a:9d:54:ff:4f:a3:b9:3b:13:6d:05:1c:7a:69:
                    57:9e:b3:04:9b:22:53:64:d8:72:bc:1b:bf:cd:0c:
                    7d:88:a7:60:da:9c:20:b5:62:49:45:d0:e3:74:73:
                    fb:ae:97:74:f9:cf:e9:1b:e7:2d:c3:9a:07:19:54:
                    dd:10:b7:cf:c1:bc:69:6f:a2:2d:3f:e1:da:18:cd:
                    14:56:8e:59:04:33:7f:60:4f:03:b1:4d:32:d3:a0:
                    b3:08:32:89:70:dc:7f:9b:a6:f2:b3:f6:55:4a:25:
                    cd:62:54:b0:6c:f7:a5:52:70:c7:8d:de:29:40:1a:
                    7b:77:ce:ce:1d:88:89:6c:4a:38:a8:ec:5d:f7:67:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:B2:2B:D6:5E:DA:F2:C2:D8:EB:E0:5B:B9:C0:B1:2B:76:E0:90
            X509v3 Authority Key Identifier:
                keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:b9:34:e5:4d:60:1e:4e:75:be:af:28:4a:33:fc:ef:1f:
         e4:9d:19:86:34:0b:7c:6d:97:19:a1:c0:0b:73:de:ca:da:15:
         e1:27:39:a3:ba:e4:4d:e9:af:1e:66:08:7b:4a:4a:37:9c:93:
         cf:9b:6b:1e:d6:be:44:55:99:4c:7b:3a:2d:c1:1b:0f:84:1a:
         d5:55:67:ed:ee:8d:8d:fc:9b:66:de:10:9a:73:fe:e4:fa:39:
         3f:89:ab:ac:46:a1:91:33:00:6c:85:9c:b1:99:e0:46:e4:29:
         08:ec:09:b8:f1:9b:7c:13:0f:e0:cb:71:79:84:7b:00:39:70:
         08:08:d8:80:b4:74:47:7c:99:b2:b0:7b:ce:05:80:82:9a:8d:
         12:4e:d6:9e:a8:0d:30:ae:c3:fc:60:aa:05:56:48:fb:87:7e:
         7f:cf:62:e7:56:c2:67:93:92:6b:63:48:37:73:3a:38:bb:85:
         5a:33:05:af:c5:63:35:2a:5a:9a:dd:6c:c3:c3:a5:08:dc:76:
         e4:70:82:b0:90:40:f0:38:95:3a:7d:5a:75:21:db:82:7e:7e:
         f7:0f:1c:e1:8b:4d:17:4e:87:72:7d:3f:99:6e:79:87:e2:30:
         44:92:f2:9d:78:cf:b0:a7:0c:5b:b8:b7:cd:31:85:56:11:5c:
         e9:c5:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:40 2026 by rpki-client