Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File:                     1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier:          0oVDw9p+KoRXwyVJ1sxEdFlCWpaaERKjzFLaYBDWQoI=
Subject key identifier:   33:FE:E1:53:FC:94:65:52:8A:FA:AF:F8:F7:2F:27:16:C8:8B:B3:53
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer:       /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial:       019E300586A1D69A8E0E3AFF98BA0FA91928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number:          087B
Signing time:             Sat 16 May 2026 09:02:08 +0000
Manifest this update:     Sat 16 May 2026 09:02:08 +0000
Manifest next update:     Sun 17 May 2026 09:02:08 +0000
Files and hashes:         1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: vNnXE5WkWrf+7aJO3MWR2rrQOiNibDSVMW+/MIgXN6c=)
                          2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:86:a1:d6:9a:8e:0e:3a:ff:98:ba:0f:a9:19:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
        Validity
            Not Before: May 16 09:02:08 2026 GMT
            Not After : May 17 09:02:08 2026 GMT
        Subject: CN=33fee153fc9465528afaaff8f72f2716c88bb353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:2f:c7:60:3f:8a:38:e8:c9:e9:42:ed:f8:
                    ab:2f:06:33:0f:99:01:b0:5a:6c:3f:ab:ec:6b:23:
                    85:b3:6e:1e:20:9b:38:f3:ed:39:a0:17:a6:c7:c0:
                    ce:59:f1:44:7d:de:ac:1c:b7:c4:18:96:72:d7:a1:
                    33:7a:58:cf:df:7b:8f:57:9b:fd:3a:60:90:27:d9:
                    1f:e3:a7:6a:b3:b9:a5:93:4b:88:e0:fd:27:3d:71:
                    85:ad:86:97:36:da:aa:c4:02:66:f7:c3:9e:a3:0e:
                    ca:66:a7:c6:97:19:89:5c:c2:b9:c3:97:49:a9:e5:
                    95:ae:96:58:0e:5a:5e:84:11:7e:6c:df:dd:89:0d:
                    ff:f6:ae:07:c0:0d:ac:c6:02:42:5d:92:c1:1b:ca:
                    ae:4c:32:31:5c:a3:69:1a:17:f5:25:27:75:06:5f:
                    e1:e4:05:e4:0f:04:ef:1d:92:ba:40:3d:5f:7d:40:
                    07:d3:be:13:b1:94:ef:e0:39:c3:38:2e:13:95:58:
                    05:db:13:d0:cc:87:bd:6d:ba:2f:72:33:26:80:93:
                    46:7c:e2:c9:d4:2c:b6:26:0f:60:b9:3e:a8:93:41:
                    19:6f:cf:fb:c0:4b:25:86:74:f9:fc:a2:88:32:01:
                    51:fc:5f:a7:ae:f9:d7:04:2f:bb:89:59:fd:c5:e5:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FE:E1:53:FC:94:65:52:8A:FA:AF:F8:F7:2F:27:16:C8:8B:B3:53
            X509v3 Authority Key Identifier:
                keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:cc:8e:65:59:9a:65:b0:46:22:91:bb:01:9c:d1:b3:6a:
         b9:79:24:b5:37:8f:6d:b6:c3:ea:41:07:17:5c:9d:7a:7e:2b:
         d1:6b:ec:bc:96:37:76:8d:be:71:ec:d0:18:9d:68:cc:b0:16:
         59:81:d8:d0:e4:6b:8e:cf:8d:ba:25:ff:93:ba:2f:71:57:be:
         4f:80:c1:21:ec:c4:eb:52:ce:40:4f:b7:95:78:2c:c3:1d:65:
         09:ba:3a:77:29:a5:4a:ec:1b:51:fb:3c:de:bd:39:83:73:67:
         a6:b4:dc:71:97:ac:e2:e6:83:07:94:ea:92:e6:2d:00:0d:85:
         36:5e:6e:79:76:59:3b:90:7d:f1:12:a8:c0:90:40:55:9c:8b:
         f3:52:45:e9:84:7e:5f:f5:c3:2c:cc:95:34:93:87:8e:e7:0c:
         aa:dc:44:d2:fa:f0:7a:e9:69:72:f9:09:e6:bc:13:a6:23:d0:
         4b:91:7f:09:57:22:e2:88:2e:bf:ab:90:8c:0c:6d:ef:62:96:
         a1:f3:5a:98:86:78:fd:6d:14:19:e8:bb:3f:21:63:ea:61:66:
         df:76:bf:2c:da:bb:ed:fc:75:03:ce:aa:ec:84:75:a6:b9:bb:
         f4:78:66:99:d5:fa:dd:bc:94:65:f5:3b:51:ab:4e:22:d0:03:
         dd:04:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:27 2026 by rpki-client