Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File:                     zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier:          ao4yeimo3qc0+wdrVHIGJux/XMXuNbxfGe0g02icwLc=
Subject key identifier:   88:58:CB:5E:22:63:0A:C4:8D:C7:B6:AC:40:15:AF:7C:3D:43:9D:98
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       019E4E45B43FAA02EF0E262C8B87C595F94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number:          1923
Signing time:             Fri 22 May 2026 06:00:51 +0000
Manifest this update:     Fri 22 May 2026 06:00:51 +0000
Manifest next update:     Sat 23 May 2026 06:00:51 +0000
Files and hashes:         1: 8q97JD8tJUeeOn9fKUKNm7YiLwU.roa (hash: +XZNxuku4QOLJPqFzFk8t0v4pn8/FyRgMW7pvdNX3CU=)
                          2: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (hash: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0=)
                          3: sPvIT2OpPdfQUjumOhMItUZScLE.roa (hash: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4=)
                          4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: rFmBGxtfsKyxDFpK0MbUI7W75uqu3HctnM9MGEn9Dv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:45:b4:3f:aa:02:ef:0e:26:2c:8b:87:c5:95:f9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: May 22 06:00:51 2026 GMT
            Not After : May 23 06:00:51 2026 GMT
        Subject: CN=8858cb5e22630ac48dc7b6ac4015af7c3d439d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:d3:66:3a:e4:29:f8:7e:6a:8c:10:b5:90:
                    1e:04:f6:64:90:e7:60:0a:c6:f8:ed:69:cf:92:f5:
                    f0:6a:ab:d7:0d:85:26:3e:cc:0a:eb:af:83:aa:c3:
                    a3:34:ef:be:25:9d:8f:7b:2d:28:b5:5f:09:f7:71:
                    7c:a1:81:ff:ef:5f:10:ca:57:6a:44:44:99:cb:a1:
                    e9:07:b7:fa:0f:a8:46:ab:b6:bb:b3:2f:82:25:21:
                    86:5f:e8:55:a6:11:ce:34:2a:12:1c:ef:d6:f7:de:
                    3a:9d:00:7a:cb:c6:d1:6a:23:50:35:0e:4a:64:31:
                    86:79:21:c7:e7:ea:c1:bd:36:04:f3:45:12:3c:95:
                    25:40:47:b9:6b:b7:a0:a6:b5:f0:a2:dc:e6:bf:95:
                    50:15:d1:08:78:e3:e3:ce:fb:1a:38:a4:3b:44:a9:
                    13:41:b7:b6:bc:51:03:58:05:f2:c9:7a:a2:4d:c0:
                    90:a7:63:1b:0b:1d:35:20:54:41:95:c7:2a:06:09:
                    ed:e2:4d:45:3a:39:11:50:83:46:88:25:ff:b6:ba:
                    11:67:9e:65:e1:89:97:92:b1:34:46:11:b5:8e:c0:
                    55:ce:ce:86:33:d5:1e:2d:2f:15:cd:35:ff:86:2e:
                    83:e8:17:f1:cf:06:16:15:f7:9d:5a:c1:7f:3e:47:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:58:CB:5E:22:63:0A:C4:8D:C7:B6:AC:40:15:AF:7C:3D:43:9D:98
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:d1:a3:17:35:32:89:bb:a7:95:01:4f:e4:35:a6:fe:b4:56:
         59:e7:d1:d5:5e:2a:20:c7:08:03:c5:97:ff:42:e1:8e:cb:cb:
         ab:60:e4:74:95:5a:c9:f1:19:86:f3:99:f6:50:90:b5:9f:3d:
         9e:67:96:2d:6c:40:bd:2c:e0:39:5d:a0:df:2e:38:b6:1e:eb:
         5c:67:1b:27:81:c6:e9:8f:09:20:74:4c:ae:17:4d:56:af:c2:
         65:8c:6b:f6:53:57:77:22:a5:19:aa:67:84:39:9a:7b:18:44:
         04:47:71:b3:48:b2:d7:6a:07:f2:78:cd:81:73:46:56:c0:17:
         3f:ac:9d:d0:2c:e3:b0:6a:3f:51:37:fb:f7:37:d8:7f:37:0a:
         18:a9:e7:1b:92:75:39:a5:c5:ba:fe:91:0b:cc:22:a7:88:77:
         cb:9b:fc:2f:bc:fd:8c:9a:f1:8a:96:9b:e3:25:60:0d:e3:22:
         09:36:e1:e7:b0:d6:30:ec:cf:17:a0:95:4a:7e:e0:e3:5b:ae:
         2b:02:80:c1:8e:08:6b:9b:ab:75:bd:ba:49:fd:5f:d6:0d:02:
         0a:b0:49:1d:a0:4a:3e:1c:12:b9:7b:06:2a:b7:44:c2:4c:3a:
         67:a9:bd:20:53:74:a6:b4:35:6f:85:13:a8:f5:c5:7f:4a:2c:
         39:98:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:13:52 2026 by rpki-client