Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File:                     ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier:          +8DFpjelaD9xCeZsNDZIgV9QOZm92uEcuqt6NOHKMvg=
Subject key identifier:   63:AC:35:91:C5:55:B7:89:15:A3:CF:AA:42:41:5B:04:55:C5:4C:C3
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer:       /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial:       019E2FCD31815E43837A33D89AD133B4A834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number:          14F8
Signing time:             Sat 16 May 2026 08:00:37 +0000
Manifest this update:     Sat 16 May 2026 08:00:37 +0000
Manifest next update:     Sun 17 May 2026 08:00:37 +0000
Files and hashes:         1: R4biYlru54aTOhXabFWJZhdtNlE.roa (hash: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU=)
                          2: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: Jyr8nSbAugvWxi7/T0nLYTVuJT6biMmzqUzqpy3C+zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:31:81:5e:43:83:7a:33:d8:9a:d1:33:b4:a8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
        Validity
            Not Before: May 16 08:00:37 2026 GMT
            Not After : May 17 08:00:37 2026 GMT
        Subject: CN=63ac3591c555b78915a3cfaa42415b0455c54cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:40:a7:cd:00:92:1d:e3:e2:9e:e8:d8:4e:
                    e0:2d:d1:8d:15:dc:3b:9d:2e:a3:4d:01:20:7f:66:
                    8f:65:97:b0:e6:b7:0d:8f:9c:52:e8:11:1f:5e:7f:
                    23:a7:f2:3c:25:c7:dd:e8:c1:f0:41:f9:9d:c6:0f:
                    54:06:f1:1f:4a:c9:9a:7d:4d:c9:66:89:e5:ac:22:
                    96:b1:cf:12:86:68:37:07:ce:fe:02:40:46:c8:ac:
                    d3:00:73:77:f3:68:0d:98:20:a0:6b:60:4b:99:b2:
                    b7:d5:ca:d7:c3:b0:8e:7d:c7:d0:7b:32:f9:76:cb:
                    35:22:8b:45:d4:b0:9d:ac:80:d1:50:e4:df:d1:e5:
                    22:5a:36:a1:79:b6:02:df:46:e1:d1:2f:ca:a8:43:
                    dd:69:da:9d:90:a5:c2:37:b4:5a:37:ce:e7:ad:e0:
                    19:d4:48:6a:7f:f5:65:0b:f8:70:82:1b:c7:71:6e:
                    9f:b6:ea:0e:73:96:0a:42:90:e9:a0:81:ae:51:bf:
                    d7:13:d3:48:21:e3:1a:da:0f:39:a6:53:37:0e:e9:
                    fa:d2:30:94:3f:0c:38:d6:b2:25:1a:0f:df:7c:46:
                    50:2b:c5:8a:35:ff:47:56:fe:b3:0f:8c:61:cd:cc:
                    4c:14:ab:9a:1d:38:42:32:28:3a:e8:87:f0:0c:f6:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AC:35:91:C5:55:B7:89:15:A3:CF:AA:42:41:5B:04:55:C5:4C:C3
            X509v3 Authority Key Identifier:
                keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c9:b3:ca:7f:c6:16:e0:8a:9e:31:39:24:18:5c:2b:bf:c2:
         f6:55:23:71:d4:81:e1:b4:1c:96:3c:ca:73:02:ef:f3:a9:4c:
         9b:fc:6d:72:31:5f:f0:9f:5d:f4:70:60:3d:c9:e0:8f:b5:f2:
         e7:79:19:04:60:aa:ce:5c:04:18:02:a4:ff:aa:0a:85:46:1a:
         84:60:b5:e9:0f:99:f5:82:ef:07:4d:fb:df:12:e7:1f:fa:07:
         36:97:b3:c9:da:33:18:1a:3a:fd:22:9f:89:3b:7e:95:df:0c:
         9d:2b:46:8c:23:98:9c:82:1c:00:0a:54:bb:13:67:20:21:4f:
         73:89:7f:7d:67:98:47:1d:2d:31:35:7e:29:44:69:79:a8:da:
         00:e9:c0:f2:7c:6a:5d:98:77:e4:50:69:d4:8c:50:4b:1d:e9:
         02:ff:6d:93:2b:7d:f5:72:aa:26:d4:23:17:5a:17:02:4c:39:
         08:40:25:98:dd:06:cb:54:7e:f3:43:55:ed:6e:d5:a0:06:7c:
         42:62:1f:b7:c0:49:cc:d3:2b:85:d1:d5:42:e5:be:9f:52:23:
         50:69:1f:fb:f9:bb:43:4f:9e:3b:0a:b5:28:4a:a0:06:b4:ea:
         fd:da:10:7a:15:5d:52:fc:21:67:a9:19:03:7e:5a:45:5a:25:
         16:65:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:19 2026 by rpki-client