Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          K1KYbB7oWlnTKLLoAXj+/TzkEAmMF6+lU0B053DWo7g=
Subject key identifier:   1B:B9:92:32:CD:AC:34:AD:B8:28:C4:FA:72:98:47:E1:A3:BA:67:E4
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       019E3185BB72DAB9675BE6E04BE7B3F36506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 16:01:48 +0000
Manifest this update:     Sat 16 May 2026 16:01:48 +0000
Manifest next update:     Sun 17 May 2026 16:01:48 +0000
Files and hashes:         1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: ZHlQXPnIPOFsSGn2+9TKoNlsL81od67Tpf631lfwW4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:bb:72:da:b9:67:5b:e6:e0:4b:e7:b3:f3:65:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: May 16 16:01:48 2026 GMT
            Not After : May 17 16:01:48 2026 GMT
        Subject: CN=1bb99232cdac34adb828c4fa729847e1a3ba67e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:55:70:b0:b6:31:b2:91:d3:71:da:73:00:
                    78:1a:86:51:8a:74:8e:21:b5:0f:b8:15:dc:02:5e:
                    e9:d5:5a:ff:3a:19:d0:e1:9c:f4:3c:c3:42:f9:fa:
                    fa:3e:89:be:55:6f:50:72:43:19:98:36:72:9c:9f:
                    bb:9b:d6:c8:f7:dc:51:da:0e:c9:8d:63:97:bd:45:
                    22:2e:b9:01:8b:5d:e5:ae:92:42:ac:d6:6d:61:ac:
                    b8:51:79:9a:80:c7:2d:04:b4:f1:98:93:38:42:8f:
                    85:00:5d:93:52:fd:5f:d8:b0:60:09:6f:ae:95:28:
                    84:58:b5:4a:9c:2e:93:3a:11:8c:6f:df:5c:8c:6d:
                    43:c1:19:33:fb:f1:7c:32:23:50:54:8e:92:b5:51:
                    9a:e2:bf:5e:33:a3:b0:9e:4b:42:e8:d6:31:88:22:
                    8f:ca:3c:68:0f:23:76:9c:43:3b:27:a0:e5:68:d1:
                    01:62:2c:bf:03:74:6e:b6:29:a6:aa:74:b1:b2:f1:
                    80:23:7b:36:4f:56:e0:39:f3:0a:6f:4c:02:02:c5:
                    2d:93:66:7a:ee:82:0e:74:16:bc:8f:e0:b5:b6:ca:
                    b5:20:06:c9:35:83:0f:9c:44:26:76:08:e7:1c:33:
                    09:99:50:d5:71:1d:97:29:58:26:e1:37:9f:07:d4:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B9:92:32:CD:AC:34:AD:B8:28:C4:FA:72:98:47:E1:A3:BA:67:E4
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:e0:9d:f1:6c:3b:62:16:e5:b2:9e:3d:4b:44:ac:2d:06:
         91:20:55:49:0b:2d:cb:00:b9:35:ab:01:80:2e:74:75:0c:a6:
         a3:8f:6b:ee:3d:12:af:8d:13:dd:8a:cd:e5:0a:08:1b:33:de:
         7b:ac:93:c0:d7:13:37:f1:1c:a6:44:53:67:26:26:08:6c:c6:
         eb:43:96:ec:11:0b:50:01:28:9e:1d:cb:3b:8d:06:18:93:df:
         60:38:b5:91:40:d7:7e:93:63:bb:20:86:9f:ac:72:34:2d:c0:
         e8:5d:a5:18:52:61:b0:5d:d9:cd:da:a7:90:25:ba:f4:52:8f:
         cf:a2:1f:40:29:6d:12:16:6d:df:83:e3:5a:22:ef:1a:c1:69:
         dc:ed:69:1f:5e:cd:3c:6e:fb:33:1e:39:24:96:ee:40:0a:e6:
         d1:23:a6:0b:fe:35:4f:23:ce:49:2f:3f:97:73:fc:37:74:af:
         fc:5a:27:f5:d2:a1:de:85:fe:7b:1f:f1:dc:23:f1:ce:2c:90:
         5a:85:78:b1:e2:f2:a5:f2:60:de:87:96:7f:a2:1a:b1:a6:23:
         e5:9b:d7:dd:6a:44:66:eb:cd:a9:9d:10:46:02:e4:11:11:84:
         6f:6d:24:fb:da:f5:c1:3c:54:19:5e:7b:85:43:4c:9f:95:cb:
         1a:b2:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:18 2026 by rpki-client