Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File:                     fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier:          FxFjeUsHVOjvsS+2/ZfKCCc6+I5UTeQ04kdqseAVeT8=
Subject key identifier:   9E:81:27:86:CD:D1:B9:55:19:E8:73:F9:05:3C:8A:A4:33:B8:FB:B5
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer:       /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial:       019E326074464FC82DFB62998F98794B398F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number:          085A
Signing time:             Sat 16 May 2026 20:00:42 +0000
Manifest this update:     Sat 16 May 2026 20:00:42 +0000
Manifest next update:     Sun 17 May 2026 20:00:42 +0000
Files and hashes:         1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: 4hjGuLQVYp8jEK7vj159Ygw656sBZGTQkdgTzxd5P08=)
                          2: ySsKwQ4c8u9hH8dkf5IAovbGU0E.roa (hash: Lmp6N3VB+ffMGoy168W3pHuRylAIEPbhaHOo0QIFkSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:60:74:46:4f:c8:2d:fb:62:99:8f:98:79:4b:39:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
        Validity
            Not Before: May 16 20:00:42 2026 GMT
            Not After : May 17 20:00:42 2026 GMT
        Subject: CN=9e812786cdd1b95519e873f9053c8aa433b8fbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:e2:33:67:1b:e1:41:51:e9:69:ad:2c:f2:
                    d8:b5:41:0f:a6:18:f8:9f:78:dd:fe:f6:36:77:95:
                    fc:b3:49:e5:26:2b:29:3f:e8:84:a6:2e:61:83:b4:
                    8e:92:80:04:bc:b2:d2:31:0b:12:36:3f:15:af:42:
                    fa:7a:6a:a7:19:f4:9a:df:91:48:e6:b2:1e:39:82:
                    6c:e7:92:d5:86:d5:3d:a4:46:39:72:6b:87:9f:4e:
                    ba:b3:94:9f:f0:86:3e:87:56:ee:91:b6:5e:97:25:
                    1e:c4:a7:25:a5:4d:1a:6f:05:32:e5:8c:15:3e:50:
                    4a:6a:7a:65:3d:2a:7e:55:f8:35:b9:ec:72:52:61:
                    a4:3f:22:e9:78:5d:7c:ed:ca:28:69:08:a6:5e:40:
                    98:a8:72:8a:e0:3e:1c:0b:db:68:e3:48:f4:f7:ae:
                    9a:14:dd:41:aa:65:d4:c4:fa:40:75:bd:f4:ef:2c:
                    56:38:5d:95:9c:39:51:7c:15:2b:0c:d9:f9:93:fa:
                    b0:1a:9e:c9:50:db:dd:ef:f1:07:11:c4:bd:43:c2:
                    a7:e8:b8:79:98:e7:d5:27:15:a8:93:0a:11:fc:cb:
                    d7:9b:6e:a4:7a:f2:96:12:49:6c:a1:4f:af:0e:9b:
                    6a:ce:67:67:c9:4e:a4:b4:4e:6e:ba:b6:62:a8:bf:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:81:27:86:CD:D1:B9:55:19:E8:73:F9:05:3C:8A:A4:33:B8:FB:B5
            X509v3 Authority Key Identifier:
                keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:97:6a:5d:02:77:96:2e:b4:81:21:f3:07:a3:67:cc:97:
         90:55:18:ce:39:96:23:61:12:2e:97:a8:f2:25:6c:39:3d:79:
         15:83:35:95:00:10:a8:5f:15:a7:e2:33:1d:2b:c8:3e:f4:6d:
         5c:4f:d1:31:85:98:67:97:a7:3b:5b:98:b0:bf:fb:52:68:41:
         aa:e8:0b:f8:cd:7a:fa:76:32:7c:f0:64:ca:a0:92:7f:44:9a:
         d8:7a:9b:04:f5:af:d3:84:92:c2:81:b9:2a:33:40:80:bf:2a:
         fa:d1:bf:48:b3:5f:87:8b:8c:2e:02:3a:5a:ff:47:05:43:88:
         e0:18:7f:b2:49:54:59:ca:85:6b:40:a3:e3:b4:0c:b1:05:9b:
         36:7f:f9:ae:9d:5e:4c:d2:cc:73:81:c1:40:d1:b1:b5:25:40:
         a9:77:db:e5:d3:11:a0:ad:4d:31:1b:e4:19:a7:80:8c:60:fa:
         25:f7:62:3c:47:65:7a:53:a9:44:fb:81:b6:8c:ec:44:9a:eb:
         27:f8:2e:76:12:33:1d:b9:3e:ae:a3:02:63:78:ab:e7:d5:c6:
         7f:80:cf:d1:3a:55:63:93:5c:0f:09:81:6c:10:5c:ee:d2:08:
         4c:85:90:28:37:ca:57:83:df:c2:42:81:c1:67:91:7b:03:48:
         4e:8a:f4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:43 2026 by rpki-client