Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          Z0wwYZW/Ps7xMZzF5ySpA76BeVgFb/ta7a1fWsk66hM=
Subject key identifier:   D7:9C:B9:81:08:82:3E:C5:E7:72:7B:68:0B:52:72:5A:3D:08:E3:1C
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019E322A1B13127559163B06F1B0E1C0B2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          119B
Signing time:             Sat 16 May 2026 19:01:20 +0000
Manifest this update:     Sat 16 May 2026 19:01:20 +0000
Manifest next update:     Sun 17 May 2026 19:01:20 +0000
Files and hashes:         1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
                          2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=)
                          3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: 4bUQSeElEUjeH+F6HHWfG7W3WBxkMNGLkH9N89EWxNk=)
                          5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
                          6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
                          7: vUUgJIohg5SQneif_sUKDZs-FYo.roa (hash: O9F4ICaD35Dayn0PCg4Uohxoxcc4CWJ4HvxFQPiHF6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:2a:1b:13:12:75:59:16:3b:06:f1:b0:e1:c0:b2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: May 16 19:01:20 2026 GMT
            Not After : May 17 19:01:20 2026 GMT
        Subject: CN=d79cb98108823ec5e7727b680b52725a3d08e31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:6b:8e:fe:58:d2:ff:47:9f:92:8f:a0:68:
                    b0:eb:07:2f:50:ce:a3:d9:14:79:a7:18:04:3b:24:
                    56:58:96:1c:a9:df:77:eb:8f:36:7a:9f:92:d5:b3:
                    17:9f:26:09:62:d8:ef:56:25:2f:1a:db:e8:4c:85:
                    30:95:f3:93:3a:10:26:90:99:d1:b4:14:6f:81:16:
                    61:0a:68:b7:ed:49:39:e2:04:a4:f5:d7:ae:91:ce:
                    1d:72:74:d1:f4:c0:d0:15:69:7b:b2:d8:9f:45:ba:
                    57:ec:7b:30:b4:85:c0:28:69:c5:72:31:15:0b:b3:
                    2b:26:d1:b7:a8:fd:15:08:35:c6:71:f4:4c:ae:c9:
                    cd:9f:10:be:5e:1c:1f:7a:b0:91:92:57:af:cf:bd:
                    42:b5:0e:0b:dd:f5:5a:e5:0e:a2:7d:c3:67:4a:1c:
                    eb:2f:b0:01:04:28:20:39:27:aa:2c:4e:06:a7:e0:
                    d8:17:ec:f5:6a:d4:e3:5c:0a:01:4c:d0:ba:ac:26:
                    72:eb:ea:c2:c0:69:53:7c:da:d1:bc:8d:7d:50:b6:
                    31:0d:b0:21:ce:75:f9:73:f0:2b:eb:0c:93:16:eb:
                    2e:82:a4:79:0a:4b:16:8a:60:44:98:1d:b1:ad:40:
                    65:da:c4:49:51:88:8a:d9:c4:a2:89:54:b1:27:bb:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9C:B9:81:08:82:3E:C5:E7:72:7B:68:0B:52:72:5A:3D:08:E3:1C
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f5:8e:4c:36:6d:1b:73:90:f2:88:60:48:7f:53:c1:cc:37:
         04:94:a9:c5:d6:94:4f:fe:cf:e2:73:6b:92:b8:8b:0c:17:9a:
         8b:c5:bd:77:80:ec:f8:00:cc:07:27:4c:c2:2f:e2:f6:49:48:
         7f:be:9a:40:94:c2:75:9a:ad:d1:4b:39:d5:29:b5:15:db:e7:
         43:95:3e:95:fd:35:0c:c4:fc:0a:c6:bc:5b:a5:b2:ac:e5:4c:
         66:f9:82:c6:fd:ff:11:26:59:6b:0d:d6:8e:92:8f:aa:80:41:
         f3:68:a5:e9:a0:99:a1:49:1f:ba:6c:bd:6c:7f:b2:c0:58:f1:
         73:3e:ec:85:bf:e9:18:b7:cc:b9:9b:bd:82:f0:fd:10:ed:a0:
         77:85:05:a5:a4:05:6c:97:00:81:32:14:88:c2:fc:75:ef:ea:
         69:b3:e5:13:bd:e7:9c:1e:68:73:4c:b4:07:7d:21:fd:0b:46:
         22:fc:3b:d7:c3:df:10:96:c0:db:b8:76:a7:35:27:9a:3e:aa:
         61:5f:46:b6:71:2b:4b:83:0c:be:dc:8a:ac:a2:ff:7a:50:fb:
         03:c5:6f:5f:8e:ff:1e:4a:19:f4:ae:d3:c0:a0:77:1a:1f:0a:
         0c:6d:26:e2:c3:94:a5:2e:18:91:b3:c9:22:ea:1b:9a:fc:32:
         f4:51:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:26 2026 by rpki-client