Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          mM03uCa4W+5yNrn6CMWIHjXjY98MNnbvZhmuuIQEZk4=
Subject key identifier:   C4:5E:6A:D2:D0:EC:E7:C6:7C:3F:8F:00:C8:FF:4A:C5:55:FA:E9:01
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       019DCAF34D7CFCA9912B58AABEAE679BC019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          18E3
Signing time:             Sun 26 Apr 2026 18:00:35 +0000
Manifest this update:     Sun 26 Apr 2026 18:00:35 +0000
Manifest next update:     Mon 27 Apr 2026 18:00:35 +0000
Files and hashes:         1: LyD-byAqHkCId2X413D2X1Z2qHU.roa (hash: X3jzbRpGbv2O4J/HEOEG5KsHYAnqovf/BVNCZIBzGEc=)
                          2: NciFosUTZQjh8wuLeV_tqda00bY.roa (hash: zOA4Wef7GnD51/XhXMPfbgxKu5akVCbUSUyI9R7xcbI=)
                          3: Y8fFR3SR2JFo5SN-QHUy1g5AXnQ.roa (hash: rcBm3Sru1/9gzs1C6m5Kf+QWRSXdM9HmkBd/Rq/ayVk=)
                          4: gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa (hash: HeuNS/isx5Ir7rrhD9rHIdV2SzMR1qCm5KBXOXdXtqU=)
                          5: np_2_SKmGfgCwircPk4_KpAxetI.roa (hash: EXS4ryAU66idTchghJIvxISW9h87H73QFGZzRNJ0+zI=)
                          6: uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa (hash: xSRJcjd0eLR5MNbT/qQW4MnOH8NKSKy8VGBBsMm1Rj4=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: yJwgbkCNH9JjGhowuDZftk9ddNCwnv9kt8cxU21zciQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 18:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ca:f3:4d:7c:fc:a9:91:2b:58:aa:be:ae:67:9b:c0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Apr 26 18:00:35 2026 GMT
            Not After : Apr 27 18:00:35 2026 GMT
        Subject: CN=c45e6ad2d0ece7c67c3f8f00c8ff4ac555fae901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:78:15:38:d1:29:57:56:7e:5c:96:a0:20:
                    93:39:4c:8c:2a:8c:62:96:06:31:84:22:da:a8:62:
                    6b:73:bc:e3:fc:57:15:d5:78:28:68:a0:a5:54:7c:
                    8b:b1:9e:94:64:b9:75:11:62:94:aa:e3:32:9f:36:
                    29:26:ab:96:c3:14:f0:eb:a1:a3:2f:3d:65:e1:74:
                    cd:25:9f:83:2f:7e:3e:01:7d:e1:47:c8:6c:cf:1e:
                    0b:7e:2e:05:72:66:0f:b0:ce:95:bc:b4:09:be:9a:
                    83:a6:93:a7:0c:42:0a:c2:bf:b8:b3:39:f8:52:33:
                    b5:cc:1c:c9:67:c0:b9:34:19:5a:ea:38:9d:d0:d6:
                    81:da:dc:f7:fb:db:d4:ac:04:c6:9b:91:b6:67:d6:
                    9f:63:bd:90:8f:d8:95:60:67:d9:37:90:ed:34:78:
                    f8:96:ee:87:fc:73:55:40:33:f9:a8:32:5f:0b:c5:
                    c5:86:18:2c:49:13:4c:66:40:99:f2:b1:ae:b7:ab:
                    05:03:9c:35:26:19:29:1c:fc:98:7a:11:78:ba:f8:
                    c2:3f:3f:39:f5:57:97:6f:dd:6a:3e:61:8f:aa:7b:
                    9c:e9:fc:71:4a:8b:08:ac:52:41:2a:33:88:bd:0d:
                    00:83:17:75:a5:42:a9:52:88:b5:c7:f5:74:20:fd:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5E:6A:D2:D0:EC:E7:C6:7C:3F:8F:00:C8:FF:4A:C5:55:FA:E9:01
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:a0:56:16:1e:18:26:3a:8f:00:ed:c9:13:b0:29:ef:62:
         83:30:7d:21:80:71:69:09:fe:da:14:e2:52:5f:28:75:b7:3d:
         ca:03:ae:79:31:ab:c0:2f:57:c3:7e:4c:03:35:19:c3:c4:c6:
         c9:bc:fa:fb:d6:6a:93:59:a2:17:90:a3:d3:89:4e:40:15:39:
         8c:aa:3d:61:e0:5d:73:c3:1f:81:85:a4:00:19:5c:ea:ee:70:
         aa:d4:6b:58:5c:a3:fc:d5:50:15:67:27:95:b5:5e:2d:fb:4b:
         7e:b5:b4:ac:27:e2:db:46:1c:57:84:dc:a7:05:a3:f8:ff:bd:
         7c:2a:8c:a6:85:a7:49:9f:9c:94:77:56:cf:78:37:5c:6a:4b:
         8b:94:14:77:33:36:19:20:f6:e5:f1:32:1e:05:59:33:4b:52:
         94:54:5f:76:37:61:0e:1e:70:3c:2a:70:78:6a:63:f5:03:89:
         ee:67:ea:3b:20:8c:02:e0:ee:4b:ba:7c:a6:68:61:60:63:cc:
         8c:cb:74:f8:e4:27:f7:41:5f:49:7f:26:ca:c7:2c:71:a5:81:
         24:1f:cb:14:9d:00:c9:13:3f:86:5e:c7:3f:ec:a4:0d:cb:60:
         d0:d7:1a:40:0d:a4:a3:4f:bd:de:6f:4e:6f:63:3a:87:31:77:
         f8:b8:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:21:29 2026 by rpki-client