Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File:                     ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier:          rhmKfhShUPQ116lArhzCviXbH7hk3vJAny5zt9kxChI=
Subject key identifier:   1D:29:3A:68:47:8C:0F:0C:9F:6A:1E:1C:1A:65:3F:5F:E7:81:D7:FE
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer:       /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial:       019E30A9677CF9841DE1ECB3FF8812B8EBCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 12:01:08 +0000
Manifest this update:     Sat 16 May 2026 12:01:08 +0000
Manifest next update:     Sun 17 May 2026 12:01:08 +0000
Files and hashes:         1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
                          2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
                          3: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: VF0MYx1jpmYkzdse0egeYmld35xvM8jLGDS+uMHxMpk=)
                          4: yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa (hash: wEYOZFW3nRAdwU0jliufiMLAbI5/X3da3ron9zmXMns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:67:7c:f9:84:1d:e1:ec:b3:ff:88:12:b8:eb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
        Validity
            Not Before: May 16 12:01:08 2026 GMT
            Not After : May 17 12:01:08 2026 GMT
        Subject: CN=1d293a68478c0f0c9f6a1e1c1a653f5fe781d7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:99:d3:ad:09:2a:c2:d2:e1:f3:fc:6b:a8:
                    d9:34:ca:f5:58:7a:67:b7:14:9c:21:3f:27:5f:8f:
                    46:1c:ea:b5:63:ea:40:23:57:fc:c6:8c:1f:b0:b9:
                    ec:bb:c7:45:28:f5:9b:7e:bf:00:b7:3e:9e:3a:ca:
                    84:f0:f0:b2:ee:c9:e7:bc:1d:87:6e:49:19:79:49:
                    43:64:8d:63:6a:1f:74:cb:00:05:71:8d:3b:3e:71:
                    96:ae:92:ba:c3:50:4b:53:1b:02:ba:f3:90:5e:41:
                    be:b3:5c:ff:9a:a2:ab:2d:bd:4e:35:69:ba:f2:2d:
                    19:ae:0b:42:7a:e8:af:03:cf:4f:ba:79:08:7c:27:
                    4d:12:62:30:ec:b7:13:47:f8:cf:76:c8:c9:82:1e:
                    9f:3a:b7:d7:36:f7:b4:86:67:3c:c7:ab:e8:16:e6:
                    ec:d3:b3:12:60:eb:de:f8:38:9f:e8:a7:7d:7a:f8:
                    5f:21:fe:87:bb:ed:ac:51:1e:11:09:1e:8a:22:5a:
                    75:14:30:99:8c:c5:04:77:9c:d7:ea:04:ca:d2:87:
                    7a:94:2e:f6:b1:04:5b:3f:a8:4c:54:98:63:fb:45:
                    6c:ab:4d:63:ff:d0:f6:2e:e9:cb:27:c7:1f:df:ba:
                    cf:3c:55:e1:99:62:f0:9d:36:e0:22:a1:fa:11:88:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:3A:68:47:8C:0F:0C:9F:6A:1E:1C:1A:65:3F:5F:E7:81:D7:FE
            X509v3 Authority Key Identifier:
                keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:0b:75:aa:b7:dc:58:4f:55:f7:cf:d7:d4:13:85:24:f7:
         3d:a1:9d:a1:81:a1:cf:d0:7c:3a:f9:c4:c8:19:fd:e1:8e:ea:
         ca:30:5d:5b:8e:d9:75:9a:71:c2:3d:c7:88:17:94:45:d9:20:
         71:55:a0:17:ea:55:9c:d5:14:d4:6a:88:97:8f:a4:7c:f6:ec:
         4a:f6:50:ab:00:a1:32:9e:61:1d:ba:d0:db:44:08:4f:0c:1a:
         83:9d:ef:08:57:f6:64:9c:1a:48:de:bd:cc:69:e2:41:e6:83:
         06:e5:08:5e:6c:86:2e:09:2b:86:0f:4d:96:85:68:01:66:a3:
         7c:4c:cd:1f:3b:5b:4e:a8:e5:df:b1:c7:7b:a8:0f:2e:66:95:
         f6:57:02:c1:61:24:6b:5a:b2:5e:93:f3:02:4a:ed:83:31:00:
         8c:73:64:92:dc:2f:ea:2b:06:3b:68:87:71:9c:48:6f:5f:e9:
         bc:0d:5c:9d:a4:e9:c7:82:10:96:c3:dc:62:ac:cb:28:4a:d7:
         61:3e:22:34:49:5d:73:8e:96:00:f4:bf:ab:b2:ca:42:ef:45:
         d1:f2:42:66:e9:cc:fa:f0:12:55:29:ec:33:1e:bb:ed:80:32:
         38:b6:1f:8d:3b:fc:fc:ac:cc:90:ae:90:22:af:d7:e7:86:d4:
         9d:35:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:38 2026 by rpki-client