Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File:                     zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier:          t6Tm/9DLkWKPPiamOpdfUVHHl8i/0U7TGAOjiRiVdMc=
Subject key identifier:   D7:86:C0:C0:66:2C:07:70:0F:84:D0:E9:BE:A6:C8:E5:CB:8F:9D:1F
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer:       /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial:       019E22ED6A8BE389BE9249CE767DBEFAD19B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number:          091D
Signing time:             Wed 13 May 2026 20:00:44 +0000
Manifest this update:     Wed 13 May 2026 20:00:44 +0000
Manifest next update:     Thu 14 May 2026 20:00:44 +0000
Files and hashes:         1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
                          2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: hVO6KadlODb1ILYOY6+i5A4j3Tzbet7LIV0eO3RiGQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:ed:6a:8b:e3:89:be:92:49:ce:76:7d:be:fa:d1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
        Validity
            Not Before: May 13 20:00:44 2026 GMT
            Not After : May 14 20:00:44 2026 GMT
        Subject: CN=d786c0c0662c07700f84d0e9bea6c8e5cb8f9d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:d2:bc:07:cf:e9:3e:62:a3:c1:16:fc:4a:
                    55:86:95:5a:dd:ad:12:27:83:d4:11:89:4a:4c:88:
                    c3:15:02:2f:7a:d6:61:1e:c4:78:84:87:be:37:8e:
                    a0:80:e2:ff:71:bf:cf:e8:0c:27:65:8a:82:d3:cc:
                    c7:59:41:ad:25:4b:0c:9e:47:55:0b:b5:97:06:33:
                    75:c0:44:5c:ac:ee:1b:b3:7d:c8:53:16:f9:77:8f:
                    98:77:f4:22:06:02:7c:44:ad:4c:06:7f:8d:89:ce:
                    a0:37:98:d8:97:c2:43:08:23:4b:3b:68:f2:7d:ad:
                    85:4b:46:32:4f:6e:a2:82:c0:8f:fe:94:71:bb:69:
                    a6:30:d0:dd:8c:fa:dc:20:78:5e:e7:dc:24:86:69:
                    45:47:d5:a2:d2:7e:36:6b:54:b4:e2:3b:79:ab:da:
                    51:13:bf:81:68:46:76:5e:b4:64:2e:09:ae:1d:4e:
                    41:c1:dd:d4:c1:83:c1:ee:ac:80:e8:36:7c:2e:60:
                    c8:4e:96:3a:fd:4f:f2:9e:60:f2:42:3f:43:c4:e1:
                    06:1c:d9:8e:d8:fd:14:fe:e6:ca:4f:96:7d:3b:87:
                    7b:9e:d4:2c:35:57:d0:58:74:6f:15:48:f3:c3:b4:
                    b7:54:03:7d:d0:1e:ac:d7:45:5a:f8:a9:ab:9e:cb:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:86:C0:C0:66:2C:07:70:0F:84:D0:E9:BE:A6:C8:E5:CB:8F:9D:1F
            X509v3 Authority Key Identifier:
                keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:71:1c:70:97:36:5f:63:2d:8c:5a:c7:cf:23:80:b2:9b:db:
         d9:4d:ba:b2:07:7b:61:56:ee:16:e6:7e:1e:68:77:e9:cc:44:
         d8:a4:e5:6c:d9:a5:91:8a:54:48:0a:7d:08:54:87:b3:cc:1c:
         40:4e:ff:56:df:fd:46:24:06:8b:ff:a3:65:bd:c6:d8:bb:b8:
         e0:df:f6:d2:97:58:79:b2:b8:a3:c4:94:be:a2:16:8b:74:15:
         ad:8d:ab:24:fd:52:88:6c:bd:a5:63:eb:03:f7:84:21:51:80:
         bb:02:23:44:ef:13:d7:d6:93:8f:d4:7c:c0:e4:3b:10:53:a9:
         dc:ea:b0:81:0f:e4:a4:a6:58:1c:56:6d:95:4b:7a:7e:ab:cf:
         f1:cf:00:b6:9e:2a:09:a5:f0:d0:6f:28:d8:43:35:25:21:31:
         a4:18:ce:64:2e:ab:48:8f:28:43:37:f2:79:51:73:3b:85:e6:
         8e:f3:4a:fd:5a:03:2f:af:90:a0:83:13:1a:49:c0:35:dc:f0:
         1b:1d:bd:aa:94:17:70:de:85:ce:76:84:cd:75:c8:de:b1:51:
         c9:3e:f5:a4:db:0f:65:d6:f9:91:0d:8b:3a:ad:99:d3:09:bb:
         c2:aa:76:2e:0c:2d:dc:0d:8e:57:bf:d0:91:76:24:0c:2b:83:
         e0:88:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 04:02:25 2026 by rpki-client