Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File:                     ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier:          5ICphtFiE65HrH8NRfRfEqKzi5OZTV1/JUPdbMrgiNs=
Subject key identifier:   BD:F1:69:45:2F:F4:A0:7E:B4:D9:3D:6F:AB:E4:C8:48:A1:8A:89:CA
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer:       /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial:       019D9A06EF298D5E6703C535B083E3684E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number:          0942
Signing time:             Fri 17 Apr 2026 06:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:38 +0000
Files and hashes:         1: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: viuadcOBofOzmoWWf+7xauZj7qtJo4xfRxruWD23P80=)
                          2: h8307773aGTVcHuejCRSQfYZeP4.roa (hash: 2K29Y+KA5ZX1LE8dgEvQhQ3+PK0Gls5txAa/7wvymRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:ef:29:8d:5e:67:03:c5:35:b0:83:e3:68:4e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
        Validity
            Not Before: Apr 17 06:00:38 2026 GMT
            Not After : Apr 18 06:00:38 2026 GMT
        Subject: CN=bdf169452ff4a07eb4d93d6fabe4c848a18a89ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:7e:71:52:8c:1d:6e:83:9d:91:f1:ca:d4:
                    90:7c:81:16:c4:2b:03:76:ba:77:c4:7c:6d:de:9c:
                    2d:e8:36:14:45:e6:a9:4d:b0:64:37:0d:56:36:89:
                    49:d9:bd:96:d0:b6:9c:54:73:d8:f8:af:f2:3e:58:
                    8d:cb:74:8a:89:43:f3:5b:b3:db:1d:a4:22:4e:35:
                    3c:45:f7:d9:60:d6:c2:b1:93:c6:ad:9c:0f:76:a8:
                    15:84:76:e1:cc:21:b5:01:1d:f7:7f:75:7a:f9:7c:
                    d1:85:b7:96:49:67:88:54:d6:05:98:50:42:1b:4c:
                    57:da:54:f1:97:6d:b8:83:b3:fa:7d:d8:72:5d:c7:
                    5d:be:d9:12:35:4d:7a:95:58:35:06:20:06:72:ed:
                    9c:c9:78:cd:f9:d1:9d:07:90:76:8c:bf:ee:05:6d:
                    10:6d:b7:6d:34:16:a9:44:bb:31:ed:c9:8a:36:7d:
                    ce:52:55:6a:05:c6:ee:a3:53:34:3a:a7:bc:e5:a0:
                    6c:ae:84:08:a8:a9:fc:d8:ea:61:4d:4c:3c:fa:4b:
                    63:de:c4:d6:33:22:67:ae:30:20:34:50:68:f2:e9:
                    e3:2d:7c:54:96:88:11:dd:f0:1b:34:59:d0:44:74:
                    6a:18:c7:1d:0a:52:12:0b:d4:96:b6:a4:95:7d:90:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F1:69:45:2F:F4:A0:7E:B4:D9:3D:6F:AB:E4:C8:48:A1:8A:89:CA
            X509v3 Authority Key Identifier:
                keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:f3:9a:24:d7:ec:0e:26:a1:ce:b8:22:df:02:7f:0f:c2:
         d3:33:5c:88:4a:e8:d8:64:8d:7c:7b:64:2d:3e:08:00:fe:47:
         9d:27:9e:d9:c0:10:2e:23:55:1b:02:6d:60:9d:82:a9:80:54:
         af:be:b1:e2:3b:74:01:fb:f5:af:bc:1f:b6:69:98:92:40:49:
         94:17:10:f5:bb:c6:73:b7:be:03:db:02:2e:e0:c2:3e:ac:4d:
         18:c9:52:81:a7:1a:23:e5:63:71:23:8c:1f:6d:76:fa:21:ba:
         33:73:08:3c:73:c4:75:d7:1d:de:43:60:5e:28:86:5b:84:6a:
         69:e6:0c:fc:fd:bd:1d:b6:05:bd:ff:9f:b7:24:12:49:25:12:
         6a:a2:2f:5d:7d:13:49:b3:7d:0d:df:f2:bc:20:39:9d:0a:ab:
         3c:23:4d:d9:eb:97:ae:33:85:ac:5b:45:08:53:36:02:8e:00:
         70:88:be:76:4a:13:57:04:f8:0f:fc:27:7a:cc:d9:c0:00:f0:
         ed:19:2f:93:b3:33:a4:ed:bc:89:5f:22:32:a6:af:ff:7a:d7:
         b6:63:71:e9:32:37:a3:f6:0c:69:b9:25:34:7a:32:e3:a3:40:
         0d:fe:23:75:ed:05:df:a6:91:95:60:10:fb:75:19:b1:f2:05:
         d3:c8:51:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBu8pjV5nA8U1sIPjaE4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDc0NDNlNjIwZDYzYzhlNGY1NGE2NzE3ODQ3NGQxZjkw
OWFmNjgwHhcNMjYwNDE3MDYwMDM4WhcNMjYwNDE4MDYwMDM4WjAzMTEwLwYDVQQD
EyhiZGYxNjk0NTJmZjRhMDdlYjRkOTNkNmZhYmU0Yzg0OGExOGE4OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYx+cVKMHW6DnZHxytSQfIEWxCsD
drp3xHxt3pwt6DYUReapTbBkNw1WNolJ2b2W0LacVHPY+K/yPliNy3SKiUPzW7Pb
HaQiTjU8RffZYNbCsZPGrZwPdqgVhHbhzCG1AR33f3V6+XzRhbeWSWeIVNYFmFBC
G0xX2lTxl224g7P6fdhyXcddvtkSNU16lVg1BiAGcu2cyXjN+dGdB5B2jL/uBW0Q
bbdtNBapRLsx7cmKNn3OUlVqBcbuo1M0Oqe85aBsroQIqKn82OphTUw8+ktj3sTW
MyJnrjAgNFBo8unjLXxUlogR3fAbNFnQRHRqGMcdClISC9SWtqSVfZCPVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3xaUUv9KB+tNk9b6vkyEihionKMB8GA1UdIwQY
MBaAFGVHRD5iDWPI5PVKZxeEdNH5Ca9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYt
YWJjYzkwNWQ5ZmZlLzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYtYWJjYzkwNWQ5ZmZl
LzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7DzmiTX
7A4moc64It8Cfw/C0zNciEro2GSNfHtkLT4IAP5HnSee2cAQLiNVGwJtYJ2CqYBU
r76x4jt0Afv1r7wftmmYkkBJlBcQ9bvGc7e+A9sCLuDCPqxNGMlSgacaI+VjcSOM
H212+iG6M3MIPHPEddcd3kNgXiiGW4RqaeYM/P29HbYFvf+ftyQSSSUSaqIvXX0T
SbN9Dd/yvCA5nQqrPCNN2euXrjOFrFtFCFM2Ao4AcIi+dkoTVwT4D/wneszZwADw
7Rkvk7MzpO28iV8iMqav/3rXtmNx6TI3o/YMabklNHoy46NADf4jde0F36aRlWAQ
+3UZsfIF08hRFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:29 2026 by rpki-client