Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File:                     ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier:          k9C/wC+rM/WvVW4MOX+/X9fJOtw3jMwmz8QimJcSth4=
Subject key identifier:   7B:FF:6F:2D:0F:9B:69:CB:BF:CE:54:9A:71:80:B0:DB:E1:E4:4E:34
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer:       /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial:       019DA59D58C5442BF8F8279A8104DB27E87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number:          92
Signing time:             Sun 19 Apr 2026 12:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 12:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 12:00:45 +0000
Files and hashes:         1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: O+31X335aZ8x38+clPGyacpZMUYITw88qSATw1580Ac=)
                          2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:9d:58:c5:44:2b:f8:f8:27:9a:81:04:db:27:e8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
        Validity
            Not Before: Apr 19 12:00:45 2026 GMT
            Not After : Apr 20 12:00:45 2026 GMT
        Subject: CN=7bff6f2d0f9b69cbbfce549a7180b0dbe1e44e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:46:60:a0:c8:bb:00:59:e2:e6:1d:13:2b:
                    f1:9d:85:93:41:17:86:64:53:fb:7f:88:41:44:2d:
                    33:be:61:2c:14:ab:ee:78:7e:4e:33:5e:dc:2c:b3:
                    49:b7:83:0c:f1:ed:13:e1:4f:ca:1f:ef:c4:e3:f8:
                    87:88:4c:da:c2:be:19:f2:e2:cf:52:48:e4:9e:94:
                    a0:5c:43:76:77:74:cb:46:ce:7e:86:68:08:58:04:
                    7a:22:85:49:5f:13:9e:2c:41:e0:78:2a:15:7e:74:
                    4f:74:4e:13:60:8c:1b:8a:95:2d:64:26:61:89:6a:
                    9c:99:4b:94:0b:8a:23:a2:a3:4f:85:93:f3:69:99:
                    c2:f5:5c:f5:10:68:15:19:9b:48:96:21:26:86:b0:
                    d3:e4:9d:72:19:9c:07:7a:f7:da:a9:6c:db:1a:bf:
                    90:30:1f:8e:ea:40:d0:a1:65:09:ee:58:6d:c3:49:
                    d2:4f:58:8c:0f:ee:82:56:ff:c3:30:08:19:2e:48:
                    76:34:0d:3f:4b:b5:ac:cf:d1:73:3f:cb:af:fe:27:
                    81:2c:6d:69:36:1f:b8:a0:64:bd:2e:f6:e2:9f:81:
                    b5:62:f0:bd:2e:61:e5:7f:e9:72:61:48:7c:b1:14:
                    6d:7c:d3:08:46:2c:ba:27:84:68:a0:8c:99:b4:c4:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:6F:2D:0F:9B:69:CB:BF:CE:54:9A:71:80:B0:DB:E1:E4:4E:34
            X509v3 Authority Key Identifier:
                keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:6c:62:84:7e:d1:a6:9d:09:04:12:2f:4a:f1:56:b7:96:
         0e:ab:83:bd:98:c5:bc:fc:3b:bc:16:5e:e0:03:6a:ec:2b:6a:
         0d:2a:08:e8:4e:ab:1f:20:68:a8:46:81:4f:91:31:0d:5e:fb:
         53:a6:84:b7:f3:3f:0f:8f:34:9b:19:31:6a:fb:fa:a8:df:59:
         78:b8:8b:fd:e6:32:41:16:c6:7c:27:29:ff:e1:a9:69:5a:67:
         09:0a:55:b0:dc:b2:a8:9e:80:6d:65:07:e8:f7:17:de:42:63:
         56:91:6d:0b:34:98:3d:3d:f7:59:75:5b:02:44:86:25:9b:2f:
         f5:83:dc:c9:a1:b0:6b:57:c6:ac:a6:da:58:6a:05:30:e0:7b:
         69:5d:5d:53:dc:26:31:38:1d:b9:35:57:75:66:84:1a:b8:cf:
         83:6a:be:fa:d8:69:4f:4e:35:10:5b:18:90:8e:1f:9a:ea:0b:
         5f:0e:48:1e:90:89:bb:fa:62:9f:3f:f1:6f:f4:9b:90:a5:23:
         b5:fb:83:65:4c:2f:5e:77:41:81:14:03:96:e8:66:2d:db:a9:
         ab:d6:3f:87:1a:ca:28:68:0f:fb:88:1b:bb:57:f2:54:0b:07:
         b7:4d:de:97:54:6c:1d:c2:d1:54:d5:e8:39:b3:1f:52:06:d9:
         8a:07:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:31:17 2026 by rpki-client