Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File:                     z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier:          RxQxY7u5QSfN/OeOYajnTKMj5XMS8wa0msCuVUFxB28=
Subject key identifier:   B0:51:31:23:05:1B:86:1D:1D:1A:21:06:1F:25:65:44:E3:07:3B:7E
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer:       /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial:       019EBFC8B6AACF3D22774EB56EF0518DB299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 07:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:02 +0000
Files and hashes:         1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
                          2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: XYFaKUDPOGYBAHIhGHU5A8SNlK/vUzxB91tkt5gydPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:b6:aa:cf:3d:22:77:4e:b5:6e:f0:51:8d:b2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
        Validity
            Not Before: Jun 13 07:01:02 2026 GMT
            Not After : Jun 14 07:01:02 2026 GMT
        Subject: CN=b0513123051b861d1d1a21061f256544e3073b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:dc:18:7a:7a:d7:3c:ba:83:b3:80:5e:56:
                    43:2e:39:cb:2d:c5:68:d5:58:c0:74:b9:fa:6c:a6:
                    d6:85:58:68:40:a6:9b:9e:7f:55:e7:b1:4f:74:53:
                    6a:96:2f:d4:39:74:51:3a:78:a4:29:1c:01:33:88:
                    5b:a2:83:6d:f4:ef:c2:31:ed:56:7f:ca:66:37:9e:
                    99:2a:5f:26:a4:3a:63:4d:76:96:51:23:bb:86:02:
                    5a:22:b6:17:56:93:28:83:ee:ea:a2:4d:cc:93:36:
                    9f:69:ec:83:cb:72:91:68:8b:3f:c1:cd:64:81:ee:
                    15:ff:88:78:52:d5:7f:d2:d0:2f:59:d9:a5:aa:4c:
                    59:83:74:72:0f:5d:6c:ef:4a:b1:89:53:28:db:69:
                    21:1d:84:ff:c9:3c:58:86:b0:42:e4:eb:a5:c5:07:
                    7c:6b:8f:d5:80:21:94:6f:fc:ff:48:7b:cc:9b:c8:
                    de:94:cb:23:76:c5:80:29:41:54:da:a2:d1:21:2e:
                    68:d2:d4:de:d4:9c:1d:62:53:33:8e:da:8f:53:87:
                    a2:86:ba:cf:05:76:e5:3b:4d:29:e5:9f:3f:f0:c3:
                    33:b8:37:83:8b:52:86:23:af:a9:bd:d3:1c:48:b4:
                    11:f2:93:fc:a9:0b:df:97:f0:b9:9c:c2:d4:78:34:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:51:31:23:05:1B:86:1D:1D:1A:21:06:1F:25:65:44:E3:07:3B:7E
            X509v3 Authority Key Identifier:
                keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:a5:4f:fa:51:65:db:df:3b:7c:21:9e:00:72:c9:f3:ad:
         5b:b2:b9:fd:f9:f1:99:97:aa:88:91:df:26:8b:4d:23:e0:61:
         3e:16:dd:37:37:84:ee:b4:90:5a:bf:62:e7:a8:5d:4a:e5:97:
         06:13:5d:a8:59:ea:7d:bc:65:6d:92:f7:ed:d3:08:b5:bc:b8:
         7a:76:86:ec:51:fc:80:78:04:c8:16:09:30:d5:c6:45:b9:3f:
         55:47:97:a6:dc:88:34:24:f2:b4:d7:c5:5c:14:60:04:da:24:
         16:41:89:ca:76:26:81:6d:1e:64:3e:61:b1:7f:9c:0d:2e:5b:
         b7:c7:43:cf:de:6a:48:e6:7b:74:8b:7d:74:20:5c:71:08:ea:
         bb:91:c6:41:3e:6d:79:1b:8e:5c:1a:d2:01:12:e0:60:1b:9a:
         52:b2:80:8b:3a:53:0f:35:28:3b:c7:77:2f:41:05:1a:89:f5:
         5c:1c:0e:fb:b7:09:62:e0:f3:90:0e:bf:83:dd:37:0b:81:a5:
         70:f4:e9:1d:5c:98:29:be:15:55:59:e5:84:e6:9d:df:c5:02:
         5a:e5:95:2c:ba:f6:87:a5:98:2c:09:c8:33:cc:62:7f:c2:43:
         da:5b:db:a6:29:d2:68:2a:88:c5:7e:01:33:53:13:d3:b1:01:
         ab:7d:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:58 2026 by rpki-client