Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File:                     Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier:          R9R9s2pQ9mzbpO7edKjDY3ho51KGgUwUAPhgBAE5jF4=
Subject key identifier:   DD:E5:18:B3:A4:42:C9:D5:DA:18:37:B7:4B:17:E5:EB:DB:7B:40:02
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer:       /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial:       019D97748520752BB03066E81A0A07B55566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number:          18BF
Signing time:             Thu 16 Apr 2026 18:01:28 +0000
Manifest this update:     Thu 16 Apr 2026 18:01:28 +0000
Manifest next update:     Fri 17 Apr 2026 18:01:28 +0000
Files and hashes:         1: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: iJ700oUhmdLrcMt/yjHykQAhrIj4bJLdQ5Y5DZgafHM=)
                          2: vXSPj4U0XPgUCORzKqKn2pQ-_54.roa (hash: a+QqfJndzh+WZAcq/hkoF/C3W7oEsp7bn060vJhpI74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:74:85:20:75:2b:b0:30:66:e8:1a:0a:07:b5:55:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
        Validity
            Not Before: Apr 16 18:01:28 2026 GMT
            Not After : Apr 17 18:01:28 2026 GMT
        Subject: CN=dde518b3a442c9d5da1837b74b17e5ebdb7b4002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:56:e8:92:74:3e:b2:79:aa:ac:79:dd:60:
                    33:30:0b:31:1a:f3:33:73:9d:40:b9:cd:d4:16:00:
                    f0:a7:25:52:74:05:63:ed:cd:63:ce:a9:af:55:ec:
                    f2:ec:1b:ef:0b:58:8e:3b:46:b7:80:9d:1d:a1:96:
                    84:71:12:f5:7b:49:02:c1:e7:33:af:ec:81:ff:a0:
                    89:a7:f3:1f:88:e5:0f:38:cc:03:48:db:a8:8f:5d:
                    12:49:07:6c:36:1a:13:07:ac:8f:2c:11:b0:4f:2b:
                    f3:ad:32:f2:f6:09:0d:6b:49:45:51:ec:cf:33:b8:
                    3e:e0:aa:50:43:17:db:82:1c:19:ea:81:08:25:da:
                    57:6e:50:7f:b5:cd:7b:29:b8:37:9c:61:3c:37:93:
                    15:80:8a:75:19:4e:5b:c7:90:2e:2e:fe:de:e0:a1:
                    02:19:6a:2c:94:38:7e:6f:97:6d:eb:ac:b4:07:c3:
                    63:80:6b:16:0f:e7:2d:be:e2:9a:7c:20:2e:b4:bc:
                    44:42:e4:75:d7:2b:4c:67:df:73:1a:ae:34:8f:07:
                    44:9e:c3:84:97:23:9a:0a:28:08:d6:20:92:94:3d:
                    19:e8:30:c9:e4:d6:bd:3c:58:93:79:b8:eb:b0:21:
                    d6:54:64:d5:4f:d6:b9:a2:0c:ce:b7:0b:d2:03:3e:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:18:B3:A4:42:C9:D5:DA:18:37:B7:4B:17:E5:EB:DB:7B:40:02
            X509v3 Authority Key Identifier:
                keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:22:57:7f:24:fb:77:91:cc:be:67:6a:23:b8:a7:c7:d5:
         83:a1:46:d9:6d:a4:7d:1e:43:30:e0:53:11:19:ee:74:ef:2a:
         74:a9:21:e2:88:85:26:ac:c9:0c:a2:28:bd:61:c3:aa:9d:ef:
         3b:55:5b:f9:f6:fd:77:42:e4:ce:69:43:9c:93:ce:c7:56:b9:
         04:2a:8b:c4:d9:63:38:07:b5:a0:13:da:e9:1e:fa:3d:62:5e:
         ac:9a:c0:4e:e8:be:1b:32:28:c6:b9:1e:70:80:f2:27:f7:9a:
         13:09:d1:2a:66:bc:81:e0:08:89:db:23:d7:cc:5e:1c:63:50:
         d2:77:90:5b:77:75:e1:19:e9:4d:67:5e:cc:6e:2e:d9:0d:33:
         37:dd:e5:54:23:a4:61:8f:b2:f8:26:06:04:be:2f:c9:eb:63:
         17:24:47:9c:f2:b6:f9:43:fb:9a:75:fd:c1:1d:46:ac:84:95:
         80:8c:98:51:d9:4e:f5:66:b6:f6:73:bf:96:fa:71:a4:1d:56:
         a6:b5:0e:cb:3b:93:23:76:8f:4b:ac:25:a8:3c:a0:a6:7c:8c:
         a1:ba:ed:9a:b9:2a:e9:bc:83:46:31:86:fd:fc:7d:69:a6:c9:
         90:6a:74:b4:9f:3e:6f:5f:d6:c8:0d:7a:7a:e4:52:c7:14:eb:
         b4:c8:c0:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdIUgdSuwMGboGgoHtVVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZGNkOTI2YmYzNzBkM2ZhMDE4M2ExMzhiNTdiMDk4M2Nk
YWNhMGEwHhcNMjYwNDE2MTgwMTI4WhcNMjYwNDE3MTgwMTI4WjAzMTEwLwYDVQQD
EyhkZGU1MThiM2E0NDJjOWQ1ZGExODM3Yjc0YjE3ZTVlYmRiN2I0MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVNW6JJ0PrJ5qqx53WAzMAsxGvMz
c51Auc3UFgDwpyVSdAVj7c1jzqmvVezy7BvvC1iOO0a3gJ0doZaEcRL1e0kCwecz
r+yB/6CJp/MfiOUPOMwDSNuoj10SSQdsNhoTB6yPLBGwTyvzrTLy9gkNa0lFUezP
M7g+4KpQQxfbghwZ6oEIJdpXblB/tc17Kbg3nGE8N5MVgIp1GU5bx5AuLv7e4KEC
GWoslDh+b5dt66y0B8NjgGsWD+ctvuKafCAutLxEQuR11ytMZ99zGq40jwdEnsOE
lyOaCigI1iCSlD0Z6DDJ5Na9PFiTebjrsCHWVGTVT9a5ogzOtwvSAz7zkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3lGLOkQsnV2hg3t0sX5evbe0ACMB8GA1UdIwQY
MBaAFGfc2Sa/Nw0/oBg6E4tXsJg82soKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjIt
OWY1YjJlYjQ5MmEwLzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjItOWY1YjJlYjQ5MmEw
LzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9wiV38k
+3eRzL5naiO4p8fVg6FG2W2kfR5DMOBTERnudO8qdKkh4oiFJqzJDKIovWHDqp3v
O1Vb+fb9d0LkzmlDnJPOx1a5BCqLxNljOAe1oBPa6R76PWJerJrATui+GzIoxrke
cIDyJ/eaEwnRKma8geAIidsj18xeHGNQ0neQW3d14RnpTWdezG4u2Q0zN93lVCOk
YY+y+CYGBL4vyetjFyRHnPK2+UP7mnX9wR1GrISVgIyYUdlO9Wa29nO/lvpxpB1W
prUOyzuTI3aPS6wlqDygpnyMobrtmrkq6byDRjGG/fx9aabJkGp0tJ8+b1/WyA16
euRSxxTrtMjA2A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:56 2026 by rpki-client