Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          4cHgyRitsq0DAPXOWmby8/Yw7a8gGNAbgRqEazrQKFU=
Subject key identifier:   EA:F5:80:AE:85:5E:5C:4B:F2:5B:00:99:21:51:BE:0B:DB:D4:95:B5
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       019D984F8A8DBFE3EE27449C69C19CBFC7A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          1601
Signing time:             Thu 16 Apr 2026 22:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:42 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:42 +0000
Files and hashes:         1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: +5noxmGaY6AAc0J4RcHgvZ0sFozngZHgjBbXeEpJagM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:8a:8d:bf:e3:ee:27:44:9c:69:c1:9c:bf:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Apr 16 22:00:42 2026 GMT
            Not After : Apr 17 22:00:42 2026 GMT
        Subject: CN=eaf580ae855e5c4bf25b00992151be0bdbd495b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:20:06:26:01:7d:78:cf:8a:56:a5:69:c3:
                    0f:8c:2c:ae:71:cc:f0:f5:bb:c4:1e:18:88:21:dc:
                    43:e4:9d:f3:86:29:fe:06:7b:8c:e0:de:f5:94:aa:
                    a4:8f:82:7f:04:72:34:60:f2:1d:8b:66:48:c3:eb:
                    e4:09:d5:34:94:bd:1c:2e:46:bb:fd:07:c4:3b:9a:
                    45:86:68:a2:e4:b4:38:75:79:05:3b:22:cb:35:5b:
                    78:1d:77:4c:29:a9:00:f9:b1:3b:30:3a:8d:d2:a1:
                    6a:f0:5a:39:d2:14:b7:c9:8c:c1:b8:c5:29:58:94:
                    96:da:27:e2:06:7a:c3:aa:2f:84:1d:06:a3:03:87:
                    1b:69:e2:43:ca:7b:d7:8b:9d:3a:98:20:b7:3d:e7:
                    8e:55:86:68:0d:af:74:b5:fa:77:ab:4b:32:6c:c3:
                    85:d0:73:d3:71:e4:99:b0:bb:d4:95:45:9a:8e:02:
                    39:30:eb:19:93:f3:08:dd:91:58:8e:68:c1:c3:2d:
                    10:7b:d4:25:3e:54:cf:6a:ec:b2:1f:64:2e:31:bc:
                    70:2b:34:a0:a1:7d:0f:59:98:15:7f:c7:44:c7:3f:
                    91:cd:55:b6:28:6a:4a:a1:33:79:64:ef:17:75:f0:
                    07:e3:db:f9:88:a1:97:b7:5e:82:a5:70:f0:78:e6:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F5:80:AE:85:5E:5C:4B:F2:5B:00:99:21:51:BE:0B:DB:D4:95:B5
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:f3:04:a3:2b:5a:2e:93:b4:cf:98:01:97:ee:d6:e9:25:
         9d:f8:e1:6d:67:4b:f7:7c:18:90:05:5c:47:ae:15:b9:ca:a4:
         7d:3e:f8:f1:c2:8f:26:12:a4:ce:82:99:88:07:1f:89:a2:31:
         7e:ec:f7:cd:91:6a:e8:9d:69:3f:c8:0d:4e:80:2a:96:9d:13:
         ac:56:98:da:6d:1d:20:44:c6:5e:4d:c7:db:5d:11:44:43:48:
         b3:8c:68:22:75:6c:6d:47:02:34:0b:5a:e3:5f:f2:da:29:72:
         1e:47:be:ee:b9:e9:6b:57:af:5a:6b:78:93:f8:dd:c4:13:22:
         86:ca:66:14:8d:d5:48:84:67:e3:6a:d2:6b:e6:4f:a2:ca:83:
         cb:5f:d4:9e:d1:fc:e8:12:85:6a:ab:d4:7d:65:fb:df:1f:48:
         0a:e0:e2:2e:70:23:ef:42:28:e4:61:51:fd:2b:bf:1e:ff:45:
         fa:22:c5:f6:3c:db:63:76:2a:af:80:ea:fc:24:90:6e:26:23:
         fc:67:69:3b:b3:0d:b8:02:0d:32:29:c4:36:f8:33:eb:ed:de:
         f3:ca:35:a5:6d:4a:93:46:3d:95:c0:71:09:e0:4e:7d:ef:c6:
         04:0f:f3:32:d3:79:0b:0a:74:b7:a0:19:40:3c:0d:55:46:a4:
         4c:d9:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:38 2026 by rpki-client