Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File:                     mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier:          4hmm/ITGldJKV/hJJ2Rn61cTVP0BvnAxiPZasWO2zbY=
Subject key identifier:   08:10:CE:82:CF:34:88:E6:A6:94:16:D5:92:FE:A4:E7:A4:7B:85:F3
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer:       /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial:       019D996214684DC3FF55C4E3C683FBB5716F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 03:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:34 +0000
Files and hashes:         1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: PUzHDXaGGYFM6eCwaO3L7cFZrBEU5t+0LDRDoVxkrO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:14:68:4d:c3:ff:55:c4:e3:c6:83:fb:b5:71:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
        Validity
            Not Before: Apr 17 03:00:34 2026 GMT
            Not After : Apr 18 03:00:34 2026 GMT
        Subject: CN=0810ce82cf3488e6a69416d592fea4e7a47b85f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:b3:4d:8d:c4:be:52:1a:f9:83:4a:a5:93:
                    a2:c9:87:47:ca:5a:80:43:e4:eb:ad:b1:fd:1f:a8:
                    76:08:c5:e8:4f:f5:f5:2b:23:ca:f5:07:98:f6:54:
                    47:8f:47:9e:10:ae:14:51:fd:76:b3:39:64:96:70:
                    5d:48:e1:b6:31:c3:bb:22:e0:9e:ea:ba:03:e9:43:
                    bd:a6:ad:7c:99:25:5d:39:ce:dc:58:d1:8d:85:10:
                    ae:ad:db:3d:1b:07:31:65:4e:8a:75:f3:7f:81:82:
                    fe:07:0b:6d:fb:be:a4:83:f5:63:41:28:c3:a9:0e:
                    80:b1:60:4f:a1:e3:9d:9a:a1:14:5c:c2:56:67:24:
                    7b:e0:b4:e9:68:5e:99:da:fd:55:9f:aa:eb:c8:64:
                    26:b0:e3:06:e1:6f:fa:e3:68:d4:1f:11:e7:d8:a5:
                    07:19:c2:d0:9e:b7:a9:34:ac:30:f4:ca:cd:29:f3:
                    af:5b:c1:77:cb:01:32:9a:bf:89:7b:e1:48:9b:7a:
                    4e:c6:dc:1c:28:ad:65:09:a8:b7:6d:db:7d:19:c4:
                    04:12:ab:8e:22:26:e7:4e:04:ed:f8:b5:79:b3:35:
                    ca:a8:a4:08:2b:19:0c:5d:6e:dc:99:1d:8a:ef:c5:
                    6d:bc:9d:38:25:a6:35:7c:f9:43:f2:75:76:26:17:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:10:CE:82:CF:34:88:E6:A6:94:16:D5:92:FE:A4:E7:A4:7B:85:F3
            X509v3 Authority Key Identifier:
                keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:47:11:69:3c:a8:d5:ef:07:c6:54:81:51:f9:2c:5a:41:62:
         96:2e:d9:db:37:f6:f6:e4:18:5c:7a:11:50:0f:ce:99:b3:87:
         68:a7:8d:28:c6:29:c5:f7:d1:00:a1:36:b8:0c:4f:8b:78:23:
         ff:d8:97:b7:02:84:58:1e:7a:7e:d3:b8:ce:f1:d2:70:07:f8:
         8a:db:c1:ee:55:e0:9c:2e:2e:40:f8:1d:3d:ed:c5:bb:a4:e7:
         bb:33:66:a0:5e:b1:02:dd:42:e2:8d:09:7f:47:ad:c2:0b:f1:
         09:79:f8:77:42:da:ba:86:dc:53:6b:9f:2a:dd:9d:ed:36:21:
         21:3e:69:e9:96:f3:ce:8e:72:26:18:d9:11:a4:e5:71:86:5d:
         04:8e:9e:c8:5a:d4:03:33:8f:c7:16:21:08:0d:2c:47:1f:c8:
         bd:a6:34:d7:8b:2a:8f:94:41:98:09:26:4b:97:6a:a5:c0:ac:
         66:6c:eb:d7:51:13:52:0c:a3:c1:48:d6:2b:a0:84:a7:5b:84:
         e5:b4:f5:de:11:e7:66:e3:cf:83:2d:14:6c:e4:ba:e1:54:d0:
         b3:46:07:75:5e:af:58:9d:5b:62:57:7c:7d:05:51:8b:56:6c:
         f5:24:2f:89:73:c3:26:65:2a:98:41:2e:f2:80:18:3e:d5:b0:
         28:f2:6d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYhRoTcP/VcTjxoP7tXFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTc5YzkzYTkyMmZiZjczNDkzYmU2YWQ2NWViM2JmZWJh
Nzc3YzUwHhcNMjYwNDE3MDMwMDM0WhcNMjYwNDE4MDMwMDM0WjAzMTEwLwYDVQQD
EygwODEwY2U4MmNmMzQ4OGU2YTY5NDE2ZDU5MmZlYTRlN2E0N2I4NWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx2zTY3EvlIa+YNKpZOiyYdHylqA
Q+TrrbH9H6h2CMXoT/X1KyPK9QeY9lRHj0eeEK4UUf12szlklnBdSOG2McO7IuCe
6roD6UO9pq18mSVdOc7cWNGNhRCurds9GwcxZU6KdfN/gYL+Bwtt+76kg/VjQSjD
qQ6AsWBPoeOdmqEUXMJWZyR74LTpaF6Z2v1Vn6rryGQmsOMG4W/642jUHxHn2KUH
GcLQnrepNKww9MrNKfOvW8F3ywEymr+Je+FIm3pOxtwcKK1lCai3bdt9GcQEEquO
IibnTgTt+LV5szXKqKQIKxkMXW7cmR2K78VtvJ04JaY1fPlD8nV2JhfoXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgQzoLPNIjmppQW1ZL+pOeke4XzMB8GA1UdIwQY
MBaAFJmXnJOpIvv3NJO+atZes7/rp3fFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZGYxNzEtNWNjMy00YzZlLTgwOWQt
YzA5MWRhNjg2OGM3LzEvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hZGYxNzEtNWNjMy00YzZlLTgwOWQtYzA5MWRhNjg2OGM3
LzEvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEcRaTyo
1e8HxlSBUfksWkFili7Z2zf29uQYXHoRUA/OmbOHaKeNKMYpxffRAKE2uAxPi3gj
/9iXtwKEWB56ftO4zvHScAf4itvB7lXgnC4uQPgdPe3Fu6TnuzNmoF6xAt1C4o0J
f0etwgvxCXn4d0LauobcU2ufKt2d7TYhIT5p6Zbzzo5yJhjZEaTlcYZdBI6eyFrU
AzOPxxYhCA0sRx/IvaY014sqj5RBmAkmS5dqpcCsZmzr11ETUgyjwUjWK6CEp1uE
5bT13hHnZuPPgy0UbOS64VTQs0YHdV6vWJ1bYld8fQVRi1Zs9SQviXPDJmUqmEEu
8oAYPtWwKPJtVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:40 2026 by rpki-client