Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File:                     ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier:          JMa0dwfyyMSBtg//oDrib2WPeTYJyH4FpL72udZqcYI=
Subject key identifier:   F0:2E:81:71:9B:4D:D1:DE:1C:31:A9:0E:9C:F6:54:D6:0C:44:12:8A
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer:       /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial:       019D9999278583B0411026FE74918436EF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 04:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:44 +0000
Files and hashes:         1: GiLRiv4zUbiilyFJpKK-23nRrjw.roa (hash: Kbnw8RS+Cm1uYqFyCwki9S+J7BCZ8MZV4GQgLuCN37I=)
                          2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: E8lgYr1CQ4eu27tdJ1r5/NrlpS5nfrCyt8YBsYwKQnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:27:85:83:b0:41:10:26:fe:74:91:84:36:ef:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
        Validity
            Not Before: Apr 17 04:00:44 2026 GMT
            Not After : Apr 18 04:00:44 2026 GMT
        Subject: CN=f02e81719b4dd1de1c31a90e9cf654d60c44128a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:8b:a8:fa:2c:5e:c5:49:8e:a7:90:85:de:
                    75:4a:c9:a9:be:a7:71:ef:2b:86:cc:fa:cc:8d:17:
                    f7:ef:2f:c5:83:ff:37:fe:2d:c3:d1:3e:01:94:af:
                    02:59:12:3f:e8:3c:55:f7:8c:55:fe:7a:84:82:00:
                    3d:6e:3e:da:c4:d2:56:0f:2c:e6:5a:9b:c8:a9:b9:
                    e2:65:f5:c7:08:25:76:01:8a:92:92:d1:3c:40:dd:
                    1e:d5:a5:86:6c:3a:2d:90:ed:4d:52:57:a1:bf:07:
                    21:35:e7:d8:9b:6d:8c:32:fa:37:e1:64:42:10:3b:
                    53:49:33:34:10:43:29:01:2b:02:a2:e1:d6:ee:1e:
                    fb:46:6a:5f:2f:10:1b:3f:de:82:1d:7b:3b:a4:bd:
                    f7:bf:1e:d3:c8:9f:88:ad:e4:cf:af:f1:26:ad:ca:
                    c1:01:47:ae:0f:a0:20:da:09:b6:67:c4:34:20:80:
                    55:8c:03:cc:ca:b1:2f:68:a4:e9:99:0b:db:a5:3b:
                    38:9c:e3:00:90:07:60:5b:09:76:3f:e1:c8:77:43:
                    30:78:e1:a5:e1:ac:f7:76:e5:d2:7c:4b:57:e0:56:
                    33:bf:67:9e:4c:7c:dd:45:96:fa:72:72:ac:1d:a1:
                    30:50:69:7b:70:04:91:1c:39:7b:24:d5:7e:3d:f1:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:81:71:9B:4D:D1:DE:1C:31:A9:0E:9C:F6:54:D6:0C:44:12:8A
            X509v3 Authority Key Identifier:
                keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:2c:9e:4e:bd:78:16:5d:32:ac:6b:ad:98:38:88:a2:1f:
         4d:98:7e:1a:5e:8e:f0:9c:d3:34:46:e9:e7:dc:33:eb:b8:6f:
         02:f1:e6:94:81:d6:58:6c:61:d1:80:ee:59:64:b1:66:78:3e:
         97:ca:92:7b:bb:b1:4d:05:12:2c:3d:d1:1b:70:ef:ba:df:4d:
         8f:b1:fb:b6:6b:9f:03:62:61:2d:f1:67:a4:84:cc:80:44:2d:
         c6:4b:c5:21:ea:42:c8:0d:68:d6:cc:e8:46:4e:07:cc:0c:1c:
         7f:cd:db:9e:8e:ce:66:a1:83:fd:d8:92:95:cd:db:d8:b4:4e:
         72:14:10:16:8d:77:7c:03:f2:c5:03:cc:0a:7d:f6:99:3b:97:
         cb:9a:55:54:71:c3:ed:75:e3:a7:f9:7d:34:c0:e7:1d:8c:f1:
         c7:39:55:d0:c6:e8:35:51:b3:30:20:08:67:d2:e5:63:bb:13:
         68:f5:3e:72:38:4c:4e:c6:9c:c6:6a:5f:8c:b5:d8:4e:be:d2:
         1f:f2:03:a6:3f:13:04:1f:94:1c:99:95:47:f0:06:7b:f6:f8:
         b9:bf:d7:2b:01:76:8f:56:34:42:a8:7d:1f:3c:ec:b7:ee:94:
         c3:50:d6:ac:60:16:15:62:2c:82:0d:d0:db:f1:fd:fd:21:47:
         72:01:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:30 2026 by rpki-client