Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File:                     pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier:          9dzGBKSEvCMweWFOuMvaKFkuRDYeVDh5QvSda/SYeLw=
Subject key identifier:   3C:1F:6A:DA:AF:E4:85:F6:8D:05:1D:B7:D4:FD:4C:5D:D6:96:8A:13
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       019D98F41E210AC78E2B9A9109487A59E151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number:          0A50
Signing time:             Fri 17 Apr 2026 01:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:28 +0000
Files and hashes:         1: 3jTH1h5dUYotQ6HSif98N43DNuA.asa (hash: sd2VnqkRw5U6ZlFZBJnlXiTwm3x3Tfojh0Hk8MPRlmE=)
                          2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 5wd49llhVysU+VjVvRx1bNhyUxLSeW+eMdJAuzWnlDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:1e:21:0a:c7:8e:2b:9a:91:09:48:7a:59:e1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: Apr 17 01:00:28 2026 GMT
            Not After : Apr 18 01:00:28 2026 GMT
        Subject: CN=3c1f6adaafe485f68d051db7d4fd4c5dd6968a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:6a:52:0d:1c:44:52:ef:ea:94:8d:7e:a5:
                    86:c6:c8:26:7e:39:03:c5:4e:e7:d3:cc:ce:34:7b:
                    d3:3d:8b:46:6c:5e:c5:db:f6:29:07:f6:0b:31:05:
                    f7:d1:d9:3a:70:1c:64:7c:b3:d4:5f:44:f3:d8:16:
                    65:13:37:5e:37:c1:ba:bb:14:b5:90:a9:a1:68:dd:
                    32:cf:80:68:a5:8d:40:48:fc:43:05:61:25:69:c3:
                    2e:0e:09:00:a7:94:84:e4:08:fa:9c:6b:77:da:22:
                    e2:28:77:20:60:32:e3:c2:65:c1:e5:40:19:19:eb:
                    e8:74:39:3a:78:16:63:fd:e5:c0:c5:e8:78:c7:47:
                    1b:af:43:63:53:43:f6:b2:6a:a5:4d:e9:7e:3a:c0:
                    fc:4f:0e:a4:c5:dd:9f:b8:47:6a:59:04:b2:15:52:
                    9f:0e:a3:93:df:30:71:6f:81:5e:22:27:9e:1a:c9:
                    3a:bc:e5:e8:5c:3c:d0:ea:16:af:af:f8:5f:fe:f6:
                    ed:a3:b8:2a:c2:e2:4f:49:a7:4f:fd:6b:21:31:92:
                    88:8a:2f:5a:10:ab:61:9a:76:38:fb:2a:90:c3:dd:
                    4a:d6:c3:02:74:ca:07:5c:bd:87:db:5b:cc:5a:1f:
                    fa:37:13:74:51:d2:e7:10:e1:a9:3e:16:bb:1f:ce:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1F:6A:DA:AF:E4:85:F6:8D:05:1D:B7:D4:FD:4C:5D:D6:96:8A:13
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e4:2c:41:a3:90:8f:b7:e3:98:5c:91:28:8b:4d:43:bd:ad:
         a5:ad:d6:64:3f:19:13:96:18:ae:e9:ab:ba:f8:0b:56:2e:52:
         cf:40:91:1a:f0:7f:bd:46:60:8c:cb:66:d5:e1:8b:e8:6d:92:
         97:f8:ad:c3:72:75:5e:3a:2b:27:53:54:4b:eb:28:db:39:a4:
         ea:60:6e:b4:39:37:51:e3:92:91:17:f6:11:2d:ad:22:fb:12:
         87:d7:bd:5a:6b:2d:7b:d2:e5:06:38:72:55:14:78:9d:1b:be:
         58:cc:cc:e8:0c:62:64:56:9f:01:a8:19:ca:7a:52:88:7e:66:
         2e:c5:82:c5:d1:e1:e5:cb:5c:82:0a:7e:55:f7:c6:20:67:70:
         39:04:7f:7d:64:db:7d:2c:b6:ea:ea:c3:9b:ed:31:a1:a8:f9:
         de:5d:5f:e2:21:72:83:e9:7a:22:dd:b7:34:52:57:4f:c9:8e:
         35:73:04:c0:74:75:ef:4b:61:e8:ff:65:cf:fa:93:9b:0e:ec:
         4e:33:3c:41:39:d8:75:db:c4:e2:a9:18:f6:e5:d9:18:21:53:
         85:2d:e6:db:a1:df:f6:08:46:dd:49:75:86:29:31:d3:a9:08:
         a4:32:ef:9a:a7:51:3e:3a:b0:2e:5c:d4:c0:8e:03:7b:20:b6:
         ff:59:0c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9B4hCseOK5qRCUh6WeFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz
ZTM2OGIwHhcNMjYwNDE3MDEwMDI4WhcNMjYwNDE4MDEwMDI4WjAzMTEwLwYDVQQD
EygzYzFmNmFkYWFmZTQ4NWY2OGQwNTFkYjdkNGZkNGM1ZGQ2OTY4YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGtqUg0cRFLv6pSNfqWGxsgmfjkD
xU7n08zONHvTPYtGbF7F2/YpB/YLMQX30dk6cBxkfLPUX0Tz2BZlEzdeN8G6uxS1
kKmhaN0yz4BopY1ASPxDBWElacMuDgkAp5SE5Aj6nGt32iLiKHcgYDLjwmXB5UAZ
GevodDk6eBZj/eXAxeh4x0cbr0NjU0P2smqlTel+OsD8Tw6kxd2fuEdqWQSyFVKf
DqOT3zBxb4FeIieeGsk6vOXoXDzQ6havr/hf/vbto7gqwuJPSadP/WshMZKIii9a
EKthmnY4+yqQw91K1sMCdMoHXL2H21vMWh/6NxN0UdLnEOGpPha7H84p2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwfatqv5IX2jQUdt9T9TF3WlooTMB8GA1UdIwQY
MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt
OGYwNjNhNWY2YTg2LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2
LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOQsQaOQ
j7fjmFyRKItNQ72tpa3WZD8ZE5YYrumruvgLVi5Sz0CRGvB/vUZgjMtm1eGL6G2S
l/itw3J1XjorJ1NUS+so2zmk6mButDk3UeOSkRf2ES2tIvsSh9e9Wmste9LlBjhy
VRR4nRu+WMzM6AxiZFafAagZynpSiH5mLsWCxdHh5ctcggp+VffGIGdwOQR/fWTb
fSy26urDm+0xoaj53l1f4iFyg+l6It23NFJXT8mONXMEwHR170th6P9lz/qTmw7s
TjM8QTnYddvE4qkY9uXZGCFThS3m26Hf9ghG3Ul1hikx06kIpDLvmqdRPjqwLlzU
wI4DeyC2/1kMew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:42 2026 by rpki-client