Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File:                     ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier:          Lt/DM8zdybGHryhs4XKnNUPJdLgjSgqyhUYF7mpNDVg=
Subject key identifier:   DF:CB:D2:8E:DB:50:1D:F7:69:76:7B:24:34:52:9B:E2:95:EA:82:BA
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer:       /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial:       019D99623120D39D40D1D6BF9A89F1C50F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number:          1403
Signing time:             Fri 17 Apr 2026 03:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:42 +0000
Files and hashes:         1: 07rXMz57aCvPfzZgqTtv0tfd--k.roa (hash: Zf7FLTeUlrTimYkYJqQH9p6Rab0OTFZZ2orzaq4XoQw=)
                          2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: YnD9tSNyrRrX703iK7kAq361bYVW8dYqWGTYgIEwy58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:31:20:d3:9d:40:d1:d6:bf:9a:89:f1:c5:0f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
        Validity
            Not Before: Apr 17 03:00:42 2026 GMT
            Not After : Apr 18 03:00:42 2026 GMT
        Subject: CN=dfcbd28edb501df769767b2434529be295ea82ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:7c:ed:6f:19:8d:bb:89:a9:3e:04:24:7d:
                    3b:ab:f6:e2:3d:c3:77:06:5a:9f:f0:20:3c:6d:5c:
                    b1:0d:e9:75:a4:7d:7c:19:1a:cb:74:e3:75:6e:16:
                    15:e0:fc:b2:1b:90:12:0c:45:c7:fc:df:3e:8e:a4:
                    7e:b2:8f:07:45:3f:1c:5b:70:c5:86:dc:fe:ac:ef:
                    08:08:f6:ab:4a:ef:23:98:8c:24:ab:0a:a8:de:27:
                    45:4d:a2:b5:8c:16:70:25:d6:d0:da:ef:18:46:2c:
                    66:78:41:99:0a:27:e8:f8:9c:d1:31:47:bb:18:6d:
                    5f:c4:cb:29:39:fa:45:4e:8f:8d:2d:5b:25:55:a1:
                    81:e6:be:30:4a:13:34:51:56:47:75:a2:81:6a:00:
                    33:5f:64:c3:05:b2:c4:47:54:54:37:26:96:c9:9f:
                    30:de:ae:0a:45:f8:54:65:c2:c0:0f:91:ab:c2:a9:
                    79:f1:fc:0b:dd:bb:de:31:19:14:e0:df:9d:cb:e5:
                    f9:c7:12:0a:9f:80:cf:06:99:0e:fd:d0:2a:95:c8:
                    a5:99:04:cb:e3:de:df:a6:c8:26:73:d0:0f:66:59:
                    ab:c6:ef:0d:92:05:94:7f:a2:57:ae:1e:d5:4a:df:
                    93:8a:ca:87:59:51:ef:f9:85:3d:10:a6:c0:0d:92:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CB:D2:8E:DB:50:1D:F7:69:76:7B:24:34:52:9B:E2:95:EA:82:BA
            X509v3 Authority Key Identifier:
                keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:d0:24:88:1f:f6:da:4f:ea:a7:1c:fe:ae:64:e9:b7:3d:
         59:fd:85:36:1a:4c:3b:49:94:4c:8d:20:fb:ff:88:13:c5:de:
         1e:68:9e:0a:d3:a5:ab:79:e7:b2:bc:4b:cc:1c:7a:fc:81:5a:
         bf:6d:e5:11:08:6c:2b:7d:c3:c4:b4:32:56:fb:b8:df:95:ad:
         38:63:d1:28:e6:9b:54:6a:ec:37:7a:53:7f:92:3c:9b:0e:de:
         05:f1:5a:96:7c:86:07:ca:56:fa:4e:af:80:ed:51:18:8b:89:
         ac:ce:f6:78:bc:d9:13:4f:39:76:82:f0:fd:57:5d:85:96:b1:
         19:42:20:74:a9:d1:1a:84:eb:24:c6:40:09:c5:41:2e:1e:5e:
         29:ad:7e:bc:08:73:71:1a:02:0c:05:76:7d:0b:16:cb:5e:af:
         d7:c4:a1:de:eb:68:19:fe:f6:e7:21:74:3e:88:12:b1:fc:4b:
         53:de:f4:5b:d0:49:82:13:2b:7e:a0:cf:a6:0f:11:2c:e3:16:
         7c:e0:f8:0c:8b:7c:05:97:4c:4a:89:d8:a1:7a:05:55:58:70:
         ea:7d:ba:0c:17:9e:c0:b8:aa:ef:06:1f:a2:2a:7f:8a:a4:02:
         75:b3:35:a0:30:1e:f0:6a:34:b6:1c:b8:0d:cf:00:d2:5c:cd:
         92:f7:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:47 2026 by rpki-client