Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
File:                     zeHP7MkrEE_Pqe_saljwwZeQFlI.mft (raw, json)
Hash identifier:          8vGDzo8ClGkiygOgWxX3mPGL7lc2k2IgYJBBQEyJtO0=
Subject key identifier:   C6:80:9F:A0:83:0F:0B:A4:47:B9:A7:52:ED:F5:87:96:28:4B:4C:D9
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Certificate issuer:       /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial:       019DA37877406085C4F46EF3E7BB5E8EC543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
Manifest number:          0874
Signing time:             Sun 19 Apr 2026 02:01:14 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:14 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:14 +0000
Files and hashes:         1: 1Pl1iEj3pOl4af_S0pcP4CMrG30.roa (hash: Bfn9XfoIj04iU0Dz8XIWd4MRuYoMEdKPDCStjjkmGQI=)
                          2: ADQlbM8sNMjUliYADvZi1vFYCX8.roa (hash: DFQ5JtyBKyH9OftpjAdW9wf9ak94Zl+o0z+vbeKe7Xw=)
                          3: NyoPRKnIUuvoU34RyJTT9jDQNKQ.roa (hash: vt3QquyuzzS/PaYQOqdD/BXgViAeJkpSXJsCJnK4Cnw=)
                          4: zeHP7MkrEE_Pqe_saljwwZeQFlI.crl (hash: D/COZr6FBPzAbQ6gWo/H1uxnL99P45o7FEHxT5HdEeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:77:40:60:85:c4:f4:6e:f3:e7:bb:5e:8e:c5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
        Validity
            Not Before: Apr 19 02:01:14 2026 GMT
            Not After : Apr 20 02:01:14 2026 GMT
        Subject: CN=c6809fa0830f0ba447b9a752edf58796284b4cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:2c:7d:e8:bd:70:63:40:08:cb:45:16:b9:
                    d0:ed:a7:59:06:07:53:cc:4c:24:c9:27:52:4d:f4:
                    d8:0f:a2:fe:10:1f:4c:2e:34:93:7f:3e:c4:48:31:
                    7d:74:e3:16:35:06:eb:ff:34:45:6e:f2:c3:ff:33:
                    7e:cf:18:47:d2:37:31:ab:e0:b3:e4:64:9f:22:69:
                    95:98:57:73:b4:03:19:78:ea:94:db:f5:62:2d:b3:
                    cf:93:54:da:83:7e:a9:f9:2e:8a:93:3b:48:fe:3f:
                    48:e2:4e:38:90:21:a2:49:ef:2f:aa:30:ef:9c:70:
                    fe:17:61:8c:53:8f:4c:33:aa:71:da:1d:5c:da:5b:
                    65:64:27:93:5a:84:95:61:41:dd:64:40:e7:f4:d5:
                    ae:da:13:b0:72:d1:07:11:fa:a8:34:af:b3:08:ba:
                    12:4c:71:24:b9:01:67:73:fa:10:d3:c6:90:bd:11:
                    03:e6:d0:1e:19:ad:80:72:24:29:72:00:b6:f3:79:
                    43:b2:6b:18:b5:5e:e4:f8:5d:cd:d4:9d:ec:23:d0:
                    51:ab:95:1a:f4:95:34:66:87:eb:ad:6b:26:3c:37:
                    0e:c8:25:de:6f:51:f7:73:0f:86:97:cb:54:64:96:
                    8b:82:65:a1:fb:2a:25:45:9b:15:f8:f3:41:8b:de:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:9F:A0:83:0F:0B:A4:47:B9:A7:52:ED:F5:87:96:28:4B:4C:D9
            X509v3 Authority Key Identifier:
                keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:43:00:e1:6d:10:8d:42:81:3c:5f:8e:2a:65:49:c2:3a:
         f2:6f:ca:09:a7:8e:92:19:36:e6:81:14:55:24:15:e4:28:b1:
         10:2f:f3:1e:f9:a6:57:d6:62:03:de:c4:d8:51:17:73:fa:a2:
         89:0d:c5:00:52:ba:47:cd:3b:ad:f3:30:93:6e:00:71:f8:72:
         a7:ff:cc:6a:f3:5b:16:c5:a9:2c:1e:0a:48:91:97:b9:a7:31:
         47:b7:72:80:a0:7f:b0:1f:8f:90:f5:a5:c2:a7:2b:fd:3b:56:
         3a:98:77:91:9d:5d:8d:6b:65:a8:a3:46:6a:0f:89:c2:66:44:
         c2:4d:93:db:f6:68:b8:30:80:5f:11:31:eb:a6:21:92:72:e5:
         d3:1a:85:f7:23:af:8c:7b:88:a2:0d:8f:c5:72:46:e3:3d:11:
         2e:65:17:d9:85:7e:f3:66:d9:a1:2b:f2:ea:23:ec:cc:f0:07:
         cc:20:da:8d:b9:04:18:e2:82:2e:36:41:c7:fa:2c:c5:30:32:
         ee:da:a1:cc:b3:25:a2:ef:61:30:c8:bf:84:1b:e9:b9:f9:1b:
         c3:d1:73:26:45:54:26:6a:9c:70:9c:1d:8d:87:82:7d:9a:83:
         61:1e:74:dd:4d:bd:8d:a9:40:e1:3f:cd:30:40:28:33:d2:c5:
         78:dc:a4:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeHdAYIXE9G7z57tejsVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTFjZmVjYzkyYjEwNGZjZmE5ZWZlYzZhNThmMGMxOTc5
MDE2NTIwHhcNMjYwNDE5MDIwMTE0WhcNMjYwNDIwMDIwMTE0WjAzMTEwLwYDVQQD
EyhjNjgwOWZhMDgzMGYwYmE0NDdiOWE3NTJlZGY1ODc5NjI4NGI0Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg4sfei9cGNACMtFFrnQ7adZBgdT
zEwkySdSTfTYD6L+EB9MLjSTfz7ESDF9dOMWNQbr/zRFbvLD/zN+zxhH0jcxq+Cz
5GSfImmVmFdztAMZeOqU2/ViLbPPk1Tag36p+S6KkztI/j9I4k44kCGiSe8vqjDv
nHD+F2GMU49MM6px2h1c2ltlZCeTWoSVYUHdZEDn9NWu2hOwctEHEfqoNK+zCLoS
THEkuQFnc/oQ08aQvRED5tAeGa2AciQpcgC283lDsmsYtV7k+F3N1J3sI9BRq5Ua
9JU0ZofrrWsmPDcOyCXeb1H3cw+Gl8tUZJaLgmWh+yolRZsV+PNBi96yLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaAn6CDDwukR7mnUu31h5YoS0zZMB8GA1UdIwQY
MBaAFM3hz+zJKxBPz6nv7GpY8MGXkBZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYt
ODc0NWRlMmY0MzIxLzEvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYtODc0NWRlMmY0MzIx
LzEvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7hDAOFt
EI1CgTxfjiplScI68m/KCaeOkhk25oEUVSQV5CixEC/zHvmmV9ZiA97E2FEXc/qi
iQ3FAFK6R807rfMwk24Acfhyp//MavNbFsWpLB4KSJGXuacxR7dygKB/sB+PkPWl
wqcr/TtWOph3kZ1djWtlqKNGag+JwmZEwk2T2/ZouDCAXxEx66YhknLl0xqF9yOv
jHuIog2PxXJG4z0RLmUX2YV+82bZoSvy6iPszPAHzCDajbkEGOKCLjZBx/osxTAy
7tqhzLMlou9hMMi/hBvpufkbw9FzJkVUJmqccJwdjYeCfZqDYR503U29jalA4T/N
MEAoM9LFeNykPw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:24 2026 by rpki-client