Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          9N8KfDWnvcQVdAB5AmpFr3PMQndpNzqdnAcv7xcq3b4=
Subject key identifier:   25:30:DA:57:FA:04:86:9C:E3:E2:F5:18:5A:E0:B0:C0:5A:B7:98:6C
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       019D9BBF24AF9CF6EF157B25E4556651817F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          10E3
Signing time:             Fri 17 Apr 2026 14:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:28 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: cd3tSNhe/dToJLzL7kS2kXT5lU2+szmZCF5f68fNxKE=)
                          2: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (hash: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:24:af:9c:f6:ef:15:7b:25:e4:55:66:51:81:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Apr 17 14:01:28 2026 GMT
            Not After : Apr 18 14:01:28 2026 GMT
        Subject: CN=2530da57fa04869ce3e2f5185ae0b0c05ab7986c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:7a:c8:76:59:75:a0:c9:8e:d0:76:33:7d:
                    07:6b:1d:c3:9b:a9:8d:a0:8b:d2:28:26:d9:7b:d9:
                    4f:cf:9d:12:a4:c6:8f:83:e3:6c:dc:e2:c2:31:cf:
                    bb:83:49:8c:74:df:79:ef:26:5b:b5:04:8e:f1:67:
                    fb:59:5a:0a:9d:1c:62:6d:27:98:bd:e6:99:45:70:
                    42:fc:54:82:95:ce:dd:f6:4b:6a:72:35:16:82:a3:
                    5b:fe:ae:38:f7:1d:90:9b:82:da:0c:ce:49:b7:d4:
                    3d:e0:0a:13:88:85:5c:0d:5a:d6:29:fa:6c:2f:30:
                    3a:8a:85:b8:9e:8f:dc:5b:4d:2a:d2:e3:4d:b3:0a:
                    fb:72:0a:3b:75:e8:d7:db:62:46:20:65:fb:71:63:
                    a7:9e:60:68:b9:95:78:0d:ab:dd:de:21:58:74:24:
                    43:e7:c2:06:3e:38:bd:86:3d:40:5d:b9:06:17:31:
                    4d:3d:18:2b:56:9e:3c:60:eb:7b:84:1b:ec:02:60:
                    b4:59:bb:b3:5d:ba:cc:82:1b:da:93:8b:d0:a5:f3:
                    4a:fc:38:f6:1d:52:ce:49:01:09:1b:64:01:78:a6:
                    bb:64:87:1a:53:82:79:55:3d:35:2a:4b:dd:7e:c3:
                    9f:bf:ab:81:36:2e:12:e9:56:65:70:22:a2:52:47:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:30:DA:57:FA:04:86:9C:E3:E2:F5:18:5A:E0:B0:C0:5A:B7:98:6C
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:10:1a:b9:8a:98:1e:33:03:c4:03:42:66:a7:d2:42:ed:
         c3:fd:5f:ac:66:38:47:0f:86:ab:fd:06:c0:76:c0:98:20:1a:
         b8:bb:a7:ff:5e:be:bb:1f:fe:6a:64:e7:f3:23:24:db:bf:96:
         8c:56:84:da:26:7a:ea:af:56:0e:ab:f3:bd:3a:90:7b:10:c5:
         05:e2:0a:5e:0a:59:27:af:3e:7f:59:1f:73:61:4e:1c:d1:c8:
         75:23:1b:fd:b4:c4:cd:dd:48:98:d4:ad:72:20:40:bc:fe:a6:
         6f:c3:5d:29:f9:11:7d:1f:14:5d:62:d0:30:02:85:fc:25:b4:
         b8:15:14:56:45:17:ef:00:c5:09:d6:ad:8a:a6:e1:b4:db:d3:
         e9:ad:7f:8d:96:a5:10:ee:b5:6c:63:db:0c:35:b3:eb:e6:bc:
         72:95:19:c8:0b:ae:d3:c9:20:19:38:14:79:8b:92:85:71:be:
         0d:06:8c:ea:93:52:a7:38:bb:34:73:7f:59:e1:47:9f:d2:1d:
         f9:36:be:13:a2:41:e6:9a:16:d6:44:92:40:bc:52:e5:09:e4:
         f6:e9:f3:1d:9d:bb:18:c5:e4:ec:b8:86:b4:77:8f:22:a2:71:
         09:14:ab:6b:41:ce:41:66:06:d1:d0:5c:b8:fc:28:09:45:c9:
         5b:19:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:06 2026 by rpki-client