Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File:                     ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier:          4Bg4tNsr3XewZ2HUG259Kb8m/DZSHMdw99g3HmRctl8=
Subject key identifier:   EB:C8:47:48:D5:46:04:A2:B1:81:4B:0B:A6:66:BA:9B:38:89:2F:8F
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer:       /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial:       019D26287453C1E0A2A809E543686F8F4467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number:          13CF
Signing time:             Wed 25 Mar 2026 18:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:18 +0000
Files and hashes:         1: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: bPmqMDd5bg9h6KU74tz+KFkCXujyFD0gKmda0DUuCAo=)
                          2: o7BHBJoJ92UXLEcmbm_Nc1cTWuw.roa (hash: XRczo1xuWahblaw0qNPhWupN00zQLko2wywtz+3Wfrg=)
                          3: zwEN9uXJIcPFmn7KPc1-IXqrqo8.roa (hash: sU2LF6J4RVpFiTvBB34Yw73TFiEWHXzXbqHGVVrF5jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:74:53:c1:e0:a2:a8:09:e5:43:68:6f:8f:44:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
        Validity
            Not Before: Mar 25 18:01:18 2026 GMT
            Not After : Mar 26 18:01:18 2026 GMT
        Subject: CN=ebc84748d54604a2b1814b0ba666ba9b38892f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:a4:db:7c:c0:4d:0f:33:c2:e3:75:44:37:
                    13:90:68:f1:fd:e9:00:00:2f:ce:95:c9:ef:6b:b8:
                    ba:52:36:1b:19:5c:c8:59:44:4a:85:af:82:09:6c:
                    65:a6:b3:ea:13:0c:96:75:83:32:30:1e:47:01:f5:
                    48:b2:64:0c:35:3a:11:50:7f:5c:33:ca:22:e6:84:
                    20:ba:9b:93:c9:80:d7:77:7b:1c:a6:07:7c:7d:e7:
                    32:e5:bb:03:b9:63:d5:90:30:07:54:d0:d5:8a:25:
                    d9:7e:f2:93:d7:dd:b5:0c:30:2a:ad:4e:24:80:6e:
                    d8:82:c3:9f:ba:2f:5c:0f:3e:bc:b7:a8:f6:51:37:
                    9b:53:00:24:5f:c1:04:83:5e:d4:a4:46:30:66:f3:
                    ce:70:af:2f:39:b1:0e:74:03:b2:53:74:f2:91:80:
                    8c:f5:09:23:d9:6b:ab:12:4d:1a:d6:07:2c:69:b9:
                    71:e1:7e:87:3d:79:79:76:21:31:62:db:a5:86:36:
                    30:f8:a0:37:e6:9d:70:f1:27:cc:a7:9b:47:1d:52:
                    98:12:c5:57:87:2b:e7:1a:b0:4c:cc:0f:a0:48:cd:
                    8a:4d:2e:9f:c5:88:5a:8d:db:f1:04:1c:7e:16:4f:
                    f3:6f:1e:5d:44:84:37:0b:06:87:67:f0:7a:4a:ca:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C8:47:48:D5:46:04:A2:B1:81:4B:0B:A6:66:BA:9B:38:89:2F:8F
            X509v3 Authority Key Identifier:
                keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:86:b9:1b:e3:56:8c:51:3a:46:d7:70:a7:a3:ea:f8:0c:dd:
         f1:e8:82:19:4d:a8:22:00:5e:05:c0:c9:94:7a:f3:f6:42:4a:
         57:d3:4c:b1:e7:fe:e1:fc:b5:7b:11:89:a2:93:b6:78:6b:ba:
         29:61:54:1f:c7:e6:99:50:68:fa:2c:bd:17:76:c3:be:e2:73:
         93:ee:bd:44:f6:7f:72:37:a4:b9:fe:84:d6:87:c9:fe:66:6e:
         27:2a:d3:7d:f3:52:e8:8b:47:99:2f:e4:48:c0:9f:f9:9b:50:
         d3:7b:ed:0c:ff:73:25:d2:1d:e5:e6:3b:56:a3:43:bb:5f:6f:
         ad:0a:a6:50:80:6b:6f:13:b2:95:6b:f6:d5:80:ad:29:93:d5:
         05:35:c4:f6:78:5a:39:eb:f5:0e:e1:72:20:33:cf:3f:75:d9:
         57:61:02:65:96:fc:5c:84:85:0a:9b:7d:56:68:01:f6:07:9b:
         cd:28:f8:ab:9f:cd:c9:a2:4f:69:49:71:86:72:fb:50:5f:21:
         6a:1e:ea:ba:81:dc:f7:9d:02:63:bd:78:3b:01:24:bd:51:e2:
         98:ce:0f:e4:f0:7a:9d:ff:ea:c3:f0:b3:a2:91:51:8b:d0:1c:
         67:c0:62:05:31:b5:78:50:bf:b8:4e:4d:fe:a7:89:5a:1e:a6:
         0c:6d:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:59 2026 by rpki-client