Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
File:                     zue_uJnToHCaXQcjLfegSQSBt9E.mft (raw, json)
Hash identifier:          ncJyHvmTUT4QIjUxpmKHcGcxerFgv/q3To5VmJUZqtE=
Subject key identifier:   C6:3D:33:03:E1:CF:BF:73:CF:43:B5:90:B5:DE:C7:D9:B5:12:5A:A5
Authority key identifier: CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1
Certificate issuer:       /CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
Certificate serial:       019D258370867FAC550F6915BA4F6E119A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
Manifest number:          135E
Signing time:             Wed 25 Mar 2026 15:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:04 +0000
Files and hashes:         1: zue_uJnToHCaXQcjLfegSQSBt9E.crl (hash: /2kTFv75aMulgUeO0nfPiIRLotdKtHYHyynFxeVaIbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:70:86:7f:ac:55:0f:69:15:ba:4f:6e:11:9a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
        Validity
            Not Before: Mar 25 15:01:04 2026 GMT
            Not After : Mar 26 15:01:04 2026 GMT
        Subject: CN=c63d3303e1cfbf73cf43b590b5dec7d9b5125aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:b8:9e:21:de:f1:ce:47:d4:b8:65:d5:af:
                    62:c9:41:08:02:33:c8:37:45:b4:c3:5e:b1:59:12:
                    e0:d0:7a:ba:52:d2:04:ee:73:8c:18:3a:d8:d9:fd:
                    dc:b8:55:70:e8:96:c9:73:c3:ac:93:79:9c:d8:7a:
                    76:4a:21:9c:b3:67:80:c0:b4:ff:38:18:27:9f:81:
                    e4:70:43:75:0f:cc:0d:88:51:fc:6a:72:1f:3e:1a:
                    bf:73:88:eb:04:2d:2b:2a:53:52:dc:35:f2:1f:25:
                    fc:52:5c:27:db:68:a4:51:51:9a:97:c3:f6:fb:ae:
                    40:1f:2f:22:a3:cd:cc:2d:d9:96:7a:11:69:b3:2a:
                    ab:b6:d1:5b:fb:f8:be:c3:bd:de:b2:a9:6d:13:fe:
                    08:0d:c1:13:c1:2a:cc:c0:84:6d:7f:31:21:64:2a:
                    47:42:a0:c4:ab:1c:c9:74:b6:36:5e:e0:7f:7e:ef:
                    93:cf:d1:a1:93:2c:85:b3:13:7d:3f:69:d4:e6:6e:
                    64:78:e6:9f:b5:e5:b8:d2:3d:0a:22:82:81:70:d8:
                    86:9c:a5:f9:24:a7:c3:99:77:01:30:91:38:b4:71:
                    32:c7:26:0a:be:e3:5d:e8:e9:47:a3:b7:94:79:a7:
                    d2:31:ff:d1:d7:51:d6:f6:2d:0f:79:8a:db:e0:b5:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3D:33:03:E1:CF:BF:73:CF:43:B5:90:B5:DE:C7:D9:B5:12:5A:A5
            X509v3 Authority Key Identifier:
                keyid:CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:2c:10:d1:f9:e4:74:0b:94:f2:93:ab:8d:52:1b:2e:82:
         44:4c:9a:63:3d:23:8d:a3:f3:a1:5e:59:7b:b5:40:b6:09:46:
         99:eb:50:8a:37:e5:ae:fa:31:42:4d:6c:ef:60:18:2c:a8:c0:
         10:b4:8f:65:4f:e0:71:7b:54:c9:99:f3:25:0b:5a:25:07:9a:
         2e:78:25:49:4b:52:56:fa:c8:e0:f4:2c:d4:c7:73:b2:1e:7e:
         53:f8:7f:65:8e:2a:82:a2:b0:fc:77:6d:ba:b9:94:b7:2c:e8:
         2d:c7:3b:d5:2e:b1:0a:6e:8f:63:f2:25:b3:46:96:cf:5c:9c:
         94:11:8f:2c:b6:45:60:48:b0:90:3f:60:be:fc:76:14:1a:f2:
         d4:6a:89:1d:4f:d8:d1:5c:f8:4f:f3:e7:3a:e1:8b:29:f4:15:
         76:b6:02:82:2f:89:19:83:2d:1f:aa:28:64:92:26:6e:92:98:
         fc:c2:10:74:74:f2:65:eb:f2:e8:eb:4c:78:a1:2c:46:9d:0a:
         9b:78:63:65:e2:90:fb:6c:ba:f7:40:b5:fb:9e:81:5b:f9:50:
         58:55:8a:d9:8a:4e:60:c7:96:bc:3e:15:25:14:a2:31:e9:c3:
         05:c2:3c:51:02:1d:b0:d9:76:3b:e0:e4:2c:7b:2c:38:04:85:
         3f:71:ac:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg3CGf6xVD2kVuk9uEZpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZTdiZmI4OTlkM2EwNzA5YTVkMDcyMzJkZjdhMDQ5MDQ4
MWI3ZDEwHhcNMjYwMzI1MTUwMTA0WhcNMjYwMzI2MTUwMTA0WjAzMTEwLwYDVQQD
EyhjNjNkMzMwM2UxY2ZiZjczY2Y0M2I1OTBiNWRlYzdkOWI1MTI1YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhq4niHe8c5H1Lhl1a9iyUEIAjPI
N0W0w16xWRLg0Hq6UtIE7nOMGDrY2f3cuFVw6JbJc8Osk3mc2Hp2SiGcs2eAwLT/
OBgnn4HkcEN1D8wNiFH8anIfPhq/c4jrBC0rKlNS3DXyHyX8Ulwn22ikUVGal8P2
+65AHy8io83MLdmWehFpsyqrttFb+/i+w73esqltE/4IDcETwSrMwIRtfzEhZCpH
QqDEqxzJdLY2XuB/fu+Tz9GhkyyFsxN9P2nU5m5keOafteW40j0KIoKBcNiGnKX5
JKfDmXcBMJE4tHEyxyYKvuNd6OlHo7eUeafSMf/R11HW9i0PeYrb4LWHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY9MwPhz79zz0O1kLXex9m1ElqlMB8GA1UdIwQY
MBaAFM7nv7iZ06Bwml0HIy33oEkEgbfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenVlX3VKblRvSENhWFFjakxmZWdTUVNCdDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZjY1MzItYWVjNi00NzBiLWI5MmYt
NjBkODM5ZTY1NWJjLzEvenVlX3VKblRvSENhWFFjakxmZWdTUVNCdDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hZjY1MzItYWVjNi00NzBiLWI5MmYtNjBkODM5ZTY1NWJj
LzEvenVlX3VKblRvSENhWFFjakxmZWdTUVNCdDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7csENH5
5HQLlPKTq41SGy6CREyaYz0jjaPzoV5Ze7VAtglGmetQijflrvoxQk1s72AYLKjA
ELSPZU/gcXtUyZnzJQtaJQeaLnglSUtSVvrI4PQs1Mdzsh5+U/h/ZY4qgqKw/Hdt
urmUtyzoLcc71S6xCm6PY/Ils0aWz1yclBGPLLZFYEiwkD9gvvx2FBry1GqJHU/Y
0Vz4T/PnOuGLKfQVdrYCgi+JGYMtH6ooZJImbpKY/MIQdHTyZevy6OtMeKEsRp0K
m3hjZeKQ+2y690C1+56BW/lQWFWK2YpOYMeWvD4VJRSiMenDBcI8UQIdsNl2O+Dk
LHssOASFP3Gsag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:43 2026 by rpki-client