Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File:                     ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier:          yIppW/d/vccMl8cp17s+V4kGCwCKH00eLKAg6N3A85Y=
Subject key identifier:   E9:1B:4A:40:21:FF:FD:EC:35:D8:63:71:D8:78:EB:84:20:AC:21:2E
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer:       /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial:       019D284D9FA554DD0F5F03133289D945280C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number:          0E45
Signing time:             Thu 26 Mar 2026 04:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:08 +0000
Files and hashes:         1: 1zk3At_CW_6MtNUlvcs7PWL_MSY.roa (hash: Wx50m0MeMkdSzmVTbDYeihjHelr2/WxDpsYDzzYan64=)
                          2: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: 0AiC5xgyeczib2rgxHoj27DolusJIxG9SWBaHLHQI4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:9f:a5:54:dd:0f:5f:03:13:32:89:d9:45:28:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
        Validity
            Not Before: Mar 26 04:01:08 2026 GMT
            Not After : Mar 27 04:01:08 2026 GMT
        Subject: CN=e91b4a4021fffdec35d86371d878eb8420ac212e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:9d:ee:19:19:9e:7b:4b:a5:5e:e1:8b:9e:
                    a2:ea:a9:60:6e:5b:91:d8:58:29:ed:1a:89:7a:64:
                    ac:73:ff:35:d4:39:17:be:1e:6c:f0:aa:08:ab:8a:
                    32:af:c6:10:1e:0e:67:1f:ea:72:ab:54:72:5b:57:
                    93:29:43:f5:4e:51:a7:45:dc:f3:f3:14:0b:5d:5f:
                    75:56:a8:50:44:5c:3e:30:8c:c5:7b:88:6d:51:af:
                    29:5b:22:8d:81:a7:0a:e7:ae:a7:12:24:b1:98:7a:
                    75:56:6e:aa:34:a2:0a:84:0b:3f:29:a4:25:17:47:
                    d5:5a:04:39:46:0f:87:a5:0d:d8:c6:ea:b6:fe:e7:
                    c0:e1:e2:0b:67:76:41:37:8c:fc:72:ec:ea:f8:69:
                    14:79:8c:51:20:0e:bb:c8:44:d6:5b:a3:55:b6:86:
                    b7:59:69:52:4a:f8:d2:9c:0d:2e:17:c3:e0:6f:f0:
                    f4:12:1e:de:1a:ed:01:19:dd:2f:bb:50:96:b0:2b:
                    43:89:b1:53:6d:5b:93:09:f1:c2:85:e8:68:9b:12:
                    0b:2a:06:42:5b:6c:dc:b8:ff:ce:63:75:b2:80:ed:
                    4f:96:0c:31:7a:61:78:dd:f9:ab:ce:92:35:34:c0:
                    2e:71:3b:5c:c4:49:b0:05:c4:bd:d3:4a:79:1f:ca:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1B:4A:40:21:FF:FD:EC:35:D8:63:71:D8:78:EB:84:20:AC:21:2E
            X509v3 Authority Key Identifier:
                keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:82:60:52:5f:d7:54:86:5e:3d:d7:7c:87:9a:5b:54:7e:c8:
         0d:df:de:96:23:3d:bc:3b:3a:49:e3:01:5e:98:40:23:9a:0c:
         01:9d:1c:d2:bf:6b:bf:55:32:04:62:dd:60:3d:ae:00:07:3e:
         85:98:31:fc:1e:71:ac:24:8f:05:46:63:d6:3b:ac:41:7f:a8:
         31:d6:38:18:a5:d9:2b:74:2f:3b:1b:01:06:7a:9e:dd:bc:5e:
         1d:8c:d3:b9:3e:50:23:92:11:b8:67:12:81:c0:ee:a9:84:74:
         6d:cb:20:4c:14:d7:24:3f:42:c0:2d:fe:f5:a3:39:7f:a6:71:
         1e:5f:b5:f3:51:6b:ea:7a:af:db:7b:87:a8:a3:9c:a0:6f:98:
         ca:ba:e9:90:2c:c9:a6:c8:fd:95:9c:bb:14:bf:ee:44:8e:9b:
         c8:b7:8b:12:97:df:dd:41:29:a0:cc:b1:96:75:b0:0a:49:4b:
         71:9d:46:9f:99:16:12:eb:99:7c:da:91:c6:6b:32:0f:67:0c:
         2c:6b:41:0d:a4:15:48:cc:96:03:08:06:5d:ba:15:70:0c:f6:
         67:97:b4:43:07:68:4c:fa:4c:65:bd:48:df:65:aa:fd:e7:88:
         1b:a9:92:61:cd:5f:80:b3:c5:cb:c4:b4:86:26:96:c5:9c:13:
         6c:26:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:41 2026 by rpki-client