Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File:                     ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier:          DfdR3i0x7/QrqWF+sg2s4wUFR9N3pC1ettQFPchWWi4=
Subject key identifier:   47:FE:ED:C8:75:B5:7C:0C:E2:9B:E4:9D:07:D4:E6:B8:C0:FF:D1:68
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer:       /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial:       019D273AFE02677AC09D1C9D3BEA69EE360F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number:          0C70
Signing time:             Wed 25 Mar 2026 23:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:10 +0000
Files and hashes:         1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
                          2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: JCi5hFkHPzDOr2Mttmn8KQqnsEMafXmuUGgPCrWZcLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:fe:02:67:7a:c0:9d:1c:9d:3b:ea:69:ee:36:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
        Validity
            Not Before: Mar 25 23:01:10 2026 GMT
            Not After : Mar 26 23:01:10 2026 GMT
        Subject: CN=47feedc875b57c0ce29be49d07d4e6b8c0ffd168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:d3:d2:13:ee:a2:cf:20:24:9e:2a:01:9a:
                    af:ab:a5:bd:75:94:69:51:c1:72:1c:e2:20:49:b7:
                    e9:06:12:90:41:99:f7:00:eb:fa:13:0d:3d:28:c9:
                    88:d5:df:f4:8f:06:24:b7:53:8b:2e:68:8a:e7:28:
                    fb:20:e7:f6:6d:ad:2a:88:94:0a:6b:c2:5f:fb:d5:
                    4e:d0:04:9b:b9:41:53:e1:08:f0:b4:4a:95:13:ab:
                    76:d6:0a:d2:bd:d9:9f:79:a8:57:0c:a9:5a:f6:13:
                    82:78:68:31:be:5e:79:d9:e2:ff:2a:97:26:02:06:
                    db:85:62:f6:20:72:80:ef:01:2f:aa:07:9d:cb:33:
                    3b:56:6e:f8:35:b7:ad:50:6d:9e:27:24:f9:73:b8:
                    e3:b5:02:4f:64:e2:0a:20:ca:7a:38:89:4b:f8:31:
                    04:9e:ce:0b:5b:92:b0:c9:12:f9:45:4f:47:3b:8e:
                    4d:57:b0:de:09:9a:0c:4f:69:d3:2e:56:27:44:db:
                    ee:66:0c:7a:9e:76:74:bc:a8:a4:d3:7d:2e:4c:f0:
                    c9:99:0d:72:06:a0:fd:ea:c8:85:1a:94:27:46:e2:
                    d3:29:50:84:f2:ba:61:0d:97:df:96:8d:c9:81:4a:
                    9d:aa:6b:80:9a:fd:b0:80:83:4d:b7:ef:43:5c:6b:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FE:ED:C8:75:B5:7C:0C:E2:9B:E4:9D:07:D4:E6:B8:C0:FF:D1:68
            X509v3 Authority Key Identifier:
                keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:ab:68:10:33:70:39:91:14:34:f6:75:0a:c5:e9:d9:d9:
         8e:db:09:ce:70:50:5e:cd:a3:89:4a:e1:f1:c0:b1:e1:25:52:
         55:e6:3b:e8:03:6e:9f:d8:d3:fe:ef:d5:72:46:80:cc:7f:e3:
         8b:0a:cb:c9:1d:90:8c:fd:2f:35:ee:74:f6:e6:55:14:5a:1a:
         85:ba:1f:63:c4:78:1b:08:6f:8b:8d:63:9c:bc:58:ec:3f:5c:
         35:ce:48:c7:9e:89:4f:7f:e7:a9:3f:bc:a7:f0:37:fe:59:2b:
         a3:9e:ba:b1:2c:c0:a3:aa:8d:24:bc:ef:4d:e6:d6:7a:b4:3f:
         fd:ee:62:1a:b7:04:cf:0a:29:f3:ab:c2:04:72:d5:3f:d5:a6:
         a1:2a:f9:a7:93:4d:44:78:d8:8d:e6:9a:f2:db:84:3a:b8:48:
         ca:b3:c8:50:b2:55:b8:68:2d:b4:a5:05:c5:2c:67:82:05:b0:
         54:62:b7:9f:41:99:43:d8:6d:50:0b:b0:c2:30:66:7e:b6:71:
         00:d5:d8:54:9b:ff:69:53:e8:6b:4e:15:c5:72:4a:cf:8b:cc:
         d3:03:ab:f9:e4:ae:a0:fd:02:4f:7d:dc:87:05:66:83:cf:bd:
         70:b3:09:96:aa:e7:9b:04:dd:f2:fc:d9:7f:b3:ec:83:d6:ad:
         a7:9d:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:58 2026 by rpki-client