Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          MfbcGgi8eG3GXBTm+kxtT2tJvwkkm0EscYwVtardDfA=
Subject key identifier:   39:AD:F6:93:FE:7E:4B:C5:F9:1C:2C:B5:9C:DA:8C:5B:7F:F4:CD:39
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       019D27E06438F17365CCFE970854947665D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          1161
Signing time:             Thu 26 Mar 2026 02:01:50 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:50 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:50 +0000
Files and hashes:         1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
                          2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: xLDasGwaQZQmNnEOwqW1wHiZ4lVWvCRghV8SKtytEBM=)
                          3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:64:38:f1:73:65:cc:fe:97:08:54:94:76:65:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: Mar 26 02:01:50 2026 GMT
            Not After : Mar 27 02:01:50 2026 GMT
        Subject: CN=39adf693fe7e4bc5f91c2cb59cda8c5b7ff4cd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:e2:70:d8:f0:b1:9a:1c:99:31:10:49:b8:
                    d7:1a:8c:6d:dd:eb:73:e8:5a:15:75:24:be:cf:2b:
                    71:4e:97:33:11:73:89:be:1e:41:17:2c:09:e9:fa:
                    af:84:ec:74:8b:96:02:42:c1:91:11:88:f3:b6:1b:
                    7a:76:6d:ca:30:9b:b9:4e:9a:d3:90:07:b3:fd:d9:
                    ab:24:1e:f3:8c:7a:45:ee:bf:ff:b0:48:f3:ad:25:
                    cf:98:98:d4:38:83:c6:47:c9:47:b4:51:73:20:5a:
                    1d:de:00:ae:61:df:6b:e8:bb:b5:70:55:db:e8:a9:
                    f6:cb:fb:a5:37:2a:78:41:ff:d4:5e:f0:fe:99:51:
                    7b:0e:67:04:99:9c:98:2b:9f:eb:8e:56:1d:6a:8d:
                    11:fe:e0:76:5a:29:17:8c:1e:5f:ca:1c:97:c2:01:
                    20:4a:12:59:98:79:ea:40:3c:e6:05:a1:e8:87:2e:
                    9e:92:fc:8f:64:95:d8:01:98:69:af:ff:e1:5a:64:
                    17:e6:42:30:87:ef:9b:11:80:e0:47:e7:23:56:da:
                    6c:a7:ed:da:27:62:4d:bb:fd:53:2a:fa:95:12:e9:
                    cb:7e:00:cf:f3:5b:fc:96:3a:59:1d:bc:a8:3e:45:
                    76:6f:11:ed:0a:29:7e:b8:0b:8c:e5:44:22:79:3d:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:F6:93:FE:7E:4B:C5:F9:1C:2C:B5:9C:DA:8C:5B:7F:F4:CD:39
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:c9:fa:52:30:b3:b7:7a:5d:61:a7:09:d6:33:23:31:cd:
         af:02:93:8f:35:e8:15:ed:f3:98:b5:71:89:94:11:e6:f8:f6:
         39:bb:0c:2f:da:88:45:13:a8:36:58:20:f3:f4:99:56:e4:89:
         ea:fc:97:af:58:0e:9b:9f:01:03:7d:f0:b7:58:d3:70:93:bb:
         20:8c:ca:ca:77:e5:39:75:98:1a:10:d4:0b:a1:b4:73:ee:f5:
         b4:fb:2c:f8:80:f6:75:3e:71:62:82:cc:6c:8c:e0:a4:61:fd:
         0d:f4:8d:47:67:23:00:22:d0:ce:36:39:1a:f4:3e:49:41:fb:
         0c:ac:59:a1:81:8d:26:f9:03:f8:8b:5e:76:5f:3f:73:e4:30:
         6d:a1:de:de:92:92:b9:7c:cf:7f:87:44:ca:f8:c1:01:ed:81:
         4c:c1:25:f5:9e:3c:6e:87:f8:19:88:43:c9:4b:ef:f5:22:6c:
         5e:71:41:93:8f:df:93:ae:f2:fd:a4:fe:cd:35:c0:03:fa:b4:
         a5:ad:5e:5b:30:5d:77:d6:01:b8:0b:12:27:69:08:af:d3:64:
         32:89:c1:5f:d7:08:c9:d2:91:cc:33:a7:91:b7:3b:73:42:6f:
         53:6c:60:8c:08:ef:a1:eb:56:a1:b2:f1:5e:41:79:15:63:9b:
         5b:61:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:59 2026 by rpki-client