Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
File:                     Zzs6cc93J1Wj34ztXXNRb4ccChE.mft (raw, json)
Hash identifier:          VSS+WIPfLHS2t16KYoIZMMvTcKOxzp8/9HgO3eXpXUg=
Subject key identifier:   24:12:DF:B7:7D:18:A9:13:19:94:6D:4F:3E:D4:CF:7D:56:7C:4E:31
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Certificate issuer:       /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial:       019D2704DD9224203C004D8012693F98B80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 22:02:03 +0000
Manifest this update:     Wed 25 Mar 2026 22:02:03 +0000
Manifest next update:     Thu 26 Mar 2026 22:02:03 +0000
Files and hashes:         1: 8N34BaOhCoqWV6oqyyGnFC-M71k.roa (hash: iUxBbVztuFkPmYPKyF2deLjAauBd8PuICTkelG44e04=)
                          2: VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa (hash: Cecy3QpWVDEErZPxgAgQ0Koma/ZxEa66HTh9jYt45cI=)
                          3: Zzs6cc93J1Wj34ztXXNRb4ccChE.crl (hash: TydYJeexZqVsD/W+VRyMTJvAHxBZoOrAR9dQLPJ8Lnk=)
                          4: qwSTgi7oKerWlObPanrG2B5_x68.roa (hash: GvOd9VfOiwpS8uCFOwxjkDN1qBagT24LpIgJ30wO6Pw=)
                          5: xIxV3QV0-KrN7rSzr-0HLG1i190.roa (hash: 8Bgn1Ips0oqsProytAnDAz5ffPqB6GHNefvHzifH3aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:dd:92:24:20:3c:00:4d:80:12:69:3f:98:b8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
        Validity
            Not Before: Mar 25 22:02:03 2026 GMT
            Not After : Mar 26 22:02:03 2026 GMT
        Subject: CN=2412dfb77d18a91319946d4f3ed4cf7d567c4e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:4a:67:f3:2a:41:ca:25:ba:3b:6b:c0:e8:
                    c9:c3:b5:7b:3b:1e:48:b9:2f:28:32:5a:c5:b0:47:
                    8d:bc:29:e2:13:da:39:e0:cf:04:c7:18:63:29:58:
                    a9:f2:3e:8a:16:fa:88:ba:f4:c0:38:3a:bc:d6:fc:
                    ff:02:b8:81:c9:fd:76:d8:5f:05:87:73:97:3f:41:
                    93:5a:28:da:e0:68:c8:a5:51:f6:09:73:98:9b:42:
                    cf:72:9f:b5:cf:49:7c:bf:a1:93:f4:be:c1:18:44:
                    13:f4:c9:76:58:d1:f1:68:f4:93:0c:5a:18:e7:64:
                    54:09:a0:84:bc:7a:91:e8:60:cc:57:72:50:31:dc:
                    d4:86:f0:69:9c:fa:89:2b:50:52:d6:46:96:57:e2:
                    9c:ff:6c:13:3f:ec:96:f2:01:10:07:b5:de:6a:92:
                    ea:9c:34:09:cb:48:b0:71:91:81:3c:50:53:d9:d9:
                    09:44:76:7f:ac:00:7f:d2:ec:ec:d6:c7:e1:83:22:
                    98:b0:e4:1f:c9:2e:e8:12:a7:0d:6c:60:b0:6b:08:
                    d9:15:90:52:34:82:4c:cd:76:f7:e8:1b:6b:7f:27:
                    14:dc:57:26:c3:cb:af:71:1e:5e:8a:38:f7:59:55:
                    ed:6c:0d:5d:f8:db:86:91:f9:aa:4d:82:84:8f:e7:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:12:DF:B7:7D:18:A9:13:19:94:6D:4F:3E:D4:CF:7D:56:7C:4E:31
            X509v3 Authority Key Identifier:
                keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:97:07:e1:05:2b:da:8e:0e:f2:c4:ed:bd:2f:68:f6:40:a2:
         5a:34:34:ec:df:e3:47:8d:d3:df:b8:bc:0d:2f:9e:f2:cb:f5:
         95:4d:e1:4b:36:3d:ee:40:37:27:bd:d3:9a:5d:0b:c9:4b:b7:
         c9:3b:c3:d3:c7:ff:6d:fd:bd:d8:6e:12:05:08:a0:39:ac:2b:
         f8:ad:11:a8:0a:64:b3:95:98:02:95:b9:eb:8f:2e:fe:5f:fd:
         5e:c8:00:60:0c:ca:f5:43:d3:16:ce:34:ff:58:42:f9:a1:1e:
         c2:33:71:81:36:01:03:26:5b:62:ee:2f:e6:82:3b:34:e2:1b:
         a0:33:9e:70:89:f6:5d:aa:d3:17:14:4e:bc:6e:0a:19:cb:47:
         c9:c5:f8:c2:f1:9a:f5:8e:2c:76:4d:e7:2d:11:ed:65:1b:74:
         91:27:d9:bb:1c:b5:95:fb:7a:c5:2f:28:e8:e5:01:d3:85:ac:
         89:a8:bd:d5:d6:ae:b0:2c:63:d2:dc:9e:9a:ca:b6:e8:1f:a3:
         00:e3:ae:29:d3:fe:88:f9:03:4e:e2:56:4b:05:b0:7b:64:a3:
         47:f1:93:c5:de:b9:f0:4c:91:82:e3:f3:92:3a:c2:62:4f:87:
         08:9a:e3:4e:41:7c:db:03:d1:f5:ad:ba:9a:7d:ac:fd:77:1c:
         e8:f9:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:40 2026 by rpki-client