Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File:                     ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier:          3UgVeV6ixuWI27AWlYtDd0T+kook/kDjUHoy2qoQQSY=
Subject key identifier:   6D:67:EC:BF:DF:16:80:EC:A0:77:EB:81:F6:1E:1F:02:A8:A9:07:8B
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer:       /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial:       019D32631CC6A3ABC6F1CF592BF2092EF57A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number:          0FF4
Signing time:             Sat 28 Mar 2026 03:00:49 +0000
Manifest this update:     Sat 28 Mar 2026 03:00:49 +0000
Manifest next update:     Sun 29 Mar 2026 03:00:49 +0000
Files and hashes:         1: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: iFNyqGdBVPR0hDOF62F8nI33r++Hiqlpffz6JKrTSQs=)
                          2: y5HQcVK0OCpA2qLDSgEXDDcdvrQ.roa (hash: N7GdQ0FkLOrci0SR8hsklzMqdumTV6SFC6K9X7skI5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:63:1c:c6:a3:ab:c6:f1:cf:59:2b:f2:09:2e:f5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
        Validity
            Not Before: Mar 28 03:00:49 2026 GMT
            Not After : Mar 29 03:00:49 2026 GMT
        Subject: CN=6d67ecbfdf1680eca077eb81f61e1f02a8a9078b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:a8:af:83:59:a9:2f:f1:0b:67:a8:99:da:
                    8e:cb:00:0b:35:8d:00:2c:fc:0d:e3:0d:04:fb:fd:
                    68:d7:fd:a9:a3:e7:08:1b:65:9a:f9:8a:4a:22:5e:
                    5b:72:71:95:52:b8:fb:b7:d6:7c:89:6b:8a:75:55:
                    b6:f7:19:26:c3:6f:fd:06:cf:d6:ca:11:01:f3:46:
                    9c:79:e0:54:8c:7f:d1:a2:0a:97:e0:81:38:bf:0e:
                    38:a9:44:96:6a:cc:2e:8b:ce:20:23:f9:11:c4:2b:
                    80:e9:73:79:e7:8a:c6:16:c7:7a:ab:4a:f5:c1:fb:
                    d9:5e:94:66:c1:3d:c6:5b:68:c7:fa:dd:02:c3:54:
                    a7:19:15:38:5c:a8:62:5e:e8:69:e0:8f:e3:0d:e7:
                    f4:36:9f:bf:9a:ef:e9:72:ae:a5:fc:04:4a:3f:e4:
                    4d:34:26:28:b7:75:ac:25:43:d1:d9:13:bc:d8:0d:
                    a7:89:fc:ab:47:64:03:dd:43:23:92:27:7b:d8:57:
                    5e:46:43:94:76:68:cd:5c:76:c3:07:d6:a0:dd:b7:
                    89:91:6e:51:52:76:4c:2a:03:de:fb:e7:3d:96:07:
                    f7:00:4c:2c:49:9c:dc:0d:e4:31:0e:05:a5:36:2f:
                    ab:50:ac:f2:47:1f:4d:89:17:d3:6d:96:5d:04:d0:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:67:EC:BF:DF:16:80:EC:A0:77:EB:81:F6:1E:1F:02:A8:A9:07:8B
            X509v3 Authority Key Identifier:
                keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:e5:c4:fc:df:71:40:fc:19:d7:73:5e:12:42:04:62:c6:
         69:08:94:97:40:09:54:ea:07:a2:56:30:1c:0e:d3:37:9e:a0:
         20:7c:23:11:ff:df:f7:7f:86:df:b3:5a:ad:59:84:ad:d8:e9:
         72:30:ca:25:51:7d:f5:70:17:fc:37:44:40:8b:6b:30:b5:c6:
         e2:cc:c5:e9:ab:86:82:b6:29:64:96:b8:6a:b8:7f:e7:99:93:
         c1:59:3d:cf:e1:aa:86:d5:79:eb:e4:3e:1a:89:8f:ff:64:8b:
         e6:70:8b:d4:28:2a:00:bb:81:37:d0:c4:4c:d0:30:e2:c9:a7:
         16:c4:ed:d4:c9:53:02:b1:7f:30:d7:94:75:90:f4:62:99:63:
         df:fe:b5:9f:d8:25:7b:7b:f9:4a:a8:ac:a0:82:e8:51:5c:91:
         87:95:b5:21:1e:50:5d:e7:76:ef:4b:68:62:cd:54:a9:28:5e:
         73:2b:3a:c9:9c:b1:40:8a:8d:37:26:40:c1:d7:14:75:93:be:
         41:5d:06:94:98:3a:68:3e:14:c0:fa:e0:e9:42:38:38:bc:6c:
         39:e4:5e:af:13:69:76:c7:e7:7d:0b:4b:47:53:cc:33:3a:d2:
         ab:bc:6f:12:f6:ef:d3:f8:8c:8a:05:2e:a3:8a:4f:a3:ef:ac:
         66:0b:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:13 2026 by rpki-client