Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          EY9aocRSddzF/IRYQWX6LUmryVBynXETnYrpdEpZqdY=
Subject key identifier:   DD:7E:2C:D2:D9:41:9D:97:1D:A7:D4:08:83:66:47:B2:6F:2D:A8:D6
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       019D273AA06B444D126A2316243BDDEA0511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 23:00:46 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:46 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:46 +0000
Files and hashes:         1: 1yqrC5cFVqno3yUjEb2JEevt8hU.roa (hash: ALDcP7GRoyghMSXeDYW2VCy+XpgGkyrbpJ7hv982jsc=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: on6eg9/NDDKBQUehEE1dHZ676zOdLZOcJlEIpIKHnRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a0:6b:44:4d:12:6a:23:16:24:3b:dd:ea:05:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Mar 25 23:00:46 2026 GMT
            Not After : Mar 26 23:00:46 2026 GMT
        Subject: CN=dd7e2cd2d9419d971da7d408836647b26f2da8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:bd:f4:d7:29:85:2c:99:81:03:1b:99:bf:
                    01:cd:be:13:f6:a7:3f:df:36:51:33:e1:19:d5:7d:
                    ec:05:e8:49:25:20:51:9d:5f:47:d2:c2:20:22:fa:
                    ee:9f:f7:e0:14:b1:81:1d:30:6e:ad:15:ce:52:a3:
                    98:0f:8f:d7:e2:cd:9c:7f:f7:d9:33:86:0c:31:57:
                    26:56:a7:7c:64:6d:0d:6c:35:87:84:7f:b3:ed:53:
                    8d:12:84:5f:38:df:3f:32:7d:47:70:5f:af:bc:58:
                    55:73:75:55:77:b7:be:7e:b3:7c:11:4a:65:0a:de:
                    f4:17:03:68:0c:37:f1:31:c3:71:50:d4:0c:c1:3f:
                    f3:41:00:14:73:ca:29:bb:4a:99:17:9b:38:8e:9c:
                    8d:18:01:15:8e:2f:14:0c:0c:8e:f9:6e:a4:0b:ae:
                    fa:1d:e9:4a:3e:1b:3a:13:4c:72:0f:7c:4c:fd:13:
                    65:ed:50:46:e2:63:e3:5a:e0:a4:bc:c2:40:33:19:
                    fb:94:b6:e3:f8:95:da:5c:97:30:aa:eb:b7:c9:88:
                    c4:58:d3:c3:10:e6:46:a8:3b:50:03:7e:3c:e2:c7:
                    4e:43:09:91:1a:5a:f6:71:82:76:63:2a:24:45:59:
                    91:5a:bb:d6:18:11:ce:b1:a5:2d:ee:67:c7:eb:38:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7E:2C:D2:D9:41:9D:97:1D:A7:D4:08:83:66:47:B2:6F:2D:A8:D6
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:6c:e4:8a:97:48:87:b5:7b:b8:de:c9:4c:88:36:7d:3a:
         5c:4f:f3:1b:e3:4a:cb:2d:06:4b:ce:fd:cb:07:07:9e:17:87:
         62:68:ee:ff:56:31:5e:5d:52:22:c4:cd:94:2b:d9:45:ed:5f:
         df:07:95:b0:82:53:60:0f:44:ad:38:3f:0a:4f:e0:44:09:93:
         46:76:4c:43:01:8b:d1:61:10:5f:79:06:01:d5:48:75:d9:2b:
         f4:37:10:e8:b5:56:ab:2a:27:7b:69:98:c5:ba:01:9f:a3:41:
         21:50:4d:96:91:14:7a:a2:39:23:6b:a8:b3:5b:fd:c5:5b:8c:
         03:1d:83:50:f2:79:4b:58:df:93:75:56:26:0a:89:d1:8f:d4:
         93:df:f4:3d:a9:a2:b4:9a:3a:33:a4:c8:14:c5:62:b6:ad:28:
         d5:aa:96:77:3a:f0:e1:d6:2c:a0:2b:4c:3d:3e:a1:b5:56:d6:
         6f:68:57:04:14:64:85:bf:17:e8:a9:7a:65:95:8b:b7:73:59:
         db:b9:f2:0f:ce:e7:36:0a:c6:df:b5:40:e3:6a:41:f6:c2:0e:
         dd:80:3a:82:a6:28:64:3c:79:70:32:20:2a:d9:af:00:53:8e:
         25:d7:f4:48:fe:5b:bf:93:68:39:d8:6c:f7:5b:b7:9c:73:a2:
         7b:87:e1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:06 2026 by rpki-client