Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          +35i0bP6btElFI94WrAVxcCOgiLhfFllCdsZuMuEdPI=
Subject key identifier:   6D:11:91:57:A1:8E:3F:67:25:CF:86:1B:58:5C:29:9A:36:9C:A8:B9
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       019D265FD82E725C53CBF2276BA0658CCD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          15C6
Signing time:             Wed 25 Mar 2026 19:01:48 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:48 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:48 +0000
Files and hashes:         1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: 6RjO1miuhGcuLs5Fn3P942AQWLflic7hUU9VYm7RjIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:d8:2e:72:5c:53:cb:f2:27:6b:a0:65:8c:cd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Mar 25 19:01:48 2026 GMT
            Not After : Mar 26 19:01:48 2026 GMT
        Subject: CN=6d119157a18e3f6725cf861b585c299a369ca8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:c9:9d:db:dc:a2:f9:ef:f1:ca:fa:19:a3:
                    c3:ac:28:dc:25:4c:c1:e0:ec:74:33:64:99:a2:92:
                    7c:d2:56:9e:01:43:bd:16:6e:35:b0:c6:44:25:a2:
                    54:dd:6e:9f:64:3f:ce:55:e7:f7:ce:76:48:e5:c7:
                    59:f4:85:08:f5:e1:7f:bb:c3:c4:3f:0d:e5:68:21:
                    c6:ef:f0:b6:9a:5b:85:ec:c4:13:23:b5:4d:ac:42:
                    ad:63:f4:4f:ba:8a:a7:7e:fd:4f:e2:7d:62:db:30:
                    7e:fc:1d:d4:c7:78:6e:49:32:95:e7:c5:9d:d9:12:
                    90:3c:f9:12:d9:3a:63:39:26:8a:1a:a7:a0:f1:fe:
                    05:aa:38:84:dc:d7:08:84:70:6d:e3:e8:72:d6:cf:
                    bd:68:ff:8f:f4:93:1d:f0:1b:dc:da:8d:52:89:65:
                    a5:2d:6a:81:31:06:52:e4:73:d2:4c:c9:1b:5d:e8:
                    a1:90:34:68:93:ea:c2:4b:10:f9:38:9c:77:3b:bf:
                    ab:f7:45:53:ae:b3:5d:35:b6:90:e3:86:60:39:71:
                    d7:ec:f0:02:a3:94:d5:64:3b:88:3d:e8:e1:2e:58:
                    02:36:fe:e5:2e:a5:ae:20:17:2a:eb:0f:df:68:6a:
                    85:57:6c:3c:ee:77:bb:e9:34:0e:24:19:e9:64:5f:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:11:91:57:A1:8E:3F:67:25:CF:86:1B:58:5C:29:9A:36:9C:A8:B9
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:46:a9:8a:8f:36:ca:75:06:d2:3c:e9:68:90:9d:1f:72:28:
         37:c2:82:9d:35:34:39:53:b7:44:60:92:e5:db:f6:48:a1:16:
         bb:1c:82:dc:4b:bb:c5:e3:1a:f8:4d:fc:32:ff:bd:7f:e6:93:
         82:55:31:f6:d8:4f:89:96:f4:46:30:a8:39:13:3d:45:c0:88:
         79:e1:f4:50:fc:ff:dd:9d:58:38:90:e1:66:15:0e:3e:70:ee:
         bc:e6:6e:a2:09:3d:42:79:94:a3:fa:df:15:75:22:8b:ae:49:
         2e:2c:1f:ac:17:e6:20:fa:d7:ae:c9:e9:a8:6c:2b:ad:4d:66:
         de:54:88:5f:f9:44:d6:c2:be:94:e3:c0:ff:10:55:64:bb:fa:
         0d:cf:5c:d2:48:ea:20:2b:52:d7:45:a3:d4:44:5d:24:38:13:
         bc:ea:e2:69:6e:70:c4:98:71:35:4a:1e:75:ad:8b:13:3b:b7:
         be:f2:0d:5b:09:7d:e4:de:d0:32:f0:6a:16:68:fe:0c:0a:ed:
         ab:31:a2:c6:34:26:54:14:5c:c6:53:2f:43:9b:13:19:96:83:
         9c:2b:a9:41:75:da:8b:24:84:3f:8a:69:ee:ad:9f:a4:db:f6:
         4b:6a:ca:e1:9f:c9:e0:da:cc:ba:91:71:3a:df:14:2b:60:95:
         e5:9d:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:48 2026 by rpki-client