Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File:                     ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier:          x+SOEwD1xy60kQAWkCpXDslPe9Z35H3ojxZ8RrfyVyY=
Subject key identifier:   50:AA:2C:33:15:24:A0:93:FC:DA:E3:2D:44:80:60:37:12:66:2F:A1
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer:       /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial:       019D2704030604B3BE0CA0372D49A38B135A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number:          0820
Signing time:             Wed 25 Mar 2026 22:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:07 +0000
Files and hashes:         1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: 54QCnTK+R1al4tJVAec7sHG56sZdZ3l6Aqb/qWj0R9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:03:06:04:b3:be:0c:a0:37:2d:49:a3:8b:13:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
        Validity
            Not Before: Mar 25 22:01:07 2026 GMT
            Not After : Mar 26 22:01:07 2026 GMT
        Subject: CN=50aa2c331524a093fcdae32d4480603712662fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:02:36:20:c6:9b:84:5c:91:5b:27:41:32:
                    f6:89:6f:2f:b1:19:54:a0:f3:d2:32:82:8b:17:48:
                    09:68:b2:81:4f:8f:9b:d4:2a:9c:0e:39:65:b2:5c:
                    21:01:39:e0:27:2a:42:99:29:c7:d4:7b:b9:a7:0e:
                    8f:96:d4:d8:5c:7a:e2:48:f7:ed:80:2b:86:55:5d:
                    50:e8:3f:bc:be:5e:ef:0b:f6:2e:ac:e6:3f:c4:e3:
                    88:91:b5:c2:97:58:18:07:b4:de:79:3a:f6:a9:10:
                    c7:98:68:8c:f4:48:a1:c0:42:2c:bc:d8:ae:d7:61:
                    60:65:13:86:29:aa:05:63:6f:02:07:83:49:75:b0:
                    35:d1:30:df:3a:8d:30:03:49:ee:ce:fc:90:f5:93:
                    12:d7:60:fe:26:63:f2:8d:0c:df:fe:12:ad:27:03:
                    31:ec:72:3c:c2:7c:35:24:9d:20:5d:86:6b:77:91:
                    12:06:84:b6:a8:71:87:a0:12:cb:e2:48:dc:db:3b:
                    5b:3f:66:9d:7e:18:f0:ac:55:eb:69:77:77:55:60:
                    d3:ab:63:f6:7c:47:ab:0e:0b:42:06:67:7f:a9:4a:
                    b1:72:0f:9c:fd:e7:cd:61:03:c9:20:eb:fa:20:bf:
                    e5:84:89:dc:e8:59:bc:80:3d:c9:5d:d4:06:4d:16:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:2C:33:15:24:A0:93:FC:DA:E3:2D:44:80:60:37:12:66:2F:A1
            X509v3 Authority Key Identifier:
                keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:2d:c4:a0:5d:5d:74:86:5e:11:13:ff:10:56:60:34:cc:
         7b:e4:b8:b8:37:4f:7f:bc:03:f9:9e:63:36:c8:c9:42:32:59:
         9f:d0:c5:bd:c5:87:cb:32:c2:b3:3f:5b:f6:0d:be:b1:64:e9:
         67:fe:46:04:7f:7e:90:19:c1:64:c9:e0:ce:cb:2c:91:63:0e:
         dc:fb:c7:b4:d1:77:fc:75:74:09:65:40:78:bb:6a:69:7a:c9:
         a5:73:ef:2e:fa:9f:70:ab:5f:4c:49:82:ba:76:48:54:d2:4a:
         c8:08:fc:6e:97:cb:74:08:9d:f8:3c:cf:76:7b:a1:95:a4:5a:
         e4:1e:d9:17:9f:a1:03:a8:c8:ae:62:7b:27:5e:de:1a:c2:a5:
         f2:b5:e6:c4:b6:6b:ab:08:c8:5b:6d:fd:f4:f6:05:54:37:4b:
         96:40:31:8e:6a:ee:a4:8c:0e:58:e7:36:67:f6:40:97:97:f6:
         20:6c:2d:74:f8:5f:d6:d7:9c:55:cd:74:88:9f:81:00:f3:72:
         09:a0:f0:22:b2:7c:b9:cc:24:af:af:52:d8:f1:a7:5a:31:8b:
         d3:7a:5b:b7:09:cf:9e:ca:47:84:d3:2f:62:69:38:de:54:12:
         73:96:40:66:3f:12:36:48:87:c1:9a:68:2c:9d:0f:d1:09:e4:
         8a:63:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:45 2026 by rpki-client