Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
File:                     ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft (raw, json)
Hash identifier:          V6vBcY4WMisgZ38k6i29b5VCnJy14WcjuIFhyL0nR7o=
Subject key identifier:   C0:27:E2:FA:0F:BF:B8:EA:60:46:CC:7D:A7:40:22:1A:76:97:C1:52
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Certificate issuer:       /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial:       019D2704D7CBDA0D8BC5BA98284A92B0C56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
Manifest number:          0C95
Signing time:             Wed 25 Mar 2026 22:02:01 +0000
Manifest this update:     Wed 25 Mar 2026 22:02:01 +0000
Manifest next update:     Thu 26 Mar 2026 22:02:01 +0000
Files and hashes:         1: ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl (hash: JhSFGdch4VFrNdipDMJe15YZufKDz27hY54K0V7LIqA=)
                          2: oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa (hash: On+gGjr8rTU+wqF8jInBbdR1DrtmCg/UcweFh0kLfjU=)
                          3: shLbklZTsl4AZPGv5XqOqviR4Fs.roa (hash: 3mVV646n9CiCww0apd2ZXdr2biN6kuu9VtbZKzpMXDk=)
                          4: wNWaeIo1EAzWYqKEsMEX14uNfGQ.roa (hash: pEDt/E1EsF0TWRhexvZPmk3z2Y8kiJZTlwVkYrWgB0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:d7:cb:da:0d:8b:c5:ba:98:28:4a:92:b0:c5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
        Validity
            Not Before: Mar 25 22:02:01 2026 GMT
            Not After : Mar 26 22:02:01 2026 GMT
        Subject: CN=c027e2fa0fbfb8ea6046cc7da740221a7697c152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:6c:98:85:7c:58:1e:eb:31:d3:c8:cd:c4:
                    90:4b:78:d4:7d:ef:2f:c9:58:70:3f:94:4f:48:2f:
                    1a:08:7f:de:3e:7d:09:42:90:ab:da:8a:4b:6d:fb:
                    7b:44:fd:a1:ea:b0:f6:db:2b:46:f0:64:85:c3:a9:
                    08:9c:66:57:a1:db:44:63:07:24:68:0c:c5:8a:a5:
                    46:23:66:dd:83:45:7c:fc:5b:cc:65:52:9b:49:0a:
                    6d:f3:1c:df:b3:68:7c:b9:dc:3f:31:11:53:0a:18:
                    ac:d9:ec:97:3e:eb:26:7f:26:0b:9d:04:ac:a4:54:
                    bb:c0:af:f0:f2:9a:82:d8:e6:8f:52:37:22:10:52:
                    27:d8:68:37:82:10:71:21:67:a7:07:1a:c5:ca:50:
                    ff:cb:a2:1f:bb:e3:a0:ba:84:50:5d:5c:d5:91:23:
                    55:3d:03:6f:38:8a:f9:d5:2f:41:ab:3b:fe:4c:f8:
                    61:41:d9:30:ee:a3:db:b7:f9:85:61:57:53:a2:69:
                    3e:77:88:15:80:bc:34:66:1d:38:20:f7:a7:3c:7d:
                    b6:92:c5:45:3e:51:e2:24:67:bb:f5:1d:3a:69:74:
                    9c:6b:d0:91:95:0f:c8:5d:5e:df:47:6a:f1:a3:67:
                    de:21:7b:eb:90:b8:f3:19:11:ac:90:98:25:52:da:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:E2:FA:0F:BF:B8:EA:60:46:CC:7D:A7:40:22:1A:76:97:C1:52
            X509v3 Authority Key Identifier:
                keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1e:6e:d6:62:cb:d7:6b:c1:4d:0c:41:10:70:fd:7d:3c:25:
         ae:c3:e6:3c:39:d8:98:06:f7:ab:89:45:9d:98:67:fe:df:7e:
         6d:9c:fe:a3:b4:74:50:41:12:2c:a1:3d:08:3e:85:a1:a9:a5:
         a0:a1:38:04:f5:e2:1d:22:64:c5:69:92:a9:32:2f:0a:44:15:
         75:bf:f9:b8:d8:ea:9d:0a:7e:ee:68:40:95:6d:c8:1c:b7:4f:
         29:fe:11:88:05:bc:3b:69:1d:d5:c3:11:93:30:77:ce:4b:1d:
         53:54:2c:66:35:24:f1:8e:61:bf:3e:8d:a3:cd:a9:7f:a1:0a:
         1b:ca:96:df:40:c2:a1:31:c9:30:ee:b1:e1:3c:d8:3d:1b:df:
         94:f4:9d:9a:cb:b7:ff:0a:15:44:09:26:5a:80:26:81:6a:b7:
         cf:a6:9a:25:e0:94:5a:33:d2:61:37:02:c3:cd:0b:46:60:16:
         f1:d3:79:91:29:ae:07:4a:64:83:b0:ae:e4:35:15:e2:0b:6c:
         bf:59:3f:47:3f:83:91:42:ad:4f:db:bb:cf:eb:8f:2f:b2:78:
         20:08:4c:77:e0:d2:3d:1f:f2:29:3b:c0:85:41:c5:08:96:17:
         66:83:84:6c:6b:97:0a:31:27:61:e0:32:65:bf:ce:62:ee:b2:
         0b:06:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:55 2026 by rpki-client