Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
File:                     Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft (raw, json)
Hash identifier:          rUFTiHVl/omQLUbrPdFFVjT9ubZl1p39BzWENRF2iZ0=
Subject key identifier:   87:1F:B2:9A:BF:4E:B8:B7:98:F7:8C:FF:36:A2:1A:B5:D6:91:85:B9
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Certificate issuer:       /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial:       019D25F174A7139E29212A76B800FF7301CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
Manifest number:          18A6
Signing time:             Wed 25 Mar 2026 17:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:13 +0000
Files and hashes:         1: 4fvreBm1fiB96hVA9BShoZzJmBE.roa (hash: sO95QKm92ZKe4lks/TU2kN0OfaoKLa977mvoo4v6O4o=)
                          2: 7sBhsS3IKRcr33_U1JkKDJW68us.roa (hash: xY1ESwAhrRBt+0rhE/M4HExjqsDPer8OP3/L1PBN508=)
                          3: 83ipVLDqGfXpUsM1ALOpAd8Y4fI.roa (hash: EvJ+6iXJX0Ai/WiPQLIHCUik0aSQjwMQyqYlXy8gMgM=)
                          4: GjOqkzTnZSJ2IM-ilXZsSH0BDEs.roa (hash: ViNaPYttrQqtr/yvSEXih8SqVieBReHwf8y6XNPrJX0=)
                          5: JAaR4jCCnSQLvjrBZZCZLxsQln0.roa (hash: vEKk1FavUKcj+vyn6TLUVpoYaoLPl7KLYR+FhgyFQgw=)
                          6: R9UlzcqdvtGAGV1nZ5OePYiWUyk.roa (hash: ZpFWsxhYJ3Rpfdyc2Iw8/I5De1MCX1/2qPFeeq17/Tw=)
                          7: U0-V85hNklnWYB4UKE8-_DQj3cs.roa (hash: avhkr2iR2hmlHJRDxsI7aGnmfDx4nKq3sAK/KOYC9LU=)
                          8: VOc75q9rZMJA4FXqQscyX1ERS_8.roa (hash: Ry99I0BJCRJbt6jtJzL48yrr1YlnIVfVbDfo1hLRwXY=)
                          9: Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl (hash: iK9wfcrXvdK04y+0GEO9cgYhRxFJIDcKrgtbRpGqJkc=)
                          10: fqKmITtuuIDpjK-CmwtGTo6Qx2I.roa (hash: zOiW8j04KmVedHVbWP3l5qomPlPBpYoJxiOpFyd0f8s=)
                          11: fz94s-VUXoVDwH_u7pJCcjEzPzc.roa (hash: SETDMEUFwHfaec63U1CUG7TyGKgVUHcXmHb5uidUG/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:74:a7:13:9e:29:21:2a:76:b8:00:ff:73:01:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
        Validity
            Not Before: Mar 25 17:01:13 2026 GMT
            Not After : Mar 26 17:01:13 2026 GMT
        Subject: CN=871fb29abf4eb8b798f78cff36a21ab5d69185b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:5f:33:e1:66:63:2c:ee:0f:8d:f9:65:40:
                    49:af:e1:c9:7c:45:14:53:68:aa:72:48:76:8a:ee:
                    39:d1:2e:57:64:15:37:a6:f4:f1:f5:c8:3c:e3:af:
                    90:a5:de:4e:39:3d:68:f6:2e:47:7a:7b:aa:aa:63:
                    8e:f0:b2:e2:71:b3:b8:3e:0f:5a:67:af:90:23:d5:
                    cc:28:34:bc:b0:0b:8a:82:67:35:2f:cf:7c:e0:ff:
                    74:45:a1:29:62:f4:e2:1d:ef:28:65:62:e7:88:cf:
                    67:b3:d5:92:5b:93:b3:76:36:77:85:12:a4:cc:63:
                    f9:93:ca:6c:f5:4a:94:81:52:7d:cc:5f:2b:eb:31:
                    27:f6:2f:2b:65:66:41:79:65:b6:4c:16:77:10:0f:
                    95:09:8e:df:7b:09:22:c9:0e:96:81:6c:f2:0b:ff:
                    1e:04:8d:f8:94:78:e7:ee:41:fa:62:89:12:2d:5f:
                    78:28:e3:eb:74:c9:f9:22:e2:b2:1d:58:51:6d:07:
                    ed:59:0a:49:0d:88:af:8a:84:34:b5:55:f6:60:cd:
                    52:62:41:ec:e9:eb:80:8d:17:3a:4d:c7:05:06:02:
                    20:49:9b:88:85:79:b1:66:39:bd:33:f8:ff:84:6a:
                    18:ee:58:5e:02:0c:33:88:b7:05:0b:04:c1:bb:f1:
                    a4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:B2:9A:BF:4E:B8:B7:98:F7:8C:FF:36:A2:1A:B5:D6:91:85:B9
            X509v3 Authority Key Identifier:
                keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:ab:32:a9:ba:93:e0:2f:f6:1b:b3:b5:4c:82:b3:b9:b6:
         02:54:10:55:6e:8c:1f:6e:d2:4d:72:76:b6:08:74:54:23:c7:
         d0:d0:8d:a7:ec:a9:ee:48:19:f4:70:b6:f0:d2:cc:c9:af:29:
         73:3c:d8:22:f6:94:5a:f3:c1:e5:fd:a7:a0:8c:dd:96:f3:3b:
         9a:96:28:d2:b7:e4:49:58:87:fd:33:e5:a2:12:db:33:d0:9c:
         0b:80:e7:9f:cc:1f:13:18:a3:5c:d8:f3:9e:d2:95:41:21:ca:
         b2:6d:e1:f7:7f:8e:b6:84:09:f2:2d:d8:11:ed:24:0f:70:42:
         91:17:a6:35:2c:0b:63:f8:67:40:31:66:c0:c1:4c:b4:1a:ad:
         63:cb:1c:a8:45:56:b9:43:30:a6:b9:25:a3:5e:18:4f:21:40:
         a9:81:d8:3d:bc:fb:58:12:e9:52:e3:a2:18:01:1d:b7:8c:e7:
         e6:58:95:8b:c7:63:c3:76:e8:97:4c:51:2a:9f:42:f2:de:33:
         50:b4:9a:03:f1:02:9d:e5:22:cd:53:4f:ca:bf:0c:c9:63:8c:
         aa:a4:62:7e:3d:10:64:c5:82:12:36:2b:9a:f7:a5:d8:b7:72:
         b8:cb:3f:db:19:c6:49:4d:55:f2:62:a9:9e:f2:76:57:57:44:
         18:e5:c1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:25 2026 by rpki-client