Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File:                     ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier:          BEV6FAfXhZX2Rxan0gTGITjUzPYUyFs9+xAj9t+N5go=
Subject key identifier:   34:36:33:6E:3D:69:C4:58:E0:82:BD:1A:54:D2:82:28:3D:9D:41:F1
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer:       /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial:       019D277286B5AEE4D5A212DA19F54ED6FEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number:          1881
Signing time:             Thu 26 Mar 2026 00:01:49 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:49 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:49 +0000
Files and hashes:         1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: b7Rm0I+sZOxdWo9ZxFVtFJOfSC/wUCs0uk2DPF+EDaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:86:b5:ae:e4:d5:a2:12:da:19:f5:4e:d6:fe:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
        Validity
            Not Before: Mar 26 00:01:49 2026 GMT
            Not After : Mar 27 00:01:49 2026 GMT
        Subject: CN=3436336e3d69c458e082bd1a54d282283d9d41f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:38:96:30:4d:c3:b2:8b:71:e4:ed:4a:96:
                    d2:92:bf:5e:c9:9b:bc:22:b2:9b:87:77:28:b6:fd:
                    b3:2d:1d:ad:95:3f:ff:40:7d:29:d0:96:58:fd:b7:
                    57:5a:af:b5:55:be:60:b8:f0:02:bf:ea:9d:56:f1:
                    e6:a6:7c:93:d0:0b:8d:04:a8:22:a4:ba:cf:e6:05:
                    80:c2:68:14:23:55:ea:87:6c:18:0a:18:bf:1f:7b:
                    15:b8:bb:60:f9:4f:56:f3:a6:20:29:6e:9a:42:5c:
                    ef:7a:08:4d:1e:99:17:93:55:e2:2a:33:0a:8a:f1:
                    ce:a7:99:1a:d1:e3:67:d7:df:69:30:f9:11:d4:10:
                    c1:7c:14:6b:b1:80:0a:56:04:bc:63:34:fd:78:34:
                    75:bb:83:66:92:09:db:48:39:ac:ff:22:71:90:ae:
                    c9:dd:55:11:83:b5:d7:54:51:45:ee:a4:40:d2:fd:
                    a8:8b:d6:b2:c1:0c:c2:af:f5:41:e9:f8:3b:9f:4c:
                    6d:8e:de:09:45:33:a5:ba:cc:b6:00:b6:88:73:04:
                    5a:11:f7:8b:76:1f:77:70:c2:0d:24:a7:28:86:12:
                    cd:c2:cd:aa:6f:6c:bb:42:38:c2:7e:cd:74:4f:fe:
                    d7:c8:39:53:7a:63:09:bc:96:f4:da:6c:3d:ed:37:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:36:33:6E:3D:69:C4:58:E0:82:BD:1A:54:D2:82:28:3D:9D:41:F1
            X509v3 Authority Key Identifier:
                keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:f4:6e:cd:80:a9:e0:41:97:a2:81:a6:c4:06:e2:c6:02:
         e4:22:f1:65:f5:b0:59:e3:24:74:70:2c:be:5e:56:f4:ca:4a:
         58:12:bd:12:0f:54:c5:08:28:25:d3:d5:4f:57:c3:04:21:6c:
         04:23:a3:67:a3:50:2e:3a:c3:1f:16:ce:81:89:63:63:19:42:
         02:25:74:2b:34:a6:ef:9a:36:67:7a:ac:30:92:21:30:9a:b2:
         37:85:e2:2d:24:9f:94:f8:ba:15:31:6f:91:09:a4:1d:99:d3:
         63:36:f1:bd:28:f5:3a:e5:6c:56:1c:ea:fa:5e:82:af:e8:1a:
         17:fe:30:fd:bf:77:12:77:20:7f:c9:8e:97:5b:64:b5:cb:7b:
         2d:52:99:b9:2a:40:11:b5:db:c2:be:07:da:f6:72:9d:31:4a:
         b1:c9:18:fa:90:7a:e6:49:83:b5:b4:f9:6d:07:62:c1:2b:61:
         f0:50:3e:28:67:63:d1:c1:15:88:be:70:d8:99:07:8c:97:57:
         90:ea:3a:41:22:31:8b:b0:b6:97:45:f8:e5:83:8f:66:80:6a:
         98:f9:1c:30:e3:de:fe:c7:c6:69:e0:53:c5:48:7f:71:6f:41:
         43:f8:5a:2a:1f:7b:c0:73:b8:b8:de:71:fd:ac:7b:8c:4c:0f:
         50:fa:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:15 2026 by rpki-client