Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File:                     Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier:          Cvzg7epkm0btX42CmfNKmTM139/pYVHYklQfj32MVMg=
Subject key identifier:   FD:43:A4:AD:6B:03:C6:60:23:61:88:63:D8:18:4D:CC:35:BF:9F:94
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer:       /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial:       019D2B4ED3FC59B7B0B87615968EB426C990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number:          0701
Signing time:             Thu 26 Mar 2026 18:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:19 +0000
Files and hashes:         1: N8EyJda6rhR9QteQQOD1cmq2_LQ.roa (hash: cndG9t1x1ssBeu5ltRQC+iF8/XMVzNaV3QWE/yAHOVI=)
                          2: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: jnhCn+jbrJaLTCm9Cb3J+XdBrBaA/wNX+hsuTPnCLTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:d3:fc:59:b7:b0:b8:76:15:96:8e:b4:26:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
        Validity
            Not Before: Mar 26 18:01:19 2026 GMT
            Not After : Mar 27 18:01:19 2026 GMT
        Subject: CN=fd43a4ad6b03c66023618863d8184dcc35bf9f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:1c:49:c8:f6:9d:bc:dc:8a:ad:b1:a7:bb:
                    a2:c1:d2:77:ad:e5:15:41:e8:79:f2:6f:57:5a:68:
                    04:2e:6d:a1:08:0d:0c:60:b1:2d:c5:66:cf:8b:71:
                    50:ef:9a:77:d9:13:55:9e:12:9a:ac:5c:10:b6:8b:
                    14:db:c5:d0:6c:1d:4f:89:7a:6f:13:9f:64:58:a1:
                    2b:71:88:15:b3:9d:13:91:1c:8c:29:2e:d3:c2:a5:
                    6f:e5:d8:a2:78:a1:59:3b:98:92:52:1f:f0:07:59:
                    19:09:c8:7a:4a:1c:28:ee:da:34:0d:ab:94:06:9f:
                    7c:84:b3:61:00:15:db:de:f8:46:68:d3:fd:33:8b:
                    5c:6f:bd:c2:32:71:ac:9f:fd:a8:9d:1a:91:64:a0:
                    b6:e4:8a:0f:24:bf:65:35:ea:5e:42:29:c0:b7:5b:
                    a0:72:09:35:cd:8f:4a:7c:fe:05:2f:65:d4:b7:7e:
                    82:52:3c:f2:45:d9:b7:02:f9:66:09:27:55:db:84:
                    a7:d7:4a:d1:9d:de:11:6e:5d:78:4e:d7:b3:73:72:
                    a4:96:16:7e:fa:34:4a:c0:fd:f6:ce:5e:30:2f:ca:
                    0e:9f:af:0e:d0:07:a5:f5:1d:0f:52:c4:93:25:30:
                    04:c9:b1:22:6c:0b:37:65:14:4a:ee:d8:0c:63:1b:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:A4:AD:6B:03:C6:60:23:61:88:63:D8:18:4D:CC:35:BF:9F:94
            X509v3 Authority Key Identifier:
                keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:99:36:79:7b:77:5c:06:de:04:2e:9b:c6:64:a4:a0:15:83:
         c8:9c:53:76:03:0b:62:49:a9:90:de:fd:7b:51:42:55:a0:8e:
         75:06:e8:3d:21:f3:1b:db:f2:d3:44:71:72:0e:c6:b5:1e:b9:
         70:c9:0a:7c:73:fa:c8:1a:69:0f:1a:64:7a:70:5c:16:ce:17:
         a8:81:1d:b8:1f:dc:85:e1:a0:ef:a3:e4:5f:a5:0e:9e:cd:85:
         42:c0:38:26:7c:1f:64:30:9a:69:b0:8c:e2:d2:46:09:fa:a9:
         78:b7:dd:b5:34:02:44:5e:99:53:ed:81:52:5c:e3:a2:0c:e4:
         9a:26:9c:9c:2a:29:5b:e4:cf:2e:62:dd:8c:ea:eb:62:0e:c9:
         d1:12:a1:66:de:b3:bf:0c:8a:65:1e:19:d2:a6:66:e7:92:06:
         86:11:5e:21:4f:a8:ee:d8:08:5e:94:49:91:0c:94:d2:96:a5:
         47:da:27:58:8f:ca:ea:dd:0d:e2:74:14:27:f8:27:5a:8d:cf:
         6c:1c:2a:f8:b1:95:f8:41:2b:c4:ec:f2:80:9b:58:e9:87:c2:
         7a:4c:1e:fb:fe:f5:3c:a5:21:62:2a:b4:8b:7d:85:a6:76:68:
         4d:67:30:61:28:84:f3:45:d8:c9:64:b3:54:f3:af:30:51:6b:
         16:c8:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:39 2026 by rpki-client