Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File:                     zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier:          Z3s7wbjH9IWT+7FLZUMMbHQlB8cmutqVUe8ciHUlOiw=
Subject key identifier:   79:D2:59:67:EB:2E:C7:EE:A3:80:4E:E1:3C:28:E6:49:C2:0D:D9:9C
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer:       /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial:       019D265EF40AC9B2A1D866F470C6A74C6D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:50 +0000
Files and hashes:         1: PolmcNKUOLtY-UeTb4jkSIvQsTM.roa (hash: b7erTVt5EQJ/JPRF7lrWpbLZEhrxU/WLeG3F+iBfhKk=)
                          2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: qyFCcmRg1oIMkQN10UhQgiCpAmRklb3HcJfO53qnqqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:f4:0a:c9:b2:a1:d8:66:f4:70:c6:a7:4c:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
        Validity
            Not Before: Mar 25 19:00:50 2026 GMT
            Not After : Mar 26 19:00:50 2026 GMT
        Subject: CN=79d25967eb2ec7eea3804ee13c28e649c20dd99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3e:60:20:fd:46:57:b0:96:48:92:2c:5d:99:
                    47:cc:d8:fa:d1:20:6a:de:a3:8f:65:18:a2:3f:78:
                    00:78:4c:f3:dc:6a:f3:a7:47:59:97:33:59:2a:03:
                    80:c1:37:81:f0:2a:b3:79:ce:ad:5a:e9:2d:45:20:
                    27:7a:f6:bf:87:cd:2c:b1:a3:42:f4:38:45:5b:1a:
                    c5:38:68:0d:90:e2:d8:22:34:76:c3:1e:95:24:35:
                    56:a2:47:38:4b:4b:9c:b0:9d:6a:28:8d:9f:8c:98:
                    c7:b0:80:35:c6:65:d0:c4:5c:96:04:7b:15:fd:1d:
                    bc:04:67:73:dc:4b:ec:64:1f:97:40:e4:3a:80:e4:
                    53:93:14:8c:80:b6:b1:68:af:58:d8:49:2f:0c:38:
                    b0:f5:44:82:4a:c7:dd:ed:32:c0:ce:2f:ae:f1:97:
                    1d:c2:2d:0e:2c:0e:ae:b5:10:5f:92:0a:a6:e5:a4:
                    1e:f5:73:2d:dd:dc:8c:63:2b:ea:f1:73:9b:93:50:
                    00:3b:56:cd:db:1a:67:d5:44:a1:0c:fe:d7:50:98:
                    ce:7e:c4:f9:89:27:9e:40:44:be:72:4e:5c:2e:2d:
                    29:e0:f3:db:81:2b:e8:73:49:0d:65:f9:66:f4:5a:
                    2b:2d:07:07:2e:15:f7:3e:c1:7f:cc:51:07:0f:b2:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:59:67:EB:2E:C7:EE:A3:80:4E:E1:3C:28:E6:49:C2:0D:D9:9C
            X509v3 Authority Key Identifier:
                keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:13:04:86:ad:7b:3c:ff:5f:29:50:dd:a2:e8:cf:0e:f3:
         bc:cf:42:3f:38:a6:a2:ae:57:1d:52:15:32:0a:01:99:44:d1:
         34:c0:7a:a1:5a:41:24:ae:dc:62:39:70:ea:60:c0:d7:1a:8c:
         14:e3:e2:fe:69:e0:90:a5:98:78:21:27:4c:03:49:e1:b4:3f:
         c8:5e:6a:cb:11:48:93:8f:50:2c:29:f0:66:c5:28:a9:ca:bc:
         64:d3:7c:91:88:b9:4b:f7:98:82:1d:17:f5:f3:c2:83:00:03:
         69:bc:c8:c7:24:8e:1a:93:b3:39:0d:40:8f:7b:b9:ff:97:68:
         04:c5:c2:99:ac:4a:f2:e4:f5:95:c0:54:54:c9:00:46:ae:e7:
         d8:82:fe:d2:d3:a4:95:2a:45:9b:79:43:ac:60:a2:f3:4f:84:
         db:59:f5:9f:2e:e7:09:be:83:3f:47:de:53:fc:bb:55:95:ab:
         79:be:37:db:22:54:6e:60:f3:4a:7c:07:77:99:cb:d9:45:b9:
         90:13:73:7f:f7:d9:98:e9:3c:68:23:31:70:f2:79:59:f7:5e:
         f9:d4:c5:26:b1:68:82:4e:f5:f2:d5:f9:98:0f:a1:6d:26:3b:
         6d:01:45:d8:a0:80:02:28:2a:38:ca:dc:ba:1e:40:2f:97:72:
         43:a9:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:52 2026 by rpki-client