Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File:                     cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier:          tkBWpqpuxTQrrFGhiO0bVEKGHekM8iBb8ogGWX+rtEk=
Subject key identifier:   DC:20:4F:A0:77:B8:50:44:3D:52:F2:4C:B0:9A:66:72:78:1D:C6:DA
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer:       /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial:       019D26287597B90DB7046EA5AA05111B13C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number:          0E39
Signing time:             Wed 25 Mar 2026 18:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:18 +0000
Files and hashes:         1: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (hash: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4=)
                          2: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (hash: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ=)
                          3: T8wO9YK42VrpaTKZVLl0hlhCgqQ.roa (hash: 2/LsWjUAgBK/sup3nVZAY9upc9OnAS/gP5lDONEvXDQ=)
                          4: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: jWCL70eOCQUuI89Mc687WnYY4KzTo/cc/prAA6FMrIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:75:97:b9:0d:b7:04:6e:a5:aa:05:11:1b:13:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
        Validity
            Not Before: Mar 25 18:01:18 2026 GMT
            Not After : Mar 26 18:01:18 2026 GMT
        Subject: CN=dc204fa077b850443d52f24cb09a6672781dc6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:44:44:1c:e6:f0:1a:fc:81:34:07:00:2b:
                    62:80:49:4c:40:73:56:03:aa:8e:8f:77:82:a9:6b:
                    7e:e3:a8:9e:49:83:0d:b8:6e:81:64:28:2c:54:df:
                    2a:8c:9c:f6:28:95:72:f3:5c:cd:c6:62:46:56:6d:
                    d6:bf:a6:bb:c5:9c:35:8c:3f:c0:d9:23:d0:0d:3b:
                    8e:fc:bb:dd:8d:37:24:e6:06:aa:63:f1:a1:fc:9a:
                    b6:37:79:bf:78:a1:34:b3:aa:94:9b:4c:96:7a:5c:
                    dc:36:77:3d:80:b9:45:39:eb:ac:bc:33:77:02:04:
                    92:32:ed:d2:a5:17:56:e4:38:14:95:33:d9:e5:e2:
                    9c:dc:eb:4a:ce:e2:85:cd:df:85:2e:4b:c3:25:cc:
                    d2:03:25:7d:84:ec:3c:b4:f2:62:e4:73:92:57:98:
                    74:5a:63:cf:6a:61:df:eb:1a:14:0b:6f:79:18:d1:
                    03:1a:eb:ac:e6:ee:a7:9e:7f:40:a3:a8:19:a3:fb:
                    6b:5b:fe:56:bc:a3:55:3e:9d:de:90:75:02:18:6d:
                    76:bc:bf:f3:b8:92:77:c5:9f:3b:8e:d7:be:87:9f:
                    d5:00:61:fc:94:17:1d:e9:e6:bc:61:5a:14:28:5a:
                    a7:04:9a:4d:a4:b1:3c:d2:4e:6f:2e:ff:94:40:0d:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:20:4F:A0:77:B8:50:44:3D:52:F2:4C:B0:9A:66:72:78:1D:C6:DA
            X509v3 Authority Key Identifier:
                keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0e:13:20:72:44:a0:f9:61:0e:88:05:f7:41:92:71:2c:49:
         b8:a9:b5:86:03:28:8f:1f:c0:c3:5a:6f:e4:da:c4:8e:f3:82:
         8d:97:5e:e7:73:4f:46:8c:2b:d2:6e:7a:a2:bf:cb:3b:e9:b0:
         e3:ac:1b:7e:59:69:9e:02:67:98:03:44:0c:70:05:2f:88:13:
         42:02:5a:9a:25:28:6f:8f:c0:15:ad:ae:cd:36:db:9b:1e:4f:
         4e:f9:64:a5:73:a0:ce:ff:55:f2:92:65:29:e5:a5:e4:37:f6:
         43:31:65:2d:fe:fb:e3:eb:80:f7:56:13:bc:b4:7e:bf:12:6a:
         15:ba:59:1d:3e:25:34:2f:eb:9b:aa:fb:92:77:b7:8c:7b:6c:
         02:6b:c1:e7:3e:46:91:05:90:ce:3b:b4:bd:48:3d:34:2f:34:
         b6:96:8a:19:bc:7e:a8:90:72:7a:a1:2f:37:9a:8e:06:f4:48:
         f7:73:b7:e8:14:e8:a3:bc:bd:84:bc:be:30:9e:fc:4d:29:bb:
         e3:13:36:f7:24:7b:7f:44:bb:64:11:16:47:2f:f4:64:f2:05:
         b6:2e:80:1b:bd:41:01:f1:a4:16:51:e7:3a:31:c9:23:62:88:
         0b:f9:48:2b:f0:5b:1a:ca:c3:cd:76:de:4a:d0:01:c3:33:08:
         f3:f4:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:55 2026 by rpki-client