Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          1RrMT5J21V2/RrmF7MvoUy+oGWoAN3nz4HgfB+edA4Y=
Subject key identifier:   F0:31:DC:59:BB:91:4E:07:54:DB:CB:01:D8:13:EE:FA:BC:F9:59:E7
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       019D2704090DB2FCFCE71667E2D07997EED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 22:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:08 +0000
Files and hashes:         1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: k6Lg6G9MBSM9wdZbbi+XguzW4VkqYakcqNGTXCNRJBs=)
                          2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:09:0d:b2:fc:fc:e7:16:67:e2:d0:79:97:ee:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: Mar 25 22:01:08 2026 GMT
            Not After : Mar 26 22:01:08 2026 GMT
        Subject: CN=f031dc59bb914e0754dbcb01d813eefabcf959e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:ba:da:b2:5e:74:0c:e2:54:80:7c:2a:24:
                    d9:82:a3:2c:fa:40:38:c5:13:54:6e:5e:ff:06:74:
                    15:40:71:4c:1a:44:3c:b0:9d:42:2f:0d:3a:97:b8:
                    cb:cc:51:cd:0e:84:a1:cb:36:a8:3f:54:d4:05:18:
                    ae:ce:0f:f9:01:41:2d:ac:1c:37:22:1c:93:8c:1e:
                    c8:8f:52:40:b5:b3:af:d7:04:de:af:18:56:da:58:
                    12:74:c8:2c:9c:e2:88:26:d1:25:6e:dc:7e:67:f3:
                    23:38:05:e7:c3:1c:db:6d:28:94:4b:d2:46:d6:be:
                    d5:21:46:be:e8:91:89:7a:31:7f:15:62:2c:6e:c7:
                    df:39:6a:f1:0c:d0:9b:d9:19:a9:83:ee:95:2c:1b:
                    2b:d8:bc:f3:4a:07:71:9e:16:d5:3f:4b:14:d1:48:
                    8f:01:d6:c9:47:f3:1c:96:ca:7e:c5:9e:8a:6f:b0:
                    04:19:3f:e4:bd:8c:98:f5:7d:89:ae:f1:5c:c3:cb:
                    fd:1c:5e:01:60:44:cc:80:dd:ad:59:e2:b2:e5:8a:
                    5b:19:1d:ba:b3:00:03:d0:15:e9:0e:c5:7b:38:79:
                    b4:16:65:19:b7:b5:c7:a9:9e:42:61:b7:df:70:13:
                    f1:5c:01:35:8f:f8:9d:1c:9b:d0:71:2d:fd:86:7e:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:31:DC:59:BB:91:4E:07:54:DB:CB:01:D8:13:EE:FA:BC:F9:59:E7
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:35:ea:d1:be:13:06:b2:50:fb:bf:4a:8c:8a:38:d1:67:
         5d:01:1f:ae:55:a8:1b:b3:67:2a:d5:51:24:b7:70:cc:bd:73:
         d9:2d:cf:11:8d:38:9e:c9:91:04:04:b4:8b:7e:74:13:7e:c3:
         0e:5c:38:bd:d0:18:9e:56:44:9d:83:8c:a5:3f:6c:f2:3d:24:
         13:d0:be:81:93:58:0b:27:11:da:1e:07:99:bc:ed:f7:f5:bf:
         29:33:28:3a:20:fb:56:e0:83:55:7d:f7:ca:85:b5:7e:73:ba:
         e8:8e:1a:23:e8:54:c3:fe:af:07:26:dd:b6:e3:77:75:a5:7d:
         f9:ad:d1:7e:23:6f:50:ae:f2:d9:57:ef:05:6c:c0:c9:cb:8b:
         6d:7d:f9:7b:c2:fc:92:48:43:25:85:a6:51:dc:45:49:87:50:
         a3:88:8d:0b:ba:3c:cb:dc:69:0c:4f:74:ef:9f:1e:fa:d7:e2:
         4d:c3:50:fb:59:1a:b8:e3:dc:cd:bd:e1:55:46:f3:a8:e4:00:
         2a:ac:c5:47:dc:7a:d6:2c:1d:46:bf:24:0b:1d:c3:81:5e:40:
         7d:42:7f:d5:66:38:e4:4f:a1:6a:0f:5e:6d:fa:51:92:df:26:
         28:0b:29:6f:46:37:1c:65:99:e9:2b:63:53:ad:43:d6:ba:fb:
         51:0d:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:21 2026 by rpki-client