Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File:                     zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier:          xf0at8JNdL1BkZuKG39XQ88rFNccfQELjg9sGq8v3o0=
Subject key identifier:   B0:1B:C8:3D:5C:A0:53:27:27:3D:6A:29:A1:26:59:62:E2:AE:A3:2F
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer:       /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial:       019D27E068C975BAEC89C2E2DA65AC7458C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number:          104F
Signing time:             Thu 26 Mar 2026 02:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:51 +0000
Files and hashes:         1: mksXPvzfs0a6_2GYuOBUxDiXzU8.roa (hash: MCOyKzIAtyadIzF2fgEZDjYZ2qaVt54CQCVZbXjLi+0=)
                          2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: 1ZGvEcBHBb5Xf7Grm+Y+Z2dJJHQxR+OO0uB0lJXHSJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:68:c9:75:ba:ec:89:c2:e2:da:65:ac:74:58:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
        Validity
            Not Before: Mar 26 02:01:51 2026 GMT
            Not After : Mar 27 02:01:51 2026 GMT
        Subject: CN=b01bc83d5ca05327273d6a29a1265962e2aea32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:00:1e:c7:2e:b9:8a:79:94:d1:d7:81:59:
                    8a:95:ea:97:c8:c2:3b:e4:87:b5:08:45:56:47:58:
                    99:22:8f:92:7a:7c:bf:82:82:96:50:1f:05:a7:7d:
                    42:35:e4:35:26:23:0f:d3:6d:5c:bf:4a:72:09:bc:
                    e3:4f:f2:d7:80:99:e2:70:9c:cb:f2:2c:cd:ac:d0:
                    2c:ab:31:1e:b1:8d:9f:da:08:09:18:8d:8a:35:2d:
                    1b:97:01:9b:e3:4f:b1:a1:44:5c:6a:c9:a5:33:ed:
                    91:f5:1c:40:73:b0:76:c9:01:da:06:bd:6d:47:03:
                    fe:76:ed:ab:9f:06:ec:ad:40:45:db:51:fb:72:4a:
                    19:7d:0a:47:56:bd:a7:4f:82:3c:d0:29:c3:be:15:
                    85:0c:87:ad:09:7e:7f:38:23:a0:77:6a:6e:31:e9:
                    4a:2a:24:e0:69:a6:d4:84:b8:43:0e:35:1c:85:1f:
                    26:28:65:4a:aa:78:f9:39:c1:0f:14:a8:31:a8:39:
                    2c:7b:be:ca:d2:ed:61:6b:4a:0d:d5:3f:a7:08:1d:
                    58:8a:0b:a7:55:0b:4c:7f:b1:f8:91:57:ec:77:3a:
                    0c:6b:c1:39:05:f5:ef:56:e4:f1:9b:29:97:41:e4:
                    e8:ca:3e:26:74:03:37:aa:fa:10:df:c2:b7:84:c3:
                    4c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:C8:3D:5C:A0:53:27:27:3D:6A:29:A1:26:59:62:E2:AE:A3:2F
            X509v3 Authority Key Identifier:
                keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:39:61:b7:41:e4:64:16:dd:4b:b2:fc:d8:b6:0a:2a:60:
         8c:ef:6e:70:07:b5:fe:13:cf:8b:4f:95:22:83:a6:c4:28:69:
         01:ef:3d:fc:c1:6b:02:bc:4c:8d:63:3c:37:35:bd:f1:56:ac:
         42:c8:79:bb:ea:9b:78:9f:eb:f1:cf:f5:fe:ba:c2:b9:54:4f:
         09:81:88:a6:3d:2f:44:7a:32:68:6a:cf:bc:eb:27:82:fc:31:
         44:19:24:a9:f1:67:89:a5:16:a2:76:38:a5:fd:ae:8b:e7:58:
         d0:fe:5a:48:a6:f8:37:cf:67:9e:60:ae:0e:0d:95:37:37:af:
         3e:c0:20:f2:a6:b1:ad:45:d4:93:36:6b:be:a2:bf:c5:bd:76:
         fc:8d:82:74:43:6a:4a:0f:0b:95:15:ed:be:8a:46:03:5b:0b:
         0b:46:38:91:ec:6f:58:f1:f0:b9:5e:90:49:94:2d:4f:50:04:
         6a:50:f6:71:55:09:57:b9:af:b1:61:63:0a:da:8a:9b:d1:0c:
         4c:44:aa:a0:74:92:fc:86:52:c7:1d:f8:21:34:1f:57:5e:be:
         ef:52:7a:c1:75:ee:86:2c:df:71:32:87:c3:3b:ba:7c:a7:e5:
         90:8d:17:83:80:a4:09:0a:d5:9e:dd:43:66:7f:9d:55:f5:b1:
         00:f4:63:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4GjJdbrsicLi2mWsdFjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMWU1NmU0YzRjNGE1MThmMjM4OGE1YWNiNWFmMDQ1MmNj
MmE1OTUwHhcNMjYwMzI2MDIwMTUxWhcNMjYwMzI3MDIwMTUxWjAzMTEwLwYDVQQD
EyhiMDFiYzgzZDVjYTA1MzI3MjczZDZhMjlhMTI2NTk2MmUyYWVhMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FAAHscuuYp5lNHXgVmKleqXyMI7
5Ie1CEVWR1iZIo+Seny/goKWUB8Fp31CNeQ1JiMP021cv0pyCbzjT/LXgJnicJzL
8izNrNAsqzEesY2f2ggJGI2KNS0blwGb40+xoURcasmlM+2R9RxAc7B2yQHaBr1t
RwP+du2rnwbsrUBF21H7ckoZfQpHVr2nT4I80CnDvhWFDIetCX5/OCOgd2puMelK
KiTgaabUhLhDDjUchR8mKGVKqnj5OcEPFKgxqDkse77K0u1ha0oN1T+nCB1Yigun
VQtMf7H4kVfsdzoMa8E5BfXvVuTxmymXQeToyj4mdAM3qvoQ38K3hMNMvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAbyD1coFMnJz1qKaEmWWLirqMvMB8GA1UdIwQY
MBaAFM0eVuTExKUY8jiKWsta8EUswqWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelI1VzVNVEVwUmp5T0lwYXkxcndSU3pDcFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jMDg3ZTktZDExZC00NGE2LThjNGQt
Mjg1N2YxNzAzN2ExLzEvelI1VzVNVEVwUmp5T0lwYXkxcndSU3pDcFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jMDg3ZTktZDExZC00NGE2LThjNGQtMjg1N2YxNzAzN2Ex
LzEvelI1VzVNVEVwUmp5T0lwYXkxcndSU3pDcFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCw5YbdB
5GQW3Uuy/Ni2CipgjO9ucAe1/hPPi0+VIoOmxChpAe89/MFrArxMjWM8NzW98Vas
Qsh5u+qbeJ/r8c/1/rrCuVRPCYGIpj0vRHoyaGrPvOsngvwxRBkkqfFniaUWonY4
pf2ui+dY0P5aSKb4N89nnmCuDg2VNzevPsAg8qaxrUXUkzZrvqK/xb12/I2CdENq
Sg8LlRXtvopGA1sLC0Y4kexvWPHwuV6QSZQtT1AEalD2cVUJV7mvsWFjCtqKm9EM
TESqoHSS/IZSxx34ITQfV16+71J6wXXuhizfcTKHwzu6fKflkI0Xg4CkCQrVnt1D
Zn+dVfWxAPRjFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:09 2026 by rpki-client