Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          eVw2J+/mUDr/jJL6bYtOEwK5+DsIw/AH28PO/94vpfI=
Subject key identifier:   7F:1A:EA:66:29:6E:07:C5:73:8A:4D:0F:97:ED:62:B8:AB:DD:37:1A
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019D299769F9354A02490DA07F24D7E3AC28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          1112
Signing time:             Thu 26 Mar 2026 10:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:22 +0000
Files and hashes:         1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
                          2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=)
                          3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: XzuyjKg2OneNwFh0JuPzsSUbZGmMVv46qudtrsOWWEo=)
                          5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
                          6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
                          7: vUUgJIohg5SQneif_sUKDZs-FYo.roa (hash: O9F4ICaD35Dayn0PCg4Uohxoxcc4CWJ4HvxFQPiHF6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:69:f9:35:4a:02:49:0d:a0:7f:24:d7:e3:ac:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Mar 26 10:01:22 2026 GMT
            Not After : Mar 27 10:01:22 2026 GMT
        Subject: CN=7f1aea66296e07c5738a4d0f97ed62b8abdd371a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:71:48:13:5d:bf:6f:f7:75:50:99:90:74:
                    c2:bb:d0:98:ee:7b:0a:8a:9f:84:47:35:ba:82:3d:
                    6a:4d:ec:7c:1d:18:a2:89:94:44:fd:34:37:0a:a9:
                    79:3c:e4:21:9b:a6:ad:6d:9d:9f:27:dc:67:f2:55:
                    80:94:3a:0f:a6:41:b2:3e:82:1d:bd:35:c8:9d:35:
                    f1:6e:73:2c:1b:aa:bf:0d:ec:73:58:50:af:8d:2d:
                    dd:29:67:2b:5c:2c:3c:48:a9:c8:c0:f0:4a:98:d7:
                    3d:48:58:be:c8:c6:8d:28:e3:ea:23:65:6c:55:64:
                    1a:93:48:1b:56:62:b0:aa:fb:aa:36:52:c6:9a:49:
                    21:89:55:d5:d6:fe:40:f4:73:56:7e:8d:5a:27:72:
                    20:8f:ab:fc:e7:64:d4:d9:db:0e:a2:15:a7:24:89:
                    94:36:17:1e:ee:f7:14:d2:77:7b:79:e8:3e:a8:44:
                    fa:d8:6f:06:bb:2e:d8:9c:1a:83:9f:44:62:ba:13:
                    1f:39:dc:6a:fd:36:20:e7:47:ab:3d:54:d6:b3:f7:
                    05:e1:8d:9c:d7:b5:8b:78:22:5e:ce:a1:8d:92:67:
                    68:e4:1a:44:63:b6:99:ec:4b:f7:2b:f0:72:f7:66:
                    e0:f9:11:41:79:5a:77:27:c8:bb:c6:5a:ba:3a:0e:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1A:EA:66:29:6E:07:C5:73:8A:4D:0F:97:ED:62:B8:AB:DD:37:1A
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a2:53:44:1d:b1:bb:2f:a6:d6:be:8e:9a:1e:2d:d7:9e:ab:
         82:28:fa:ee:b0:57:7d:7c:56:7e:2c:d1:51:28:70:04:9e:f5:
         9b:a5:c2:9d:ed:be:94:77:bd:e4:97:29:cf:a8:09:d7:29:91:
         c9:e2:c9:9c:a0:0e:fa:6e:24:5c:1c:35:cd:28:fe:a8:f1:97:
         48:88:ee:2f:bd:1a:cd:c0:94:54:e9:f5:ee:a4:89:9f:70:b5:
         4b:2c:36:8c:58:54:a8:ad:af:74:9b:6d:af:7e:24:83:cf:22:
         7e:1d:3a:a6:5b:80:7a:39:52:7c:43:a3:77:9d:2c:a6:90:5c:
         d0:81:9e:72:f7:fa:76:a1:69:6b:dc:2c:0c:59:35:43:30:16:
         49:7c:14:57:a8:90:c8:2d:86:ea:55:e8:a0:9c:bb:a6:cf:45:
         f6:6d:e6:0f:e7:af:93:dd:6b:4f:8e:c1:d4:0f:4a:d1:d0:96:
         da:88:de:c9:ea:50:a6:ca:1e:7a:87:d2:f1:ba:d1:6a:2d:ad:
         0c:81:06:fb:85:ce:b1:47:3c:98:90:a1:77:e3:c4:71:65:01:
         45:2f:53:99:ae:9c:62:04:73:f9:d5:2e:04:10:ab:b1:a9:a6:
         85:93:53:ca:11:62:cc:83:2b:e5:a3:2b:c3:d0:21:d5:73:17:
         c0:01:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:25 2026 by rpki-client