Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          331OfLZLwqHAAnXBJ2mmmSj9DUSdJmKM6CVhzafbKcE=
Subject key identifier:   8C:7B:8C:36:97:48:8D:03:88:B5:4B:07:1B:B1:61:21:60:08:3C:4F
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019D29CEDCD3B40567FD3BF519ECE36D6BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          1897
Signing time:             Thu 26 Mar 2026 11:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:55 +0000
Files and hashes:         1: S9aocZiWXKfHvZNPaf5WoEf7SnA.roa (hash: /8QyR50KJ5D46vkCWxohVgZ13WY9lfH7A6s3dBVjWko=)
                          2: UOZsE5b35JNXfg_IIsLyehdpPrs.roa (hash: B5Ar4Jz3LgUlDqwY0/hfOFF8E3tyzpK/7QyvL/RqoB4=)
                          3: cOUUKUyq3fFSSy6l5-mjbaxhQhs.roa (hash: KLqb5U6DgNfIS88yDz/06LUw3OWjpinY/pIyqKDYmR4=)
                          4: jEDoIOuzE2brdF7d7iq9hFOFlPY.asa (hash: kX7sndI49J41h5949MxSdq1CeT/ptM/wjBq7+tQD3mw=)
                          5: uRY9g6Gy3YyX_PRylcS32inQ9rs.roa (hash: 3mJ9ZcgbYGOOr6G6keum/3GZ8lqgRL5uINIeRXZgMkI=)
                          6: wTS__dIeTC3lA6AssMEajeAKTdM.roa (hash: idBhRu7TCGlVKLYCjs+6R4IiVK5lmWxVN8xPxI2XQ1M=)
                          7: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: XXuiAIitgf9VUTOYRuq7zKEAYGb1ESKVgShaABAkVig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:dc:d3:b4:05:67:fd:3b:f5:19:ec:e3:6d:6b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Mar 26 11:01:55 2026 GMT
            Not After : Mar 27 11:01:55 2026 GMT
        Subject: CN=8c7b8c3697488d0388b54b071bb1612160083c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:44:8a:59:8f:3a:8b:1a:9c:be:bf:39:aa:
                    0b:62:94:f6:3a:e0:6a:86:74:3a:65:ee:53:f4:b8:
                    d9:12:6a:92:c7:a8:fc:15:e8:9b:1e:3f:08:b0:f3:
                    77:d2:72:18:d5:85:12:1b:3f:6e:cb:3f:7c:d8:18:
                    0a:fa:54:70:c1:eb:ee:c0:ab:31:a4:c0:fd:c1:fa:
                    f3:33:22:41:4e:99:04:9d:c6:7d:54:0f:0c:23:76:
                    f6:03:a4:2c:b7:ad:09:0d:1e:86:1c:18:68:5a:5e:
                    9b:68:be:da:dc:4b:0d:1a:c7:1e:9a:87:a1:9a:1a:
                    76:97:fc:64:18:59:b7:7c:3f:c6:58:b5:b5:a4:96:
                    70:89:8a:c2:9d:8c:94:a9:21:84:f9:39:9e:3b:34:
                    43:0d:7f:18:45:f7:2d:41:02:c8:da:eb:03:a5:c3:
                    ff:da:1d:56:69:09:40:51:6b:81:10:ee:5c:55:ed:
                    46:a6:6f:46:c5:75:68:5e:af:f2:b7:42:4e:43:49:
                    c6:00:11:21:27:4a:21:6d:9a:51:2b:ac:c7:03:0c:
                    fc:18:64:6c:94:70:92:3b:fb:4e:e3:3e:d9:b5:25:
                    08:b0:f0:fe:58:c7:6e:0e:fe:d8:59:81:d9:67:e5:
                    9e:6a:b6:d2:7e:ea:7d:ed:86:07:06:bb:a1:e0:a0:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7B:8C:36:97:48:8D:03:88:B5:4B:07:1B:B1:61:21:60:08:3C:4F
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:16:94:6d:ad:d7:33:fc:9b:3c:55:c6:9e:95:3c:07:f9:
         92:60:9e:13:3b:d0:06:fc:c8:83:2b:ad:4f:d7:7b:dc:a8:36:
         26:ce:dc:a9:d8:db:e4:21:61:3e:49:f2:9b:af:41:60:68:dc:
         a9:23:73:9c:67:af:59:8d:f5:a8:47:f4:a7:27:4d:b0:ff:39:
         8c:f6:99:17:68:71:67:4b:f9:54:9e:87:be:7e:30:e6:20:68:
         f2:9c:0d:b7:32:63:aa:f6:d3:12:13:46:59:a6:4d:7b:4f:1f:
         6a:40:07:e3:47:b1:13:83:bb:87:20:fd:07:84:8b:92:67:db:
         f3:fe:22:70:c3:46:3f:f4:c7:c9:46:ab:a4:d2:9a:f3:81:d4:
         ac:f2:d4:80:55:d7:ce:71:a3:53:01:30:99:ea:fb:9d:d9:cf:
         e4:7e:b2:cc:6f:45:85:7c:2e:fc:e8:13:9e:1e:8b:2f:ec:6b:
         c3:0b:46:31:23:a4:73:8a:a9:60:64:61:c2:3f:14:01:00:f9:
         82:c7:eb:56:46:8c:ff:0a:94:78:66:5b:b7:d9:3f:7c:d1:1b:
         09:88:08:12:0e:98:09:bc:2e:0a:1e:94:6d:fc:9a:5a:f6:0c:
         7d:21:90:15:33:f7:0d:23:0e:19:87:bb:0b:2a:68:8c:bf:ea:
         ce:c1:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:15 2026 by rpki-client