Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File:                     Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier:          zBVFLj4O7fRfHwsuqmZ3bhtgs734Q4p5/Bpb1l6u7A8=
Subject key identifier:   71:4C:FD:71:EA:F1:CD:69:F8:B8:1A:6F:28:5D:87:55:DA:49:0C:D0
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer:       /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial:       019D27DF73EBE2446E7D969148ABA8813A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number:          0733
Signing time:             Thu 26 Mar 2026 02:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:48 +0000
Files and hashes:         1: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: ii1z11t6AfaTZlBpoPAiTVIDVA3bybwuexDCx/FaXFg=)
                          2: zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa (hash: adtaF+5W4MxrQ+0iffQsTYlJHGFBvciDfETz57Ec0LI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:73:eb:e2:44:6e:7d:96:91:48:ab:a8:81:3a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
        Validity
            Not Before: Mar 26 02:00:48 2026 GMT
            Not After : Mar 27 02:00:48 2026 GMT
        Subject: CN=714cfd71eaf1cd69f8b81a6f285d8755da490cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:8a:a1:c2:73:c2:3d:32:49:fc:96:a8:a2:
                    f2:a7:00:bf:ce:84:a8:0b:36:cb:20:59:9e:c1:3b:
                    90:2f:d3:7e:8f:8d:15:45:07:09:be:75:1b:f6:95:
                    12:e6:e5:f1:53:1c:e6:84:53:3a:c3:25:9b:c0:34:
                    b4:d4:3f:bf:1e:8e:b7:12:c7:0f:97:12:da:70:63:
                    c4:82:32:68:5e:3c:1f:6d:95:70:46:a3:fc:11:85:
                    e3:79:17:d4:f0:d5:3f:bc:da:5c:1e:8a:b6:51:d9:
                    b4:3e:8e:ff:70:d8:93:44:17:06:75:16:fd:33:0a:
                    5a:27:71:93:90:01:5c:61:82:d6:bb:94:7f:45:2b:
                    d6:78:73:6d:d1:d1:1b:fa:ed:5c:3c:d7:68:c9:3d:
                    54:ea:62:a1:07:1d:ba:2d:33:fd:c7:df:e6:c3:01:
                    fe:a9:d3:97:6d:ee:cf:62:b9:4a:b5:ea:97:e8:d4:
                    58:e6:83:d5:9c:35:5f:31:d0:dd:29:8a:a2:07:3c:
                    b3:cf:92:34:61:02:3b:86:19:a1:51:68:69:95:c5:
                    55:c3:e0:d0:d7:e3:da:7f:5c:77:fd:18:a9:1d:4b:
                    b0:77:40:2a:2c:62:12:b2:e5:4a:e4:3f:6d:c3:89:
                    88:04:e7:0c:f8:e1:b6:9d:94:c3:27:29:20:2a:33:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4C:FD:71:EA:F1:CD:69:F8:B8:1A:6F:28:5D:87:55:DA:49:0C:D0
            X509v3 Authority Key Identifier:
                keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:42:72:8b:99:cd:fb:b2:af:b7:72:be:93:dd:1b:9d:d3:ef:
         b5:31:fa:cd:85:60:c8:5c:a9:d1:57:e5:8d:25:99:28:26:b0:
         71:04:a9:b9:31:f8:cd:8b:80:08:49:52:0f:77:5e:18:c5:24:
         cc:83:3f:c1:58:46:c4:a6:90:27:3f:63:13:74:c7:68:3d:1a:
         37:82:15:1c:b1:f4:21:04:e7:9b:40:f6:bf:3a:db:b7:18:e6:
         4b:5c:78:02:c5:ba:2e:42:13:17:a5:7d:c2:22:c3:98:be:ed:
         8b:3a:e3:6a:52:f9:a4:b3:bb:80:7c:3c:67:48:1f:0a:ab:ce:
         aa:ef:1d:90:af:78:fd:b8:3c:31:89:95:9d:b7:19:e8:85:fe:
         97:3e:64:46:c2:1c:6b:9e:fe:72:52:6d:d9:d7:84:3a:69:14:
         ba:67:9b:1b:fd:eb:19:66:52:1a:ab:0a:5b:bf:48:c4:b8:72:
         9b:ff:77:4c:88:7c:84:f1:fd:1a:08:ed:b9:87:05:53:73:a4:
         2b:ac:dc:ef:4d:29:bc:93:b7:7a:1e:a3:b2:1f:b8:1c:90:b2:
         e5:c6:fc:9b:4a:84:fe:f2:a3:59:2f:73:36:f2:aa:69:91:c7:
         a0:aa:55:7f:b4:41:9d:ed:90:8b:cf:62:0b:0a:b0:cd:b9:5c:
         51:dc:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:13 2026 by rpki-client