Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File:                     ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier:          Lu/m0hw2dUVu3sRQ97r8LjsxfEGlwLu/f6g3GFpvB4U=
Subject key identifier:   C7:09:92:C0:18:D1:09:45:6A:A0:D4:A5:CC:B3:EB:BA:74:19:F2:D5
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer:       /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial:       019D277248AC5F2208F1B58CB6E7190F9681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number:          13C8
Signing time:             Thu 26 Mar 2026 00:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:34 +0000
Files and hashes:         1: 07rXMz57aCvPfzZgqTtv0tfd--k.roa (hash: Zf7FLTeUlrTimYkYJqQH9p6Rab0OTFZZ2orzaq4XoQw=)
                          2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: DIUrMrrExACX9Aqn0bPNzBNEAdsQoaVfslizXaDVIN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:48:ac:5f:22:08:f1:b5:8c:b6:e7:19:0f:96:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
        Validity
            Not Before: Mar 26 00:01:34 2026 GMT
            Not After : Mar 27 00:01:34 2026 GMT
        Subject: CN=c70992c018d109456aa0d4a5ccb3ebba7419f2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:bd:c3:35:f7:e7:12:cb:e3:b4:49:e9:a7:
                    7b:01:86:c7:3a:b8:10:b8:3a:82:57:ea:7d:0e:df:
                    4b:59:4c:ca:2d:19:d0:71:31:6e:8f:5d:dc:ac:2a:
                    1c:d9:3f:62:f0:00:c6:61:46:2d:2e:01:aa:ba:9f:
                    e1:3a:a3:d3:60:c2:80:ef:be:fb:1b:60:5b:0d:24:
                    7f:01:af:45:a8:d9:5a:4e:c3:51:10:de:a8:82:38:
                    43:e8:81:e0:ea:f4:89:85:74:d2:09:b2:47:0e:88:
                    11:b9:a0:d8:27:b1:41:39:7d:5e:90:ef:51:c3:b0:
                    88:56:a7:49:65:59:10:7b:1c:52:3c:06:b4:67:42:
                    d1:97:d4:4f:c6:d4:b7:78:ea:6f:e7:fa:8e:e5:33:
                    76:ce:56:3d:d1:44:24:31:6f:96:5f:3b:7f:c4:a0:
                    b5:9c:2a:48:6e:d9:d7:56:5a:7e:a3:8e:ad:87:d2:
                    14:2c:70:91:82:8a:7f:2b:bd:6e:8b:2c:53:e7:f4:
                    cc:b7:6e:60:d0:cd:ae:45:bd:ce:07:a1:0a:2e:21:
                    56:08:5a:5f:d3:bd:aa:5d:63:6c:9a:32:13:d7:34:
                    71:8e:ac:5b:f7:6a:bc:cd:71:ec:c1:57:c1:4c:32:
                    6a:c8:c3:3e:c2:fe:bc:68:af:8c:fd:b5:e4:7e:f2:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:09:92:C0:18:D1:09:45:6A:A0:D4:A5:CC:B3:EB:BA:74:19:F2:D5
            X509v3 Authority Key Identifier:
                keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:36:65:e2:1f:6b:b2:e3:b7:fd:f8:4e:35:77:4b:c6:0f:33:
         f2:58:04:7a:2a:12:5c:d1:bc:a4:41:20:89:33:2e:15:54:d8:
         fa:e8:e1:e2:ea:3b:73:54:ca:9a:bb:0b:14:ef:83:82:b0:dc:
         6a:96:7d:e9:07:55:cc:73:97:35:d5:f5:c4:fe:d0:13:5a:8d:
         b5:fc:fb:28:c2:46:df:e2:e7:8c:f7:d3:d8:e5:d6:69:c1:1d:
         a8:cc:8f:c2:e3:c4:7c:41:24:d1:75:a0:ee:df:da:8e:aa:a7:
         a4:a0:36:72:34:07:45:52:29:5f:ad:86:70:93:98:2c:14:1f:
         c9:3a:30:30:a8:c6:94:3c:03:9c:be:34:af:d6:3a:4c:f3:2f:
         df:eb:cf:be:67:1b:92:60:5d:5c:09:60:1a:97:bf:07:ad:99:
         c3:96:7f:15:b2:5c:39:41:d4:eb:50:9a:83:0d:e4:dd:2f:47:
         74:4b:e0:c2:14:ca:9e:76:cc:c0:06:eb:a1:21:81:a4:83:c1:
         79:87:c8:78:4f:3d:5e:ef:7d:13:ff:d8:c1:e6:c3:72:75:dd:
         59:02:d5:21:a1:78:8e:69:e6:11:a1:37:3d:db:0b:a5:e5:d4:
         ba:43:1b:ff:e7:51:a9:21:45:f5:d2:60:e9:c4:42:a4:b6:ed:
         c0:1a:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:59 2026 by rpki-client