Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          4osEDK0ke+IyT086AHJTLrUMkc72xKirnT+AQjgt2/4=
Subject key identifier:   CE:9C:B7:A4:C5:04:BF:23:7C:70:6D:A8:23:79:31:3E:0A:8F:1B:8A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       019D2703DEEC909BD1A4830B123815385C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0B27
Signing time:             Wed 25 Mar 2026 22:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:58 +0000
Files and hashes:         1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
                          2: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=)
                          3: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          4: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          5: 9K1LCa_BZxwmFKziFmKg5k9ZSPw.roa (hash: zcfTdUdCdWCGykQ8Ef/AtFMrZXL7riKrfHYVxi7rWFQ=)
                          6: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          7: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
                          8: IIgGJVuuP6WOZKQ44Wy-VvIKe3I.roa (hash: kEGKuXQnbNboSCJS0YbLwgpXdleLSO+hLRxNQaI+AOg=)
                          9: JqdskFuFmziaPGBY-7Tw9Pq4w38.roa (hash: aCu+I3qlWKZ9XlpWlRNcOlsLioSGa9tu6gGY+pIX418=)
                          10: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          11: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          12: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          13: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          14: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: 1yiX/MJTOcWTuRvl/bmOAK8JNnwf/8oI79DyWnChcQM=)
                          15: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (hash: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8=)
                          16: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          17: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
                          18: gWUoPtKu4Ygknkyrez4F7XlU7JU.roa (hash: 9nDIkHs65Wge6gpKCtTP63Y9gCXb0tsZlxUtihUCR5E=)
                          19: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          20: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          21: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=)
                          22: mDOzYNcFo12S4COeeT4HmtB_G4E.roa (hash: mbhc43oAGkMwpxAUIhbkMpXor+QTKtS8wbVddrKcs98=)
                          23: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          24: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
                          25: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          26: xfA0_z8nF9jogJTt8JvDJWiwKd0.roa (hash: 4UoytCa8mc6+13s7j6+TJjXwUJP2qWBxDCO/3czDtbE=)
                          27: z13Fw4Baa0Cf6jqQgcmcdGaY9lY.roa (hash: N61RklKzFSZ71nW5Q0awQlylDE3NsNVur5bGxsKSODA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:de:ec:90:9b:d1:a4:83:0b:12:38:15:38:5c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Mar 25 22:00:58 2026 GMT
            Not After : Mar 26 22:00:58 2026 GMT
        Subject: CN=ce9cb7a4c504bf237c706da82379313e0a8f1b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:31:c9:1b:55:9e:e4:61:7f:08:ca:1b:36:
                    bc:08:27:00:8b:43:b4:ff:15:9e:71:b2:8c:11:70:
                    b3:2a:42:76:00:78:b5:40:1f:4c:7c:4e:1c:e0:e4:
                    a8:b4:cf:03:42:89:1f:69:13:bb:6a:75:6d:37:62:
                    1d:f8:be:b2:40:1b:e0:ef:bb:81:87:a7:c6:26:91:
                    b6:48:01:9a:1c:d1:1c:37:0a:e3:d3:72:20:43:8f:
                    3e:d7:ff:2a:0b:d7:bd:88:cd:99:57:ae:0f:42:7b:
                    a1:9e:53:8d:04:61:e9:2c:fc:12:de:39:c8:e6:08:
                    6c:1f:96:4c:15:5a:73:c6:09:80:9f:81:a0:c8:19:
                    13:4e:4c:bc:bd:dc:f0:12:6f:1b:33:cd:01:7d:82:
                    9d:b0:b7:36:54:df:b0:89:31:ec:d8:9c:7d:b1:09:
                    65:51:90:4e:18:b0:82:16:e2:52:2b:29:70:aa:c4:
                    d1:1d:34:76:99:1a:9c:8a:43:24:46:42:04:26:6e:
                    fe:98:55:20:e0:76:5e:48:a3:fb:e1:45:c8:4b:1a:
                    ca:72:bd:34:33:83:ee:8b:14:fd:8b:9d:6d:1f:a1:
                    52:1b:b3:dc:64:11:c5:e8:22:03:db:79:22:c7:7b:
                    21:ed:12:ca:11:f9:31:91:d4:c7:88:93:4c:a1:be:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9C:B7:A4:C5:04:BF:23:7C:70:6D:A8:23:79:31:3E:0A:8F:1B:8A
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:9c:ba:c2:c2:0a:f5:01:f0:37:c7:fb:ff:74:11:4e:a7:
         af:cf:72:33:44:05:d0:4f:3e:a3:df:6c:56:23:93:56:9e:16:
         d6:f3:33:64:6f:14:0f:79:ec:64:6c:7b:69:9b:ce:6b:56:1f:
         3d:51:3f:fe:ea:24:e0:49:33:dc:b2:3c:b3:7d:72:93:04:1e:
         ab:70:aa:e0:36:50:32:8f:a8:cf:97:6a:85:87:e6:36:a9:53:
         cf:70:e6:c6:d4:2f:3f:02:f5:cc:46:32:96:38:7b:9e:34:ba:
         9d:97:dc:20:c3:f4:48:00:0e:69:22:48:25:e9:e5:75:22:8c:
         c3:ff:ac:cd:63:83:fb:fe:55:9b:a3:54:09:5d:82:11:26:cc:
         c9:90:fb:c4:15:1b:cf:e8:6b:ff:ac:60:17:87:52:01:db:47:
         e9:e7:38:23:78:27:52:73:08:52:0a:00:a1:6b:bc:32:b9:2c:
         c9:7f:83:7a:9b:bb:5a:0e:1b:f6:81:c5:f9:2a:fe:21:36:ea:
         77:d5:56:f7:18:46:8f:d1:34:23:82:ca:1f:15:18:da:8a:73:
         c0:62:8f:d9:47:e0:89:24:4b:eb:a4:ef:36:10:d6:55:41:66:
         9d:9d:b2:4e:6a:2d:6a:aa:aa:36:94:b9:8b:5f:35:e9:95:c1:
         30:a8:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:11 2026 by rpki-client