Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          bYs9SSTsasTgOpso5OiSJ1mCAiedwYiPof+jJkkOATA=
Subject key identifier:   14:69:13:13:6A:E6:5C:64:3B:2E:83:8B:C2:4F:19:F1:24:18:C0:20
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       019D29291F9915E53496A8644AB3BD37273F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          1896
Signing time:             Thu 26 Mar 2026 08:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:53 +0000
Files and hashes:         1: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (hash: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M=)
                          2: PpOYs6t43PH4GR9qIThOE1vaAks.roa (hash: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY=)
                          3: YwlkzOh40N4SzqCHKWcC97MEiGo.roa (hash: 1LCHJNlMLpepR4sv2pj3j5D9S9GvMti3zGg5V/TMwP8=)
                          4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: 1AKlP6Zqj6sLzEEO3fKX2YBt6rH9w9xI52T54Hc4j24=)
                          5: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (hash: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo=)
                          6: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (hash: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU=)
                          7: ioECjT17G0_6OLgmor7_dptRVdE.roa (hash: 4GHJcy1NEQdNT4tM6/0vR+b78HpLI+Kdh82ajfi8C4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:1f:99:15:e5:34:96:a8:64:4a:b3:bd:37:27:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Mar 26 08:00:53 2026 GMT
            Not After : Mar 27 08:00:53 2026 GMT
        Subject: CN=146913136ae65c643b2e838bc24f19f12418c020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:ec:2f:b8:f6:d9:65:c4:7b:a0:0d:eb:e6:
                    5b:8e:30:ba:94:f3:f6:ff:49:94:b2:21:80:b3:30:
                    3e:14:bc:97:db:86:65:dc:da:a7:1d:d0:28:d3:a6:
                    02:5a:b0:76:6c:d8:cd:86:ec:a6:18:58:8d:9b:6f:
                    3b:b4:ae:d5:a4:a3:07:97:12:b7:71:a0:13:56:da:
                    74:05:a3:78:00:9a:6a:13:46:4c:65:84:c0:fd:dd:
                    16:da:07:9e:da:c7:1e:df:fe:cc:17:0f:96:bc:d9:
                    ae:74:96:10:86:a3:39:f0:b9:b3:12:25:46:0e:93:
                    2f:87:17:a9:06:be:b3:01:c5:5c:41:63:ca:90:13:
                    86:22:e5:e1:be:b6:c0:99:55:4f:20:12:b7:3e:2d:
                    f9:46:3f:33:c5:d2:1f:d1:ca:77:05:d4:1c:51:88:
                    0d:e6:38:48:5c:e0:c0:43:d9:5d:07:2b:9e:93:16:
                    e9:e2:67:1f:96:28:64:43:2f:e1:91:0d:b9:2a:c0:
                    09:9a:1d:23:44:59:ae:69:51:ac:e3:f7:33:35:7d:
                    9c:b5:c0:63:81:bb:b6:61:bb:4a:eb:88:9f:c0:72:
                    15:66:d0:9f:87:f6:4b:50:c2:7e:5a:af:5d:c6:cf:
                    f1:9c:1f:8a:6e:9a:6c:fa:e2:b4:11:17:4f:8f:16:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:69:13:13:6A:E6:5C:64:3B:2E:83:8B:C2:4F:19:F1:24:18:C0:20
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:43:cf:1b:63:f8:ef:4e:cb:5e:d2:f1:c9:22:c7:19:87:
         74:15:a9:ef:69:da:85:ef:e2:31:c6:8d:d7:81:75:f7:80:34:
         f2:1c:a6:2e:f8:e6:79:38:ce:43:f5:08:14:b7:1f:96:86:31:
         5a:bb:80:7b:cd:a6:dc:41:1e:4e:53:36:8a:b5:03:92:ae:56:
         c0:ce:d9:c4:bd:ef:65:d9:68:69:a9:63:75:c1:80:da:6d:a8:
         87:01:6b:34:75:8d:7a:64:e9:70:ef:1e:21:60:d6:af:b2:4b:
         c2:48:f6:3a:8e:82:9f:e1:89:7c:c1:a6:a2:b9:8d:e8:9e:a8:
         aa:d0:7f:d1:82:8b:be:55:1e:3c:f2:64:62:df:d9:93:f4:bd:
         a3:2d:26:8b:34:81:c6:eb:39:75:d8:df:28:0b:b2:cd:b5:b8:
         6a:d1:b3:0c:51:f0:46:0e:9f:72:62:00:11:70:ee:d1:ec:4f:
         39:bb:90:90:05:70:15:22:74:c3:a9:2f:2d:1b:28:a0:50:53:
         f4:b3:2c:9b:f4:00:31:d2:b1:01:b1:aa:77:4b:1b:ee:83:d0:
         3c:4c:23:56:45:61:fe:ca:88:01:07:5c:3e:3f:c6:f9:de:f7:
         2e:e0:a5:95:ef:e5:8b:c4:b4:b1:88:8e:03:f4:1a:e3:93:da:
         00:b3:f2:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKR+ZFeU0lqhkSrO9Nyc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm
MGIwNWMwHhcNMjYwMzI2MDgwMDUzWhcNMjYwMzI3MDgwMDUzWjAzMTEwLwYDVQQD
EygxNDY5MTMxMzZhZTY1YzY0M2IyZTgzOGJjMjRmMTlmMTI0MThjMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyunsL7j22WXEe6AN6+ZbjjC6lPP2
/0mUsiGAszA+FLyX24Zl3NqnHdAo06YCWrB2bNjNhuymGFiNm287tK7VpKMHlxK3
caATVtp0BaN4AJpqE0ZMZYTA/d0W2gee2sce3/7MFw+WvNmudJYQhqM58LmzEiVG
DpMvhxepBr6zAcVcQWPKkBOGIuXhvrbAmVVPIBK3Pi35Rj8zxdIf0cp3BdQcUYgN
5jhIXODAQ9ldByuekxbp4mcflihkQy/hkQ25KsAJmh0jRFmuaVGs4/czNX2ctcBj
gbu2YbtK64ifwHIVZtCfh/ZLUMJ+Wq9dxs/xnB+Kbpps+uK0ERdPjxZ7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRpExNq5lxkOy6Di8JPGfEkGMAgMB8GA1UdIwQY
MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhpDzxtj
+O9Oy17S8ckixxmHdBWp72nahe/iMcaN14F194A08hymLvjmeTjOQ/UIFLcfloYx
WruAe82m3EEeTlM2irUDkq5WwM7ZxL3vZdloaaljdcGA2m2ohwFrNHWNemTpcO8e
IWDWr7JLwkj2Oo6Cn+GJfMGmormN6J6oqtB/0YKLvlUePPJkYt/Zk/S9oy0mizSB
xus5ddjfKAuyzbW4atGzDFHwRg6fcmIAEXDu0exPObuQkAVwFSJ0w6kvLRsooFBT
9LMsm/QAMdKxAbGqd0sb7oPQPEwjVkVh/sqIAQdcPj/G+d73LuClle/li8S0sYiO
A/Qa45PaALPytA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:38 2026 by rpki-client