Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
File:                     zeHP7MkrEE_Pqe_saljwwZeQFlI.mft (raw, json)
Hash identifier:          nBhLkAeGjGA8QpXnrvmcSsCfvrYtuU80tOAmeW84uh0=
Subject key identifier:   28:F7:5A:2C:02:92:53:42:73:1D:6F:1E:B5:31:9C:12:AE:97:3D:4D
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Certificate issuer:       /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial:       019D25F1FB8759044EA9B9DED25C663D06F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
Manifest number:          0833
Signing time:             Wed 25 Mar 2026 17:01:48 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:48 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:48 +0000
Files and hashes:         1: 1Pl1iEj3pOl4af_S0pcP4CMrG30.roa (hash: Bfn9XfoIj04iU0Dz8XIWd4MRuYoMEdKPDCStjjkmGQI=)
                          2: ADQlbM8sNMjUliYADvZi1vFYCX8.roa (hash: DFQ5JtyBKyH9OftpjAdW9wf9ak94Zl+o0z+vbeKe7Xw=)
                          3: NyoPRKnIUuvoU34RyJTT9jDQNKQ.roa (hash: vt3QquyuzzS/PaYQOqdD/BXgViAeJkpSXJsCJnK4Cnw=)
                          4: zeHP7MkrEE_Pqe_saljwwZeQFlI.crl (hash: y0cNBjzCEGSMHw6Q34wp2eXENwvznp+P4WoUXTS4TUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:fb:87:59:04:4e:a9:b9:de:d2:5c:66:3d:06:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
        Validity
            Not Before: Mar 25 17:01:48 2026 GMT
            Not After : Mar 26 17:01:48 2026 GMT
        Subject: CN=28f75a2c02925342731d6f1eb5319c12ae973d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:f0:5b:5e:9c:0d:00:03:6d:f8:e8:e4:cd:
                    9a:a3:cd:38:fa:e8:18:87:49:b5:de:f1:9e:29:50:
                    ad:a6:67:02:a6:6c:6d:b0:23:79:76:ff:ca:da:db:
                    3a:c9:97:c9:e4:7b:06:7b:ca:60:09:7a:df:77:bd:
                    58:b4:67:7e:f5:3d:4e:c4:6e:bf:14:af:d0:b8:4b:
                    26:73:a1:4b:1a:57:4b:88:14:2b:48:9e:f7:93:e0:
                    4f:11:db:4e:d7:04:94:05:2e:51:56:0d:6f:62:42:
                    99:a2:7b:29:21:79:fe:64:8e:35:93:d5:47:ac:43:
                    bc:ab:79:5e:5a:31:bc:5f:11:c4:f2:a0:07:b7:17:
                    d7:e7:8d:4b:bc:a4:6c:23:e2:00:e5:14:e7:15:2a:
                    cd:da:8e:7c:7e:c2:90:d4:44:a3:a7:82:b2:07:53:
                    84:dc:68:74:b0:9e:95:65:e0:b0:e3:13:55:36:89:
                    95:4a:25:59:56:ae:af:d4:3a:db:34:dd:9d:7a:b7:
                    88:6c:ec:64:8d:ff:6f:55:9c:2d:63:b4:3b:a4:82:
                    b8:24:22:c1:4c:20:12:1b:a5:20:42:cb:3a:92:a8:
                    ea:ec:4c:8a:cb:bf:0b:a6:fd:ad:6a:65:a1:69:33:
                    a5:48:6c:66:b9:5d:1d:1e:62:17:6d:3a:58:d3:f2:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F7:5A:2C:02:92:53:42:73:1D:6F:1E:B5:31:9C:12:AE:97:3D:4D
            X509v3 Authority Key Identifier:
                keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:af:01:61:4a:26:94:85:e8:00:2a:7f:af:b3:7d:48:66:bb:
         78:17:5a:4a:76:f1:1f:ea:38:27:c4:86:fc:c6:d6:a5:cd:43:
         26:aa:58:c1:0b:16:a2:57:39:64:66:db:f9:e3:44:9a:34:85:
         3d:db:da:96:4b:f9:90:76:1a:3d:a4:f0:82:bc:21:9a:76:15:
         00:1d:72:b9:11:51:c6:bf:f1:d6:7c:82:aa:7f:cb:5b:c8:fb:
         9a:37:57:85:26:40:11:e1:93:b7:d3:60:24:43:3d:2b:45:78:
         5b:09:d0:5e:dd:6d:13:52:f1:c0:db:29:34:ab:a9:2a:96:f0:
         c6:40:66:83:03:57:e3:7e:dd:48:91:d7:69:d7:fe:bb:f1:cf:
         49:7c:48:bb:58:92:3e:7c:34:4d:46:8f:ce:4e:11:9d:15:5a:
         61:d1:b0:03:00:73:7d:db:7b:94:9e:b7:1d:db:4d:7a:9f:32:
         55:1a:76:19:cf:3c:0e:80:c9:b0:97:6b:dc:4e:2b:43:a8:33:
         96:63:17:65:d6:66:2d:ea:26:79:28:e9:81:33:18:20:ff:19:
         f5:53:ba:3f:15:14:99:ce:18:93:51:d3:7a:be:1c:8c:d2:7e:
         34:6b:3c:9a:22:57:43:6d:63:58:48:2c:e5:4a:e7:b2:44:4c:
         8c:16:db:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:14 2026 by rpki-client