Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
File:                     pLZmyw5UlhFut65nFNkFUwm6aaw.mft (raw, json)
Hash identifier:          +FUccZdLU0E7BKazXitHzmzBcHCsiO1La/q33O5DzfU=
Subject key identifier:   F6:83:20:5B:28:77:BE:F8:77:34:53:3B:3A:9F:29:87:B5:03:96:CF
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       019D288467CAD9FE0DB8FF2C4B886C556686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
Manifest number:          17E0
Signing time:             Thu 26 Mar 2026 05:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:58 +0000
Files and hashes:         1: AFANdJ8mUhayIJqr98WG-9evVXE.roa (hash: D7OeO7ES4BUXcZ6jw7cQvDW4rxYwqo477C0popwqhHA=)
                          2: CCw-BrzzCQyM1PX6ZJ_K0v4QKYk.roa (hash: +1sL0pW9FpaJMzFII1ICHXGTjF5hVnkO/nJH0lVLEP8=)
                          3: VjNXjC-0wab16uqPCuhxskDPjCA.roa (hash: NM6EunarFLybHJwbwp3+FCoMQV5bhN/V+aR1Sck6SRs=)
                          4: WeTbf8dcRo8G21LDVVtXbo03soA.roa (hash: QqajL4kQWlIWW2N7/aHVs0UE2naN1GLmSLf6lsBMEjs=)
                          5: pLZmyw5UlhFut65nFNkFUwm6aaw.crl (hash: YDvAL/HeRnQayUlOiXRZj3vESy8ry7Hy412Hhy+apLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:67:ca:d9:fe:0d:b8:ff:2c:4b:88:6c:55:66:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Mar 26 05:00:58 2026 GMT
            Not After : Mar 27 05:00:58 2026 GMT
        Subject: CN=f683205b2877bef87734533b3a9f2987b50396cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:13:cb:2c:11:6d:44:6f:a9:40:bf:a2:49:
                    9c:de:01:5a:60:55:21:67:d9:99:19:1f:9a:59:f0:
                    94:32:62:b8:4f:c9:af:04:94:76:9f:fe:77:60:70:
                    7b:72:4a:77:f5:9b:f5:35:d6:32:d9:9f:b6:b8:f0:
                    c1:53:f7:fc:e7:3f:44:a2:c9:ff:2a:dc:e1:8e:e1:
                    40:79:26:c6:2c:c3:b4:dc:82:04:76:8b:eb:54:ad:
                    cd:6b:f3:05:85:36:2a:99:fa:2f:9f:1b:50:37:c0:
                    fc:33:7c:ab:b3:8a:fd:e8:1c:4f:f3:c9:7c:9e:79:
                    3f:bb:3e:c4:ba:0f:af:e0:5a:18:b8:34:12:4e:31:
                    f6:f1:c8:ff:94:0f:f1:c8:75:2e:94:df:b8:b5:a8:
                    71:6a:21:e7:07:2e:cf:e5:2a:17:45:06:63:b7:29:
                    5a:8f:b9:f1:4c:cf:8f:82:1a:03:d4:66:4e:01:04:
                    3a:d2:04:2a:e9:40:fa:62:24:3f:7e:34:99:59:76:
                    5b:25:7d:14:7a:86:28:f7:38:c5:26:bd:8c:6e:f9:
                    f1:6f:ff:29:b3:1d:19:3d:78:be:10:85:db:c3:fe:
                    ea:58:e8:8a:df:da:0c:06:5c:a6:31:62:d2:2b:61:
                    1a:8f:0f:7e:ac:3b:f6:33:1b:e3:b5:35:35:67:d5:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:20:5B:28:77:BE:F8:77:34:53:3B:3A:9F:29:87:B5:03:96:CF
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:58:ce:92:21:0f:62:95:f1:08:20:e1:cc:8b:b8:98:64:
         78:5a:d3:b1:3a:74:e3:18:17:28:dc:47:b7:31:6e:5b:c0:2e:
         77:08:f8:ec:66:0c:49:fd:78:8a:e4:91:c9:7f:24:c3:d4:77:
         46:10:4d:e1:c7:af:14:77:72:0f:1f:de:d7:a8:87:2d:7e:ec:
         aa:cb:7b:b4:30:88:9d:f3:34:9c:03:29:71:96:1c:ef:a5:75:
         70:d9:40:2d:df:aa:ef:0d:9d:1b:2b:a2:51:8e:f6:77:2c:37:
         84:2d:d6:9d:e0:eb:fa:72:b2:d5:13:a7:62:99:eb:1a:f8:93:
         37:b2:ad:08:87:2e:b3:25:d2:47:25:1f:45:49:fc:36:cb:c1:
         5e:25:26:e6:99:5b:6b:c9:17:99:67:3f:ee:e8:88:11:dc:58:
         7b:d1:13:77:2a:ac:38:db:37:5c:39:56:29:8a:3a:6a:e5:dc:
         9c:3d:18:be:e0:89:48:7e:31:09:1d:42:c0:95:47:6f:89:3d:
         64:e7:41:d2:80:ea:86:d3:64:8f:62:3b:0d:98:e9:df:0f:60:
         95:75:7d:e6:02:80:09:f0:76:34:59:b8:62:8c:fc:8f:eb:1f:
         71:b9:cb:82:53:dd:55:66:a6:01:a4:57:eb:21:f2:6f:9f:89:
         98:e9:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:18 2026 by rpki-client