Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File:                     Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier:          YbTFRUtvXtYF+4C1AVqkiL/AEO9WZ54w2uKcPCEuz2w=
Subject key identifier:   8F:2D:85:DC:E3:20:8A:31:EA:8D:C4:EB:1F:1E:C9:D4:D7:26:E0:E8
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer:       /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial:       019D270486AA3139F668FB0CF77A760749C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number:          0781
Signing time:             Wed 25 Mar 2026 22:01:41 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:41 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:41 +0000
Files and hashes:         1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
                          2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: 0wPSDW0pHpKj3jgVI+t61I9ecPdUCmHmZez6K6YsrZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:86:aa:31:39:f6:68:fb:0c:f7:7a:76:07:49:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
        Validity
            Not Before: Mar 25 22:01:41 2026 GMT
            Not After : Mar 26 22:01:41 2026 GMT
        Subject: CN=8f2d85dce3208a31ea8dc4eb1f1ec9d4d726e0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:ba:57:cd:27:7a:73:ec:5d:6c:36:9b:17:
                    66:aa:5e:df:8f:3e:d4:1c:ac:90:5d:ab:61:d6:24:
                    ec:1e:d2:7f:43:ca:59:35:e2:b6:57:ff:10:cc:e3:
                    f0:88:7f:da:ff:33:e5:ed:97:9d:70:d3:93:82:f3:
                    72:ef:ba:c7:be:42:b8:ff:26:01:3d:33:11:9b:23:
                    5f:e9:72:04:2c:6c:02:af:a6:27:87:c3:52:06:b9:
                    d5:5a:72:e2:bc:49:df:30:bc:ad:a0:a0:36:eb:50:
                    51:84:b5:c6:ec:af:37:29:5b:68:7f:40:53:c6:8a:
                    d4:8a:ae:35:8b:b2:cd:9f:1d:af:ed:c6:95:17:06:
                    87:bc:26:26:88:8b:fe:dd:00:e2:8e:23:51:d3:b8:
                    0b:7b:24:ce:14:8f:2a:f2:1c:41:76:3b:de:d0:7b:
                    74:ec:01:1d:1d:58:c5:bd:be:c4:4e:14:37:12:9c:
                    e4:0d:15:39:c5:b5:41:46:8e:32:88:e8:f6:7c:b2:
                    a1:81:19:41:16:8f:28:db:73:aa:0a:99:9b:11:7f:
                    f3:2b:6a:64:46:5e:df:26:ab:99:5a:fe:34:86:97:
                    c6:80:c5:28:cb:f1:fc:6c:d8:7d:5b:14:a8:36:07:
                    70:67:c3:c8:1d:03:e4:8d:cd:5b:d4:66:3e:24:a1:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:85:DC:E3:20:8A:31:EA:8D:C4:EB:1F:1E:C9:D4:D7:26:E0:E8
            X509v3 Authority Key Identifier:
                keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:a5:1f:95:88:64:35:14:bd:3e:a1:e7:36:3a:11:83:2d:
         5b:4a:35:7e:b9:39:c2:4f:ad:1c:fa:c6:2f:c8:b7:e1:80:c5:
         2d:0a:97:00:3e:ca:43:fe:14:5d:4d:99:e1:55:84:d9:76:ec:
         01:39:6e:3d:fd:65:dd:13:e3:69:08:26:a8:63:a0:5b:1a:15:
         e3:dc:b8:28:36:56:76:e1:4d:3d:72:1c:ff:3a:84:16:b6:b3:
         1a:ed:ef:38:5b:ff:21:36:2c:5e:f4:b5:be:40:f3:de:5c:74:
         fc:53:51:75:28:ce:ee:3e:d4:1e:67:16:8e:b9:b8:16:48:37:
         1d:d5:13:a7:df:b6:7f:6c:f3:1b:82:8a:3b:d9:f3:21:96:e4:
         36:57:a5:49:10:21:b8:3f:99:dd:62:ac:15:b4:6c:72:35:e1:
         70:27:6a:7f:94:28:55:ec:b9:03:63:58:8c:76:1f:eb:4c:70:
         d5:d1:ea:68:70:66:c8:96:7a:40:0d:e8:57:89:2f:52:3e:7a:
         b4:9f:09:bb:df:e0:99:c9:e8:8e:eb:51:39:91:14:10:37:d7:
         01:9f:33:0d:70:80:ad:49:f4:b8:1a:01:dc:fd:8e:eb:ea:3e:
         c4:2a:ff:3c:84:2f:dd:90:9b:5e:1e:16:5d:06:b0:77:52:c6:
         04:fe:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client