Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File:                     ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier:          HHkBb6mV8XOpRytA2fqMX5gOg0WepHDgtV4AzVM6BQI=
Subject key identifier:   E9:A3:2D:EB:FF:42:35:3B:03:9A:34:86:97:F4:15:16:BD:8C:5A:AA
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer:       /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial:       019D37F6F2ABE5E605E8A15B091E4107E676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 05:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:24 +0000
Files and hashes:         1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
                          2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
                          3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: BPcemKGvigeIrjKM8ZJnA7oe45+TyKwnP3YcInQk7Lc=)
                          4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:f2:ab:e5:e6:05:e8:a1:5b:09:1e:41:07:e6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
        Validity
            Not Before: Mar 29 05:00:24 2026 GMT
            Not After : Mar 30 05:00:24 2026 GMT
        Subject: CN=e9a32debff42353b039a348697f41516bd8c5aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:9e:44:77:cf:78:1f:f9:58:1b:ce:36:e2:
                    1a:cf:0e:8a:37:dc:0c:d0:4a:fc:0f:8f:07:11:42:
                    e0:64:14:1f:bb:87:2f:97:cd:c1:5c:a4:41:5c:f5:
                    86:a3:0d:d4:95:7a:b2:26:26:8d:fe:9c:eb:aa:ac:
                    64:87:db:c4:5b:67:72:2d:ab:47:d1:2f:b8:bc:e7:
                    82:9d:1b:ff:b3:92:8e:67:00:e9:cd:88:57:fc:ee:
                    17:59:60:ca:45:c7:8c:a4:36:6b:9c:ae:46:e1:9c:
                    a8:6a:9a:90:9a:0c:ca:11:45:34:de:92:00:5c:1f:
                    29:87:39:f8:02:be:7a:15:5f:ba:35:bc:6e:4e:ef:
                    1b:e2:bf:c9:b6:ba:e2:63:f8:0f:d4:de:3f:29:a6:
                    c8:4a:ed:81:c3:1d:b6:ab:40:99:f1:60:a0:15:aa:
                    1e:d9:fb:d2:ee:ef:f3:2d:a0:21:61:0b:8e:0d:88:
                    8c:d9:f6:64:62:e4:f7:17:1a:91:bd:68:99:8f:e5:
                    ac:fd:70:1b:b9:8f:52:da:c7:45:ec:a3:f2:84:68:
                    53:f1:08:82:5f:aa:55:75:3a:55:6a:74:36:0d:bb:
                    89:70:08:69:a7:f1:9f:ff:50:2f:cd:aa:68:ee:2a:
                    56:b4:91:d1:73:c6:da:95:94:81:4a:e5:fe:bb:12:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A3:2D:EB:FF:42:35:3B:03:9A:34:86:97:F4:15:16:BD:8C:5A:AA
            X509v3 Authority Key Identifier:
                keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:eb:19:63:90:55:cb:16:dc:19:38:f2:71:c6:11:1f:1f:98:
         f9:c8:c5:0e:70:a7:62:e6:fe:3d:6a:b4:b1:a7:be:4c:2c:54:
         51:59:8d:7f:e0:6c:1d:ee:f8:63:15:43:df:2d:78:ce:fa:8d:
         35:82:f7:42:bc:bd:0f:65:89:e1:49:63:60:40:a7:3e:91:02:
         60:77:f9:97:ef:44:f5:32:f5:93:d5:3c:07:98:92:07:a5:50:
         a0:47:74:ae:a4:ff:a9:30:22:d1:65:20:d2:03:e6:55:75:44:
         73:a2:11:a8:76:21:56:f5:fe:db:d0:fd:5a:3d:34:b5:c7:7d:
         bc:c6:ee:0e:21:3b:77:6b:96:a3:f8:c8:c2:56:8e:d4:ae:79:
         21:c9:5d:9e:61:0c:51:7e:ff:c1:eb:1e:af:10:e3:eb:50:39:
         ae:b4:27:9a:7f:01:07:61:9a:6c:f8:44:4c:d1:59:39:71:6e:
         26:7f:a9:d1:9b:e2:7a:e8:68:f9:49:e7:29:be:9f:f0:45:63:
         a4:7a:ff:52:ce:94:66:5d:83:83:ea:b1:8a:45:a7:f9:1c:57:
         ae:9b:71:de:42:af:2c:08:20:74:7a:6d:75:44:50:34:fd:7d:
         e5:bc:f5:7f:fd:4f:f8:12:cb:fb:c2:f9:c6:d3:a1:3f:41:d6:
         73:72:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:08 2026 by rpki-client