Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File:                     dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier:          x5XkgVvA/4Zc1SOH5kvn3k5RHXNGXhBu8Juncyrpdaw=
Subject key identifier:   EA:F5:2F:9A:6C:D1:8F:77:C4:83:4B:76:99:93:9D:D3:07:69:2F:EB
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer:       /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial:       019D39AF94913695F2C28A4BEEEE00D55B18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number:          155F
Signing time:             Sun 29 Mar 2026 13:01:41 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:41 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:41 +0000
Files and hashes:         1: UqOGG4c7n0ejuJEiFx7KGDz_Wqs.roa (hash: q8p+2Wkdt6lzjJzM6L+Kae+pIXekdc1IH56/fHFs0fA=)
                          2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: LTIsl0JK0+BHmgmnPd4ipjEs8HTQ8QnU/6uj5nZrT7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:94:91:36:95:f2:c2:8a:4b:ee:ee:00:d5:5b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
        Validity
            Not Before: Mar 29 13:01:41 2026 GMT
            Not After : Mar 30 13:01:41 2026 GMT
        Subject: CN=eaf52f9a6cd18f77c4834b7699939dd307692feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:a4:a2:99:b5:42:b3:d0:13:62:b2:aa:89:
                    10:d6:b4:65:c8:75:47:4d:35:d3:4e:5e:9c:02:f9:
                    20:c9:91:6a:d0:c6:bc:44:48:00:87:a7:41:f9:59:
                    fa:18:4d:f2:d0:66:ec:5b:91:31:ba:60:23:f9:9c:
                    f7:95:ef:5e:87:5a:fa:61:50:a0:ac:48:93:1f:60:
                    81:cd:1d:e4:82:35:cb:db:d4:d5:93:64:4e:a0:86:
                    ab:3e:59:48:fe:d1:9e:b0:5c:01:69:74:45:f6:e4:
                    95:59:5b:3a:b9:40:fe:e0:29:ea:93:d9:c0:99:c7:
                    10:7e:04:98:1f:a0:e1:a0:b8:24:98:da:da:26:bf:
                    cb:3c:5e:87:26:63:63:05:ce:72:68:9f:92:82:4e:
                    86:f1:77:14:d2:c3:cb:2b:12:a5:d1:58:06:6a:1f:
                    5c:8e:2d:ce:cd:92:15:f0:89:b7:1b:ba:26:39:8b:
                    3f:ef:ef:44:48:0d:12:78:ca:17:20:9d:9b:1e:51:
                    95:1f:45:fa:13:88:61:b8:2c:b1:3b:33:39:23:ca:
                    13:52:bb:c8:bc:09:39:f3:ad:00:e7:9e:4b:36:02:
                    e4:0a:8d:c1:91:1c:0d:3b:07:1d:7d:3f:73:29:43:
                    22:db:a3:67:da:55:b8:5a:a5:45:8d:38:13:30:5d:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F5:2F:9A:6C:D1:8F:77:C4:83:4B:76:99:93:9D:D3:07:69:2F:EB
            X509v3 Authority Key Identifier:
                keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:9f:0e:45:7c:f4:2f:46:78:c3:37:97:86:07:ee:ca:c1:
         13:e3:2f:44:74:99:3c:6b:60:25:93:0b:32:0b:d0:e2:c2:f3:
         27:0c:81:79:04:2f:bd:df:65:e5:9a:59:fa:d1:d5:07:aa:1a:
         f2:28:a6:8b:8d:22:ad:2a:46:71:3c:1a:b1:c8:b1:c9:1a:37:
         44:c7:62:d6:73:86:3c:a7:4a:0b:5c:14:94:59:63:22:45:95:
         ca:0a:43:95:72:0f:a4:59:63:b9:8d:46:59:02:f8:92:03:c7:
         24:f8:51:57:ca:49:62:0f:7e:c8:b8:3c:b1:e5:8e:c3:59:91:
         e6:7f:64:72:38:09:32:cd:ad:46:54:15:a3:e3:90:32:be:50:
         6f:a5:22:f0:ca:e6:04:96:08:2d:bd:64:e2:26:0f:d5:7d:fe:
         5a:bf:fb:48:df:71:80:4b:fb:b8:46:cb:57:87:ab:47:71:b6:
         72:e2:7e:33:28:63:98:d1:5e:14:19:3b:a6:7c:f6:43:f0:2f:
         1f:ca:48:bf:d5:68:40:79:10:4f:bc:48:4a:8a:a0:bd:9b:63:
         47:d4:e0:c9:0e:3c:e9:4a:23:6e:11:b9:ba:c4:d0:ff:31:8b:
         03:3d:ca:77:d3:3e:b6:2d:f7:cd:e6:5b:20:44:6b:19:3f:f4:
         80:ea:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:47 2026 by rpki-client