Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          ZIRGAzp/gfA3UxKZOXG1D7vukJkIqWtg2nrIr1kL2RU=
Subject key identifier:   09:4F:E4:08:FB:3E:AE:BB:C8:89:9D:0B:A0:5E:06:54:BD:AD:F5:A9
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       019CE4B59BC16BD7FC7F73C06FA360A4BC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          186A
Signing time:             Fri 13 Mar 2026 01:00:32 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:32 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:32 +0000
Files and hashes:         1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
                          2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
                          3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
                          4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: IZbwQ1BUSW1TBu3EQdHCzC11UOgSa/hzFbeu5Qk7USY=)
                          5: uqJ-WoJ0LMUzPyz6AyCWPdAMqaA.roa (hash: lX10IX/8pnEVBdXCqvOlS3MwC2z4PooE1DCcSVaJLYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:9b:c1:6b:d7:fc:7f:73:c0:6f:a3:60:a4:bc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Mar 13 01:00:32 2026 GMT
            Not After : Mar 14 01:00:32 2026 GMT
        Subject: CN=094fe408fb3eaebbc8899d0ba05e0654bdadf5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:fa:61:89:be:d0:0c:dc:4c:a5:6f:5d:e1:
                    f4:d6:ef:6f:1a:2b:a2:0c:ad:dd:35:d9:e6:e2:cd:
                    0a:48:d5:b2:c9:d6:7d:33:bb:b6:c0:b1:87:5c:9e:
                    98:55:71:35:5e:37:f0:17:3f:f9:d3:ca:72:77:cd:
                    5c:35:7d:20:40:5b:a4:55:ae:91:91:0e:25:15:8b:
                    f7:63:4f:9d:45:15:78:de:e0:17:53:3d:43:6b:26:
                    ce:3b:08:b0:b3:38:73:a9:8d:d2:31:46:ee:08:ba:
                    4d:b0:8f:70:55:42:f2:63:4b:b0:48:0d:9b:1c:20:
                    4c:31:7d:1d:d3:ab:c4:46:d0:b0:48:77:17:b4:ed:
                    30:23:1d:ca:9b:52:1f:04:54:63:45:18:45:98:0f:
                    64:1e:70:50:d2:24:e7:05:19:63:73:35:c6:b8:f8:
                    ff:75:b7:0b:d5:4e:30:7b:2e:dc:84:c0:1f:20:25:
                    10:37:54:7f:b8:22:d0:90:ed:7b:85:3a:5e:42:90:
                    09:e5:83:75:c6:22:c3:4f:ff:f3:a4:04:d4:2d:f6:
                    78:1a:bf:48:af:44:17:bf:eb:8c:74:bc:70:10:a4:
                    4d:72:f8:03:13:89:6b:96:df:ac:d6:af:79:12:fb:
                    c0:c3:88:98:5d:ab:7f:23:6b:46:e8:90:07:84:4c:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4F:E4:08:FB:3E:AE:BB:C8:89:9D:0B:A0:5E:06:54:BD:AD:F5:A9
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:1e:ee:0a:27:a2:12:36:dd:4f:25:a6:52:1d:56:47:e0:8a:
         26:66:1d:52:7e:39:c9:26:aa:b7:48:7e:58:76:72:74:d4:74:
         06:bb:61:8a:40:ba:40:10:73:11:34:4e:f6:31:50:9b:c6:f4:
         30:d3:08:51:68:79:c0:06:d6:a7:e5:bc:94:37:7f:ef:13:f3:
         cd:22:35:6c:f7:5e:04:82:c9:dc:5b:ea:8b:7f:90:6e:65:d1:
         58:51:27:f8:e1:2f:b3:74:5b:52:55:f8:4d:1f:80:20:1d:bf:
         12:13:56:1a:9b:73:f5:d8:d1:79:59:0c:fd:b4:10:8d:a9:68:
         fa:f9:4c:13:84:ab:5d:aa:ee:c5:e6:85:bb:11:dd:a3:bd:bc:
         83:e0:32:4e:e9:d0:53:ee:68:73:61:d5:15:5a:3e:5b:24:fc:
         b0:ef:98:5c:d7:c7:e4:61:05:a2:4e:68:e6:77:59:06:af:1f:
         f4:d4:e2:d7:d2:0b:1a:82:c8:4b:b3:09:1f:e5:4e:b2:4a:a6:
         13:03:c4:dc:da:20:e5:0f:f3:67:8f:e9:74:b4:74:3d:7b:d4:
         55:e1:25:da:cb:b2:66:da:ab:2c:6c:94:56:a8:40:76:60:1f:
         ac:1d:d3:d9:fd:06:7b:b5:97:ca:dc:14:3c:6a:a8:37:ba:bd:
         a7:ae:d7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:32 2026 by rpki-client