Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File:                     zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier:          V+WgZkJc2kyGausvhlvF/hDScW1OI0W8o3zxNGPlEQI=
Subject key identifier:   D6:74:86:04:DA:81:D1:52:06:FB:01:DA:B5:04:10:CC:01:48:4C:6A
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer:       /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial:       019D38D3923633040F56E7F12632836807A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 09:01:22 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:22 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:22 +0000
Files and hashes:         1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: P5EgOFyEFqcLAv1LChIdJYoSYn9rUpwT07gbEwdNhzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:92:36:33:04:0f:56:e7:f1:26:32:83:68:07:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
        Validity
            Not Before: Mar 29 09:01:22 2026 GMT
            Not After : Mar 30 09:01:22 2026 GMT
        Subject: CN=d6748604da81d15206fb01dab50410cc01484c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:fc:da:15:b3:93:58:a5:49:bf:a7:60:ec:
                    6c:c1:8b:5b:39:0c:aa:95:d0:c7:08:22:02:1e:fc:
                    79:c8:5d:c4:18:14:74:0b:05:a4:7f:7e:4f:a2:35:
                    49:80:aa:31:27:ba:a9:67:4f:25:d7:6c:24:fb:12:
                    1d:77:55:62:a8:10:56:28:45:53:37:4c:6c:a8:40:
                    3a:37:45:71:f9:1a:14:c5:9b:b5:b8:59:04:c1:cf:
                    ae:a6:ec:66:14:b4:b5:25:a1:2b:3c:98:8b:c4:63:
                    b4:15:ee:46:e1:88:bb:d0:8a:47:98:4d:ef:f5:c1:
                    71:6f:f7:4b:c0:97:f7:5e:d3:9c:58:eb:bc:ba:cf:
                    87:d2:de:24:f3:78:2d:99:9a:11:3d:be:1f:32:9b:
                    59:43:52:3d:be:b0:fb:9f:ef:b2:2c:eb:dc:62:b7:
                    f3:52:b4:2d:70:cc:44:bc:c9:8d:6e:63:99:2b:18:
                    8a:bb:1a:cb:af:7a:e3:b9:01:97:a3:f2:88:9e:af:
                    3b:d8:a1:f0:30:9b:2b:53:0c:d8:7b:21:ac:2a:a2:
                    a3:78:c8:e6:f0:8f:03:f3:eb:56:bf:8a:99:10:cd:
                    9a:31:f2:6b:34:92:0f:08:b7:73:97:b1:ef:6a:53:
                    02:68:35:cb:5b:83:17:79:99:bf:58:78:cb:aa:57:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:74:86:04:DA:81:D1:52:06:FB:01:DA:B5:04:10:CC:01:48:4C:6A
            X509v3 Authority Key Identifier:
                keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:8f:15:ed:d4:15:60:95:c4:11:51:fb:85:03:f5:7a:14:
         5d:b8:85:1c:ef:3d:dd:0d:85:24:8d:a3:3e:6c:8a:94:86:c4:
         3b:4c:cb:b0:b3:46:98:f9:fb:bd:3f:a5:72:52:c2:9d:33:54:
         02:ae:df:72:ae:ce:cc:65:dc:1c:63:20:71:7e:e7:40:40:26:
         44:e3:b8:cb:97:04:4e:f7:88:dc:5f:2a:79:cb:c1:fc:70:ff:
         5e:64:a4:75:b5:70:81:24:b1:cf:f5:ef:0c:0c:7f:7e:f0:b5:
         2b:b6:b9:61:d8:73:3f:8c:b1:56:68:0f:bd:2f:bb:5b:2b:cc:
         39:b7:5e:57:88:d6:89:d6:5d:bd:1a:52:54:e4:ce:52:21:db:
         a7:4e:b9:cb:8c:01:79:ee:75:52:1d:5e:b6:bf:b9:f4:29:7d:
         64:ec:4c:4f:4e:9a:36:d8:0e:c5:a5:e6:35:a6:dd:da:c8:6c:
         a3:b8:e7:87:57:00:7e:47:46:da:5e:ab:f9:32:09:d7:d0:c5:
         d4:2f:74:a5:29:0b:ce:87:2f:89:7b:de:bc:dc:4a:e2:af:ad:
         4b:e9:7b:de:c4:80:41:57:18:a3:c6:25:71:63:f1:af:83:ad:
         5e:e5:88:c3:45:d6:aa:2b:67:b3:08:6e:93:c1:4b:c1:29:2f:
         93:7d:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:08 2026 by rpki-client