Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File:                     Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier:          7Lo7Yl+PM0Ysogn55i3h1o94i3ir/ff651DayvV/Dt8=
Subject key identifier:   3A:65:51:20:E9:39:10:0D:10:0D:FB:28:C5:B8:EB:39:5B:FF:3C:C2
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer:       /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial:       019D39AF6138BB0366A58FE96704E796C854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 13:01:27 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:27 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:27 +0000
Files and hashes:         1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: ZW1sVndFDruz4EVOrp2sit1jcmEL5sPa/f4BoKCdwxM=)
                          2: sWEyZCi5NDwyUie3aWYd5IPmfuw.roa (hash: TSCcBZmyzZxP3eOaeaIBX8e9nFHBHGiKk40P3OCJfbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:61:38:bb:03:66:a5:8f:e9:67:04:e7:96:c8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
        Validity
            Not Before: Mar 29 13:01:27 2026 GMT
            Not After : Mar 30 13:01:27 2026 GMT
        Subject: CN=3a655120e939100d100dfb28c5b8eb395bff3cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:3b:3e:d7:43:67:41:78:fc:f8:c2:69:b8:
                    5d:03:20:61:fc:3f:2e:55:8f:45:67:ea:d7:42:24:
                    49:3c:8b:c6:e0:7f:c7:bb:8c:00:4a:27:10:83:11:
                    51:b1:b6:64:05:3c:a9:a7:e3:46:31:f8:b9:0a:f7:
                    f9:e9:51:19:2d:e3:51:2e:2e:1e:72:4d:f2:93:7a:
                    66:cd:e4:6b:b7:24:22:cc:ad:5a:d3:55:a7:e2:3b:
                    30:26:da:37:fc:0e:de:fe:27:1e:17:38:48:28:c2:
                    a9:65:8c:23:47:33:23:8a:c1:a9:38:5b:ee:56:f3:
                    1e:0a:fb:71:d2:fc:c4:1a:33:3b:bc:70:43:c8:49:
                    36:a3:42:cb:7c:8d:6f:3f:f0:77:3b:f4:d3:9e:df:
                    f3:33:9c:4d:3a:e8:e9:10:36:35:ba:45:38:3a:ef:
                    1c:84:c6:f4:15:a1:b0:20:3d:d4:b5:da:e0:4c:bf:
                    16:58:2e:8c:27:d6:b6:9a:80:27:ec:38:f5:4d:8f:
                    c0:23:11:6c:4a:a2:8f:b4:bb:78:ea:28:cc:b9:6f:
                    ce:a1:05:b0:53:c4:af:3c:7f:11:46:fb:56:ec:90:
                    c2:92:30:ab:75:ae:71:a2:af:36:ae:20:13:d2:d3:
                    c0:95:96:11:5c:aa:20:73:26:37:fe:2c:63:b4:f4:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:65:51:20:E9:39:10:0D:10:0D:FB:28:C5:B8:EB:39:5B:FF:3C:C2
            X509v3 Authority Key Identifier:
                keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3a:cb:29:7e:7e:bd:a7:11:8b:61:bf:f6:3f:a2:12:3a:c6:
         7a:17:4b:d3:aa:1c:52:2d:d7:e3:a8:57:a1:c5:04:7c:21:75:
         a6:57:62:c0:49:ba:94:8a:15:62:68:5e:78:e5:7e:dc:9e:97:
         2f:01:e4:4b:5b:25:25:59:9d:35:9b:8b:bb:99:ea:08:62:3d:
         4a:22:fa:97:54:81:95:6f:9b:1c:59:4a:94:11:5b:b5:71:e0:
         51:25:2b:11:10:7b:64:c8:26:bf:01:03:d5:36:ff:71:46:7b:
         5a:8a:1d:ba:ee:c5:89:4d:9c:54:98:f1:59:87:e6:49:f7:a8:
         69:2c:59:25:5f:79:17:a2:d3:11:79:8e:ac:78:1c:86:fb:e7:
         21:42:77:ef:1c:7c:5a:a2:d5:2c:f5:3a:18:90:93:2a:df:6c:
         57:f5:06:41:da:7d:89:81:43:74:11:f6:dd:af:5b:fc:23:97:
         f1:29:50:0d:81:38:76:ab:83:fc:e1:67:ba:ef:bc:8c:27:8a:
         ca:30:54:9b:ed:a5:86:39:3a:39:cf:e5:09:1a:6e:21:c2:12:
         9a:4c:ff:e9:be:7a:b7:e4:9e:31:dc:e3:5b:6e:da:7a:90:2b:
         af:c2:a7:b6:2f:7d:1d:40:0a:b8:dc:55:83:aa:ca:e4:fa:c3:
         da:26:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client