Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          QuH72pQn3VE7wFKB5oBekL8RYdgkgUbEE9ou5xuSwVE=
Subject key identifier:   6A:19:C2:E5:47:20:DD:1A:20:E9:DD:8D:BB:9D:81:54:07:DC:BA:77
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019D137D35D809CCB5CBAFE7A3FF9CE538ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          08AA
Signing time:             Sun 22 Mar 2026 03:01:05 +0000
Manifest this update:     Sun 22 Mar 2026 03:01:05 +0000
Manifest next update:     Mon 23 Mar 2026 03:01:05 +0000
Files and hashes:         1: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          2: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          3: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: mcd7V0s01JvX4AJblgbw7AQ010dnCwkBHKXG02ydsNA=)
                          4: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
                          5: yMfq4tl4tsm_eKrlq_IfqdTQXZM.roa (hash: nDCkpydlNUMF8c0eeQ/zyRieQdsyPAVg6iJ/0hF8kd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:13:7d:35:d8:09:cc:b5:cb:af:e7:a3:ff:9c:e5:38:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Mar 22 03:01:05 2026 GMT
            Not After : Mar 23 03:01:05 2026 GMT
        Subject: CN=6a19c2e54720dd1a20e9dd8dbb9d815407dcba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:7e:3e:46:dc:22:93:98:e5:00:2b:0b:18:
                    09:e5:d2:c7:25:78:b0:a7:78:f9:85:64:ca:17:b8:
                    3b:83:8e:d5:99:39:15:64:0b:67:af:51:a9:b7:76:
                    46:e1:77:7c:c1:54:4e:12:b1:79:4b:58:c0:ff:91:
                    27:90:d7:81:f0:7c:6d:e1:dc:3a:e6:c2:4b:bb:2e:
                    9d:df:de:f5:1c:f6:fc:3d:73:15:1d:6f:b0:9c:f0:
                    34:e9:34:44:45:ab:3b:0e:f2:fd:89:71:d2:2d:47:
                    44:06:6f:5a:80:18:b9:3b:d6:66:43:15:fe:0a:29:
                    c6:19:aa:f8:7f:3c:5e:09:d5:c0:29:30:83:f1:c5:
                    83:d8:92:64:4e:77:1d:ca:95:34:b5:16:7e:c5:af:
                    61:46:0c:fa:dd:b9:33:b6:c4:97:86:66:f9:c1:89:
                    e4:fb:75:ff:c7:63:77:42:32:59:71:7b:14:bc:c6:
                    9a:fc:ba:2f:e2:80:11:7a:5f:06:66:54:2c:6b:7c:
                    a6:2f:a8:a9:76:8c:b4:78:19:db:65:32:1c:1e:41:
                    14:6a:85:61:69:af:38:8e:b6:a9:d1:b6:43:b9:d0:
                    c1:be:f6:e0:36:c1:a0:5a:b5:e7:40:67:00:e1:07:
                    36:0b:1f:fd:38:95:6a:6f:f1:0e:d6:d2:0e:ee:c0:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:C2:E5:47:20:DD:1A:20:E9:DD:8D:BB:9D:81:54:07:DC:BA:77
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:17:69:6f:5e:a4:37:93:a8:7a:eb:4e:df:7d:0b:99:65:60:
         a5:58:e0:2c:fd:94:2f:0e:87:c4:8d:30:52:96:02:98:0a:81:
         74:27:70:04:ad:2d:bd:60:1f:bc:30:71:a8:13:f6:d9:aa:5c:
         3c:8a:09:6a:8b:76:4b:30:3b:74:50:c8:f8:3b:2e:92:60:6a:
         73:10:b0:cd:7f:56:57:fd:d0:5d:81:e2:49:d0:b6:b4:8a:9b:
         2d:63:98:6f:d6:f6:5d:2a:e6:fb:36:82:db:40:f1:4a:c1:98:
         fe:d3:b9:e5:18:9f:1b:90:80:6b:36:e0:36:f2:50:ec:23:18:
         a1:78:9a:5b:78:0c:ac:78:f8:22:18:74:99:13:46:00:06:ef:
         74:d6:f8:0f:25:d8:58:65:6f:b7:0a:09:16:06:dd:00:2e:24:
         73:45:91:bf:78:31:b7:b7:0c:a7:df:8d:ec:c8:6a:4e:0f:84:
         11:e5:1b:43:8d:3f:1d:13:01:16:96:2b:9f:e6:52:1b:20:3d:
         b9:d7:68:e9:76:c8:7f:ef:a7:89:b0:c5:a2:fb:d3:af:23:ac:
         b7:5c:96:20:5d:40:12:56:ba:79:d8:7b:5c:bd:d0:83:63:1e:
         c1:6a:8c:bc:87:dd:17:31:86:ce:ec:ed:ec:99:1a:72:4a:17:
         e7:41:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:33:06 2026 by rpki-client