Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File:                     ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier:          0b/Qk0QenuKi3VqCGFB8TQsjwrEj3MasiVGA5WaDOmI=
Subject key identifier:   04:F6:95:AB:06:21:61:A7:5C:D4:5C:AF:75:74:63:02:0C:34:05:79
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer:       /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial:       019CE4B6279F51F5EF2F15184A0D90FF0152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number:          1866
Signing time:             Fri 13 Mar 2026 01:01:08 +0000
Manifest this update:     Fri 13 Mar 2026 01:01:08 +0000
Manifest next update:     Sat 14 Mar 2026 01:01:08 +0000
Files and hashes:         1: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
                          2: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
                          3: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: wfyT/9GW3kiu31+y0THuEnW9KIS7KXrKcpf3XvIt+NQ=)
                          4: h6wK8goVzqXqo6disZWfZSM1h-0.roa (hash: //0LSaRijgEKQyrnrrd5pf5seu/x01T0Rwf4/noBXTQ=)
                          5: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:27:9f:51:f5:ef:2f:15:18:4a:0d:90:ff:01:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
        Validity
            Not Before: Mar 13 01:01:08 2026 GMT
            Not After : Mar 14 01:01:08 2026 GMT
        Subject: CN=04f695ab062161a75cd45caf757463020c340579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:b3:89:fb:5e:bd:25:ca:29:bb:dd:9f:9e:
                    51:f2:62:4d:e5:b5:e1:d7:15:eb:e0:b6:e4:74:0c:
                    1b:fa:e7:67:f6:e4:11:41:c5:96:23:e1:6d:75:85:
                    2a:ed:ae:b3:e6:cb:b9:99:71:6f:c5:48:c9:b0:53:
                    2a:22:03:45:2f:5d:55:65:aa:ef:08:a5:cf:ef:69:
                    8a:e5:2b:4c:be:d0:d4:1e:a9:7f:42:b3:ce:22:49:
                    c0:1a:7a:bb:2c:a2:35:f5:5c:cc:a7:ca:97:6e:cd:
                    7e:5a:11:43:71:59:84:a3:ef:f2:07:ae:75:55:ee:
                    44:5d:93:62:0e:32:99:60:38:c9:8e:80:05:4f:33:
                    e6:e4:e2:b4:19:5b:62:73:d5:1e:88:ba:d7:44:fc:
                    95:e0:55:cb:32:30:21:b3:7e:74:a7:6d:7c:18:9b:
                    26:8d:de:0e:a3:50:7e:5d:f7:fd:47:d2:bb:b1:e6:
                    8e:54:2b:1d:51:d1:ff:fa:86:4c:2f:25:ba:7a:40:
                    24:48:49:5d:ef:52:ae:d9:6a:1f:42:e3:01:f6:3a:
                    22:4a:81:3b:96:b1:92:7b:89:81:c3:2a:41:79:b5:
                    1a:c0:f8:62:fd:a7:86:ac:97:14:c7:1d:67:35:9e:
                    61:ae:d2:3f:f7:3a:23:a2:0b:f4:7e:2a:f6:a6:50:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F6:95:AB:06:21:61:A7:5C:D4:5C:AF:75:74:63:02:0C:34:05:79
            X509v3 Authority Key Identifier:
                keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3b:9c:c5:ae:88:68:6c:23:57:19:5f:db:06:74:8b:7a:6a:
         5e:ed:a7:0f:ea:0e:6b:86:95:a0:76:38:a8:92:b7:6c:6b:69:
         c8:56:f6:41:d5:d8:75:44:4a:65:8b:1b:ab:e5:d6:21:a2:f7:
         8a:ae:36:31:a0:f5:34:59:d3:9b:2a:a0:21:62:2e:3a:ac:23:
         6e:da:42:6f:62:1a:1f:c8:ed:f7:67:05:11:4d:b4:6e:4d:41:
         9e:24:7c:e4:7b:ec:45:b7:49:8c:15:a8:b8:62:1b:98:a2:46:
         02:c7:9e:02:14:e1:9c:5d:2e:d6:1d:ff:d8:b6:19:98:d5:a4:
         23:0d:46:7c:bd:25:51:9b:aa:b4:2b:ec:32:c0:77:bb:be:62:
         b4:24:da:08:50:6d:9f:9f:fb:f5:48:43:7a:61:47:15:9e:22:
         72:cf:e7:51:51:6c:52:e6:6b:06:09:b5:76:9c:5b:ee:41:5e:
         a5:e5:c7:f5:1e:1d:c6:ce:a1:77:cd:08:a8:22:13:a1:d3:a8:
         c2:e9:0e:7c:fb:5d:a0:25:e4:d3:a5:c1:de:b7:82:5f:9b:8b:
         01:80:95:8f:e5:9d:ac:98:c7:d1:13:e9:65:1f:57:71:33:1b:
         8d:19:a1:fd:21:42:73:15:2e:a9:c3:ae:16:a5:ad:c1:a7:59:
         70:ef:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:13 2026 by rpki-client