Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          0m75PvTc8JuMR8XmAcAzU4Jbo7TqfKhZ4vfha3awAT4=
Subject key identifier:   7A:89:55:11:25:D8:DC:99:7A:96:85:97:FF:EE:65:67:0D:68:5F:15
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       019D38D305040C791777C53072031670EF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          10A8
Signing time:             Sun 29 Mar 2026 09:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:46 +0000
Files and hashes:         1: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (hash: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: LzjNYjwi3Xgnhkdi0Ace3bqDK4tDLVUeoAIg8ydcNV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:05:04:0c:79:17:77:c5:30:72:03:16:70:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Mar 29 09:00:46 2026 GMT
            Not After : Mar 30 09:00:46 2026 GMT
        Subject: CN=7a89551125d8dc997a968597ffee65670d685f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:07:fb:2a:5b:9b:fb:f8:c7:65:0c:94:2a:
                    c5:50:23:8e:7b:ef:b9:eb:a3:f7:6d:eb:00:42:6f:
                    2e:38:b6:76:65:f7:e0:db:d3:69:e8:81:27:f0:7c:
                    25:bb:33:10:65:fd:af:1e:40:af:5c:b4:ac:0b:2f:
                    d1:9a:9e:38:77:16:01:19:9c:85:ed:d7:30:3a:7b:
                    ef:88:32:d1:93:41:54:37:40:06:38:51:9e:47:6d:
                    90:b8:fa:c5:ad:0c:78:de:cf:a9:d1:52:93:f2:bf:
                    65:59:6f:70:23:7d:1a:bc:e2:b6:05:ff:94:24:4d:
                    a1:6e:81:1f:06:8b:a8:ef:78:45:6a:3f:b2:79:ad:
                    bf:62:c2:04:24:3f:6e:9f:80:89:d6:f2:7c:63:a4:
                    a8:07:bc:c8:c6:4f:62:7b:46:44:60:b0:f8:18:43:
                    21:a0:c4:2e:1f:24:f8:96:54:bd:d2:4a:4f:dd:9a:
                    15:e1:66:f4:d2:00:85:20:fe:f9:99:d2:b6:8b:03:
                    f8:75:60:0e:45:e7:e3:ab:d2:49:1c:c9:c9:7b:2b:
                    b9:1f:4d:9f:46:29:63:21:e4:1d:c7:b2:09:81:07:
                    89:74:f3:d8:ed:f5:ff:58:3a:19:8f:c0:69:8d:01:
                    27:10:7b:68:4b:64:c4:99:42:01:69:62:d5:ae:15:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:55:11:25:D8:DC:99:7A:96:85:97:FF:EE:65:67:0D:68:5F:15
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d8:d5:db:2a:b9:4f:6f:20:24:49:69:ea:89:96:cf:a5:ab:
         cc:0c:e2:03:91:22:08:b1:12:34:b9:6e:2a:9a:ab:d0:ac:bd:
         89:84:58:88:b6:4f:5a:5d:85:22:bd:c6:b5:1b:06:11:0f:77:
         5f:9c:70:1d:3d:38:8a:a6:d8:e5:ec:0a:b5:e9:75:67:0f:e7:
         06:82:50:2b:13:9e:a6:93:3a:d1:f7:27:08:77:5f:34:1a:3d:
         3d:d2:85:3e:cf:6a:ce:e8:22:20:59:c4:13:dd:6e:88:19:e8:
         d6:38:19:7f:05:73:32:77:92:b9:3f:bb:3a:41:62:75:3b:cc:
         8e:ad:82:78:af:fb:f9:d5:39:e2:e8:43:a8:0b:63:cb:99:a0:
         ef:d9:40:d5:30:1a:ee:33:b2:65:cd:cb:21:d9:4a:41:aa:ae:
         6b:f6:17:fb:dc:5a:a8:86:a5:e0:e0:c1:9f:16:d6:59:a2:c0:
         22:5c:91:97:3d:b0:20:7c:5e:a1:6c:f1:0b:f4:0e:26:a3:41:
         3e:0f:77:06:e7:33:dd:d4:f1:03:d8:15:f5:6f:b2:05:6a:9a:
         36:90:3b:0b:31:51:ec:b6:78:fb:ba:85:a2:87:4b:42:18:45:
         20:b4:ad:db:22:f7:3b:d5:58:9a:d1:91:f8:66:60:ca:d6:4a:
         5b:57:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:37 2026 by rpki-client