Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File:                     ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier:          sLKc0amwn9yq7ElTSCmZn3n6MlfVayZYLRf1H/F+dMs=
Subject key identifier:   29:7F:A6:1B:53:73:39:31:AD:B2:16:5B:E8:82:44:4E:92:6D:62:F5
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer:       /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial:       019D38D2E8707092FC7B94F6B4EFED65A974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 09:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:39 +0000
Files and hashes:         1: Egb0qlOT0QYai7Ud1j-6AktXpaQ.roa (hash: t3ML12+oYwBxBwu00YHixrtLa2iYcj7/LDeiT9PozG0=)
                          2: HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa (hash: oZWuIu54uOtv30XUphqHrr6wzKAadRn0thnex/98uK4=)
                          3: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: myE+CHn971ZLhROroZXRSNa7G1nNF9su2P76nPjKdD8=)
                          4: a27qVn_k5d7rFpyZQYzwTiZkhY0.roa (hash: yXSZOhjfWxv0LjskprohS30KlvIJQI3hLL3gKXTjDOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:e8:70:70:92:fc:7b:94:f6:b4:ef:ed:65:a9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
        Validity
            Not Before: Mar 29 09:00:39 2026 GMT
            Not After : Mar 30 09:00:39 2026 GMT
        Subject: CN=297fa61b53733931adb2165be882444e926d62f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:c3:f2:05:de:c3:64:90:f9:81:04:40:89:
                    ee:dd:16:84:c8:a6:68:e2:0a:8e:a2:fd:dc:f1:48:
                    15:7e:12:3a:73:db:1e:da:c5:4b:f1:5e:1d:34:2f:
                    5a:db:29:6e:73:0a:93:19:ef:c2:3b:7a:31:ca:8a:
                    f0:5d:b4:e0:f1:ad:dd:e6:2b:6f:89:a3:6b:95:38:
                    6b:bb:37:58:9d:f0:41:32:02:f4:21:2d:17:cf:8e:
                    77:99:15:49:15:c9:4e:41:3c:fe:24:b3:fe:58:67:
                    b1:60:e6:f5:3c:ea:6a:c7:a2:f3:42:8f:dd:ca:3c:
                    e0:35:5f:6e:89:66:93:28:24:29:09:c8:ba:49:56:
                    ca:84:45:66:57:f3:cc:8c:e4:43:84:de:3c:9b:6b:
                    06:09:d8:d6:6e:66:0d:30:03:a1:23:89:7d:45:ff:
                    f7:b3:b0:53:8f:6b:e2:15:65:75:50:f1:34:b6:de:
                    10:8c:83:1f:00:83:49:55:91:8b:56:94:17:a7:35:
                    24:e1:46:c7:f7:2b:24:15:ce:58:85:36:7e:f4:35:
                    b7:60:86:8b:50:75:86:29:23:09:3c:8e:2f:87:fa:
                    76:c9:ac:cd:0b:6b:f0:50:d7:90:36:d9:35:a0:5d:
                    db:83:03:d4:78:65:32:b0:99:1a:da:4c:f8:a8:61:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7F:A6:1B:53:73:39:31:AD:B2:16:5B:E8:82:44:4E:92:6D:62:F5
            X509v3 Authority Key Identifier:
                keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:4b:ac:d1:87:0e:1c:07:3b:19:71:38:8e:38:75:e4:c3:
         bc:94:81:29:0f:29:e0:52:94:6a:1f:f6:33:fa:87:7f:fa:db:
         24:b1:a6:98:e0:82:c1:83:5b:9f:d7:ec:69:93:b3:f3:89:88:
         8d:c9:ee:dd:b8:24:b1:15:45:d8:75:57:5d:c5:ac:c7:45:3f:
         2e:01:99:f8:b7:4d:f5:5d:b5:13:2a:81:fb:b7:cb:e3:30:ab:
         7a:b5:d4:17:ec:9d:6a:a9:2e:bb:27:e0:71:6e:0c:28:49:4b:
         26:ad:5c:b6:ad:0e:42:92:5f:55:47:c3:a7:96:9a:cc:d7:88:
         b3:0c:f8:8f:a6:33:98:82:a8:c7:8a:1a:5a:71:f6:6f:7a:1a:
         10:df:b1:12:a9:9a:2f:96:69:8d:76:24:2b:2f:b4:66:a6:5b:
         96:fc:93:97:94:51:5b:1b:77:60:d4:86:1f:99:e4:8e:ef:59:
         7c:f2:ca:5b:4d:83:6b:5d:bc:9f:23:63:77:78:ab:b7:37:fd:
         75:60:93:4e:c7:4b:80:d0:0b:6e:15:86:f9:35:18:88:e2:a4:
         55:e5:6d:2e:0d:4b:7d:dc:a1:78:cc:1d:25:70:9f:7d:7a:2a:
         9e:cb:9e:b3:e7:95:fe:09:42:08:f9:99:51:43:b2:b3:4a:90:
         51:fe:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:07 2026 by rpki-client