Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File:                     ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier:          eFZ/36JL96R6zJrK1UojZORk06VB6CVBPjb/9YiqTy0=
Subject key identifier:   9C:7A:15:DF:EB:75:C0:73:22:1B:BD:43:CE:5E:EC:44:BE:53:15:CC
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer:       /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial:       019D35D1EA6DB055D5660DBEEBB3BD3DB8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number:          0D54
Signing time:             Sat 28 Mar 2026 19:00:42 +0000
Manifest this update:     Sat 28 Mar 2026 19:00:42 +0000
Manifest next update:     Sun 29 Mar 2026 19:00:42 +0000
Files and hashes:         1: 6WoM_xG4wV-AhnwKf_EtMbG7hdA.roa (hash: 6pwcjqwtQhFnc6O4o0o2P45/PvuebPJ0qN/3US6rWIk=)
                          2: Hm7ix848xJAY1AJLhXlaj-jQ_BI.roa (hash: +YVIdKa/bQ1rJbGEdtGfoIRzYOMGIjr/vt5PbGNu18A=)
                          3: XAIFfl9QWcdhRZ9cTQDo6K9EBW0.roa (hash: HAz06rT649O471c8KJFWUb5f8BMSqQwCR6TQ0OuLeP0=)
                          4: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: sZlJWThSBkKNSTKZETeWxa/cRlP8PnGWWZ74ansjxA4=)
                          5: za0KCchEnO8zwmW-feM7Z3UncjE.roa (hash: cvLyxJf9J4OkfgwQV4Z4jYKejpKF+XIzROZmSetrmI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:35:d1:ea:6d:b0:55:d5:66:0d:be:eb:b3:bd:3d:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
        Validity
            Not Before: Mar 28 19:00:42 2026 GMT
            Not After : Mar 29 19:00:42 2026 GMT
        Subject: CN=9c7a15dfeb75c073221bbd43ce5eec44be5315cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:96:46:90:07:6a:41:54:76:d9:0d:be:80:
                    84:dc:4c:d7:c5:d4:a6:a1:4f:e3:fd:23:12:7b:a1:
                    d6:2b:79:f8:7a:4f:60:07:3b:f6:95:10:a6:da:e5:
                    73:a5:43:f3:d7:5d:75:a6:81:8e:ea:76:88:c6:41:
                    68:af:56:57:36:dd:c3:64:c0:51:96:c0:ad:ac:64:
                    da:1a:f2:26:0a:95:12:f8:4d:41:3f:48:a3:f4:26:
                    9b:84:ab:6d:dc:f6:88:de:0f:fb:65:72:66:eb:03:
                    6f:38:fe:1f:33:17:ee:92:98:f1:7d:64:ab:ed:72:
                    a7:00:da:f8:56:72:f0:e0:11:ac:1a:aa:ab:53:6a:
                    c1:71:24:49:8b:8c:71:ac:5a:6c:73:d3:74:35:ac:
                    18:d9:c6:65:88:ef:52:ee:86:b2:29:5b:28:3f:aa:
                    9a:92:05:ba:02:d3:c3:36:35:3b:83:73:a1:6f:3b:
                    aa:9f:fc:5c:ad:c1:34:0c:68:90:7e:20:76:bb:60:
                    2c:b1:ef:ba:9c:bc:13:5b:05:c8:87:1e:91:16:59:
                    2d:40:85:ab:d9:3f:84:5e:de:ad:7b:85:2b:98:aa:
                    18:fa:36:4c:fc:f6:b7:84:60:35:76:1d:4a:21:d7:
                    b5:e1:e9:55:a6:8f:ce:74:59:c1:c7:1c:39:ff:08:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7A:15:DF:EB:75:C0:73:22:1B:BD:43:CE:5E:EC:44:BE:53:15:CC
            X509v3 Authority Key Identifier:
                keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:46:70:9c:5a:74:81:c2:f6:1e:28:ec:9d:b9:be:7c:bd:b4:
         d5:4f:b6:27:b0:e0:47:e2:73:c2:b9:4d:06:0b:aa:f6:de:fa:
         9f:eb:0f:5a:8a:0b:cf:8f:c8:a9:65:4a:bf:62:0f:a8:54:af:
         96:63:3b:70:d1:c8:e6:8d:b2:e1:36:6e:ce:86:b1:17:1a:a7:
         e2:38:06:28:86:ef:83:0c:2e:cc:3a:a2:19:b6:d8:83:b3:0a:
         aa:dc:5e:f2:89:cb:e4:11:c2:b6:d9:6b:40:c8:31:cf:c8:c3:
         c7:58:61:4b:b1:41:f6:a2:14:bb:38:ec:9f:21:a0:c5:bf:5a:
         62:2c:0a:e3:43:fe:a8:8c:e1:0e:7e:3c:cd:d9:92:1d:56:67:
         5a:c8:28:09:0b:d4:4a:6b:9e:49:00:a7:2b:e6:bd:c7:83:06:
         37:fb:c9:91:93:d7:3f:2b:6b:40:92:af:78:50:ed:bc:cb:8c:
         79:f2:02:ad:27:12:cf:2a:73:8a:74:a2:87:96:67:0c:ff:74:
         7c:30:52:7d:90:ae:ca:f3:52:ff:6c:c6:18:59:c8:f2:93:f5:
         d0:2b:da:55:70:eb:ab:33:29:87:bb:2b:5b:8a:de:fc:ff:d2:
         f6:bb:27:a0:db:07:22:67:05:31:6e:76:55:df:cd:46:72:10:
         2a:5b:dd:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ010eptsFXVZg2+67O9PbjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi
MTU4OWMwHhcNMjYwMzI4MTkwMDQyWhcNMjYwMzI5MTkwMDQyWjAzMTEwLwYDVQQD
Eyg5YzdhMTVkZmViNzVjMDczMjIxYmJkNDNjZTVlZWM0NGJlNTMxNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcyWRpAHakFUdtkNvoCE3EzXxdSm
oU/j/SMSe6HWK3n4ek9gBzv2lRCm2uVzpUPz1111poGO6naIxkFor1ZXNt3DZMBR
lsCtrGTaGvImCpUS+E1BP0ij9CabhKtt3PaI3g/7ZXJm6wNvOP4fMxfukpjxfWSr
7XKnANr4VnLw4BGsGqqrU2rBcSRJi4xxrFpsc9N0NawY2cZliO9S7oayKVsoP6qa
kgW6AtPDNjU7g3Ohbzuqn/xcrcE0DGiQfiB2u2Asse+6nLwTWwXIhx6RFlktQIWr
2T+EXt6te4UrmKoY+jZM/Pa3hGA1dh1KIde14elVpo/OdFnBxxw5/wh11wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx6Fd/rdcBzIhu9Q85e7ES+UxXMMB8GA1UdIwQY
MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt
NWQ0OGJjZDdjMWRjLzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj
LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkZwnFp0
gcL2Hijsnbm+fL201U+2J7DgR+JzwrlNBguq9t76n+sPWooLz4/IqWVKv2IPqFSv
lmM7cNHI5o2y4TZuzoaxFxqn4jgGKIbvgwwuzDqiGbbYg7MKqtxe8onL5BHCttlr
QMgxz8jDx1hhS7FB9qIUuzjsnyGgxb9aYiwK40P+qIzhDn48zdmSHVZnWsgoCQvU
SmueSQCnK+a9x4MGN/vJkZPXPytrQJKveFDtvMuMefICrScSzypzinSih5ZnDP90
fDBSfZCuyvNS/2zGGFnI8pP10CvaVXDrqzMph7srW4re/P/S9rsnoNsHImcFMW52
Vd/NRnIQKlvdQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 00:11:58 2026 by rpki-client