Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          pHxkgahNX2btljSHVVRURSOWe+C07oFBy9HuHjAa2UQ=
Subject key identifier:   A6:2C:11:76:B6:D9:CF:51:57:54:8F:0F:63:7E:4F:68:DC:2C:77:DF
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       019D389BABF9BA3616E51A2715C380CBA241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 08:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:19 +0000
Files and hashes:         1: 1yqrC5cFVqno3yUjEb2JEevt8hU.roa (hash: ALDcP7GRoyghMSXeDYW2VCy+XpgGkyrbpJ7hv982jsc=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: mCBlHoXkMH3BWyp6JbwnD4ip+L52xLhCJ9RXGCWNVqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:ab:f9:ba:36:16:e5:1a:27:15:c3:80:cb:a2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Mar 29 08:00:19 2026 GMT
            Not After : Mar 30 08:00:19 2026 GMT
        Subject: CN=a62c1176b6d9cf5157548f0f637e4f68dc2c77df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:97:27:a7:a2:58:f1:db:e6:c1:f8:8c:17:
                    66:2c:a3:61:3d:d9:ef:2a:93:05:72:f1:b7:aa:c5:
                    83:7a:93:09:ef:04:19:4f:29:86:6c:04:3c:a4:ff:
                    b8:f3:c1:88:a2:fc:b5:52:1f:f7:2a:85:56:29:38:
                    6d:36:57:b4:13:7f:55:2e:de:7d:81:da:f3:c3:7d:
                    b6:42:fe:d7:d3:c3:b0:90:1d:93:eb:2c:49:7e:51:
                    d2:41:b9:af:ee:a9:be:cd:e3:d5:55:f0:e3:7f:d1:
                    07:86:39:67:19:bc:31:19:17:c3:89:f8:6a:bb:7b:
                    fe:ea:89:fd:df:10:97:b3:8b:79:b3:c2:25:5c:95:
                    f3:91:f3:e0:02:5d:b2:ab:6d:5a:27:b6:4b:4e:55:
                    75:6d:cb:85:03:f1:06:e6:21:a7:d3:60:96:ab:95:
                    23:27:5f:39:8f:54:6c:d7:d5:8a:67:8e:88:5b:51:
                    d2:c8:3d:7d:fd:01:7d:6d:74:a5:f4:21:c4:04:4b:
                    04:0d:64:69:48:2c:d5:1b:7c:4a:40:65:f2:99:78:
                    1c:74:83:7d:48:da:13:f8:d1:03:62:be:39:74:42:
                    eb:9f:2c:8c:17:3f:30:cd:a1:0d:5d:f1:69:f9:f2:
                    6a:fe:38:f5:f3:aa:fa:8b:e2:1f:8d:3d:09:00:98:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2C:11:76:B6:D9:CF:51:57:54:8F:0F:63:7E:4F:68:DC:2C:77:DF
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:59:8a:b8:64:1d:2c:bc:a2:9c:f2:1b:ac:e0:ae:f8:22:b3:
         f2:2b:35:be:cb:71:91:6c:a6:7d:cc:d8:3c:a3:e2:df:cf:5c:
         5d:7a:fc:29:70:8e:31:57:11:d6:8f:e2:ae:2f:cd:0d:19:aa:
         c4:94:3d:b0:c7:93:26:a1:f9:6e:98:87:6e:6a:c8:b1:08:94:
         21:13:86:9d:73:86:05:6d:06:18:ed:c3:b3:6a:58:75:90:bc:
         de:98:7f:96:ec:37:8f:3e:d0:3e:a1:06:72:94:37:3d:28:29:
         55:df:a4:3a:8c:95:fd:49:9c:7f:2e:75:90:72:fe:1c:c4:cf:
         f1:b5:49:f4:fb:48:c3:69:35:ec:95:5c:d7:a4:4a:5a:42:82:
         24:18:a8:c3:a5:15:3b:6c:a6:6d:d2:1a:9f:91:ef:46:73:94:
         dd:9a:32:17:93:fa:b1:6d:30:b0:f4:8a:95:87:82:20:54:11:
         31:ae:12:ee:ae:d3:2c:42:3b:e8:c3:bc:c9:d8:fb:46:81:fe:
         71:dd:5e:b6:1c:34:c0:6c:6f:cd:95:e8:4b:34:8e:55:e0:52:
         77:32:c5:d5:3c:a4:bc:b4:33:44:a7:12:c4:c3:39:45:7a:74:
         bb:6a:c7:30:db:19:fa:90:8c:34:a7:93:6c:69:ef:d5:1e:d0:
         d1:d0:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:28 2026 by rpki-client