Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          AGD61kxudKocNrShb/ApgEos1Ot8WBx3rG0R3yto7kw=
Subject key identifier:   92:11:CF:C4:54:01:62:7B:87:6F:03:5D:9E:B8:EE:45:C9:DB:92:C1
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       019D0E1F778481484E3AFE8732B50CF35DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          1883
Signing time:             Sat 21 Mar 2026 02:00:36 +0000
Manifest this update:     Sat 21 Mar 2026 02:00:36 +0000
Manifest next update:     Sun 22 Mar 2026 02:00:36 +0000
Files and hashes:         1: F-CmXISe8_wy3eRoL0KRLsrxsXE.roa (hash: UCcyvZA9JM0sa9RbXSB/RJ7CyrNNZcFxjhxeu1LfJcA=)
                          2: FXk_8rHDZW44wqBAzw47VRvUwgY.roa (hash: ppp2g2xygFhlcOiu9iawm3EuDNyOEJ3cb42rhtyx3aI=)
                          3: PAja4hjsJ8MQANg3sK1YfTlvaJQ.roa (hash: FIbqd2XK2BTIGA9oFREaVlM92WRa45cXlUCU71SKJfk=)
                          4: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: /ihNuHM6zDZ520Go+twkhtJstWarAbRngxoHx6Ku3/g=)
                          5: gYsdgAs4KIaJroqJZMhZmwRNn38.roa (hash: t90AwEAZ729TPglZyxHbnIWUY3pMyQTtaWuzn+iV9DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:1f:77:84:81:48:4e:3a:fe:87:32:b5:0c:f3:5d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Mar 21 02:00:36 2026 GMT
            Not After : Mar 22 02:00:36 2026 GMT
        Subject: CN=9211cfc45401627b876f035d9eb8ee45c9db92c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:c6:29:4d:eb:41:b5:db:eb:25:dc:86:78:
                    e5:c0:58:2d:85:2d:73:ac:b7:4a:ae:db:d9:1a:e8:
                    92:d1:cf:ef:4b:76:0e:0b:6f:94:24:f5:b0:ed:7f:
                    3a:98:6a:37:52:49:01:b9:65:0e:56:7d:f3:76:f7:
                    f6:91:c4:cc:3d:ae:fd:d3:70:26:3b:19:37:53:ba:
                    5d:9f:fe:bf:21:36:39:10:70:e0:e5:71:ff:9a:69:
                    83:25:f7:99:07:fd:fb:9a:53:bf:a8:05:a7:c0:dc:
                    b0:e2:32:62:e7:c5:ad:86:00:83:bc:5c:09:cd:6f:
                    bc:f8:ca:03:36:64:1d:91:20:6e:87:8f:8f:de:8a:
                    c2:b7:3c:29:4e:67:5c:13:64:d0:42:9d:ed:98:fd:
                    2c:2d:ef:7a:28:73:80:1d:a8:2e:3a:35:b5:98:3b:
                    88:4e:4a:29:40:18:ba:4c:6d:2d:f2:82:ad:a1:81:
                    8d:a9:88:60:f9:00:d4:96:ad:81:76:11:23:1d:0e:
                    13:9d:52:d1:67:49:e5:38:42:33:8a:41:7d:c1:a6:
                    de:70:de:47:d0:32:a9:61:81:d1:5e:4c:47:fd:f3:
                    8e:29:0d:d0:b2:17:6f:b8:20:26:a3:a3:c4:57:eb:
                    56:e2:51:74:97:0f:09:8d:f9:4e:2b:bd:11:d6:51:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:CF:C4:54:01:62:7B:87:6F:03:5D:9E:B8:EE:45:C9:DB:92:C1
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c3:96:45:86:08:42:08:a2:4a:33:e1:5f:96:97:cc:6f:b1:
         b6:0e:ef:06:c6:c6:73:f4:19:a2:cd:32:d5:d6:d7:d5:2d:ed:
         f6:15:55:19:00:dd:69:f0:fc:e3:b7:2a:68:15:22:ba:89:6a:
         e1:13:48:62:ef:db:16:0d:29:cf:04:43:67:34:8c:a5:c7:db:
         01:c9:32:9d:8a:b5:5c:75:9f:f6:9d:2f:52:b3:68:c4:f0:70:
         6a:65:8a:b1:b5:4d:3d:33:ff:85:1d:74:3e:2d:7f:5d:b4:f1:
         34:6b:61:9c:40:b8:26:c2:45:de:e9:63:42:a5:bb:54:04:ab:
         d5:a2:37:d9:67:f6:8b:a9:65:e6:33:ab:ca:a3:9d:fb:56:08:
         44:30:fc:ce:09:06:71:44:12:87:c9:11:74:4e:44:d6:36:5f:
         d3:65:33:11:a8:75:06:c9:bf:95:7a:e5:e3:98:2d:c1:fd:b0:
         c0:57:0b:e0:37:f2:6f:fc:81:86:f5:ac:45:cd:24:a7:e0:ac:
         77:e3:6b:52:3b:22:64:f9:58:0b:3d:cc:a0:18:ba:21:79:7d:
         1a:aa:e2:14:aa:cb:22:5c:37:80:31:23:27:94:75:15:f4:cf:
         e7:c6:de:93:ed:c3:f8:c9:c9:54:9e:3f:b6:62:f1:e1:c5:38:
         9a:43:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:14:30 2026 by rpki-client