Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft
File:                     zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft (raw, json)
Hash identifier:          guXi++m8SfzMsjtM2yclI1rTQvgiFQEjC8RtEyATIg0=
Subject key identifier:   2D:A9:C2:C2:30:DE:72:6D:20:EF:4D:57:AA:00:51:87:A8:18:D6:27
Authority key identifier: CE:AC:F3:01:5D:30:3F:3B:B2:0E:37:D6:63:74:C1:C1:36:FE:AF:03
Certificate issuer:       /CN=ceacf3015d303f3bb20e37d66374c1c136feaf03
Certificate serial:       019D389BD049F8C65ADF859E04882EB9A44B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft
Manifest number:          0E
Signing time:             Sun 29 Mar 2026 08:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:28 +0000
Files and hashes:         1: bilmbOHuvZm_WEpdwPJKBEepMWY.roa (hash: VnsoNX9KE5Ea27LSWCBw5CdNdHnI4rKae1Wi1S2UjG0=)
                          2: zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl (hash: lSo+sHKIu2zw76Z4nyl/Zy/YderwMHd1Rbq0tb0o9wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:d0:49:f8:c6:5a:df:85:9e:04:88:2e:b9:a4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceacf3015d303f3bb20e37d66374c1c136feaf03
        Validity
            Not Before: Mar 29 08:00:28 2026 GMT
            Not After : Mar 30 08:00:28 2026 GMT
        Subject: CN=2da9c2c230de726d20ef4d57aa005187a818d627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:58:d7:39:80:fd:87:ff:3f:a8:51:94:73:
                    0e:3f:4d:51:f1:11:7e:16:03:31:c0:bb:b4:24:6d:
                    7b:13:ec:f9:93:6d:3e:c5:78:37:50:6d:e8:13:7e:
                    ea:5d:5a:0f:af:5e:2f:03:87:3c:8f:a2:9c:21:a6:
                    40:2f:11:46:c3:a9:1d:96:5f:97:fc:01:77:85:5c:
                    21:cb:6c:67:d7:9d:48:50:7d:1f:a5:b8:a3:1b:e7:
                    b8:02:74:82:bf:73:10:9e:48:91:b0:22:0d:2d:bb:
                    39:ae:a8:e6:ff:1d:80:e8:9f:92:05:67:78:83:57:
                    92:63:6f:5f:a2:9a:40:b1:06:1d:5a:85:c1:d0:5a:
                    7b:d7:2e:c1:3a:83:c0:c8:0e:2a:4a:93:ac:d4:90:
                    6f:e4:25:7e:f6:be:06:76:f9:96:fb:a2:88:2b:a9:
                    18:bb:71:06:95:e6:5f:a7:a5:9e:74:d4:5b:90:47:
                    ed:71:99:36:2e:80:50:2d:4a:f7:57:2a:5e:55:e4:
                    bc:df:32:55:86:ec:7c:45:3d:91:48:10:fc:ec:51:
                    41:11:f6:73:cc:eb:94:d7:ae:ca:b6:ae:f6:ac:5b:
                    29:af:be:6d:ed:b9:e9:d2:10:b8:24:38:10:04:45:
                    05:ca:dd:99:43:df:8f:ba:9f:10:e2:c3:9c:f4:73:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:C2:C2:30:DE:72:6D:20:EF:4D:57:AA:00:51:87:A8:18:D6:27
            X509v3 Authority Key Identifier:
                keyid:CE:AC:F3:01:5D:30:3F:3B:B2:0E:37:D6:63:74:C1:C1:36:FE:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:e9:ba:44:0b:8a:dd:ba:3c:a6:af:68:a3:24:59:a2:b3:
         90:df:09:24:1e:7d:5f:91:26:a8:b8:bf:3d:8e:52:38:c5:2d:
         81:1d:33:49:07:f8:3f:6b:c3:9f:d2:34:c2:26:dd:ff:c0:26:
         81:2e:29:6e:39:e4:08:d4:65:cb:05:a4:36:88:7b:11:42:e1:
         84:8c:ee:55:59:f4:69:c6:0a:55:a7:39:34:ac:d7:09:e5:4b:
         3b:4d:73:b1:c8:44:e8:92:73:d0:a0:db:a9:ee:a5:03:44:c4:
         44:ac:01:c7:fc:a9:a1:61:b7:e5:23:0c:f2:ad:e2:3d:fd:27:
         0b:f5:0d:0f:83:ed:15:0a:4b:eb:ff:7f:59:e8:06:76:88:f9:
         a0:1d:46:b1:bb:8e:61:14:27:2d:03:b2:22:1b:27:c9:53:fd:
         32:42:4f:cc:5b:71:4d:6d:eb:0e:eb:d6:a2:a1:21:b2:7d:61:
         c8:1e:aa:98:71:58:b2:30:41:49:89:c0:d9:90:54:5e:78:16:
         d1:78:7e:92:51:3a:e3:1c:65:2d:6e:98:68:fa:f2:a6:85:6d:
         de:20:35:26:b2:72:0c:65:87:b6:ea:49:a2:b6:dd:a3:71:74:
         50:3c:f0:a5:9f:d0:45:c1:db:48:12:13:d3:42:d9:13:14:90:
         74:64:e0:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m9BJ+MZa34WeBIguuaRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYWNmMzAxNWQzMDNmM2JiMjBlMzdkNjYzNzRjMWMxMzZm
ZWFmMDMwHhcNMjYwMzI5MDgwMDI4WhcNMjYwMzMwMDgwMDI4WjAzMTEwLwYDVQQD
EygyZGE5YzJjMjMwZGU3MjZkMjBlZjRkNTdhYTAwNTE4N2E4MThkNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql1Y1zmA/Yf/P6hRlHMOP01R8RF+
FgMxwLu0JG17E+z5k20+xXg3UG3oE37qXVoPr14vA4c8j6KcIaZALxFGw6kdll+X
/AF3hVwhy2xn151IUH0fpbijG+e4AnSCv3MQnkiRsCINLbs5rqjm/x2A6J+SBWd4
g1eSY29foppAsQYdWoXB0Fp71y7BOoPAyA4qSpOs1JBv5CV+9r4GdvmW+6KIK6kY
u3EGleZfp6WedNRbkEftcZk2LoBQLUr3VypeVeS83zJVhux8RT2RSBD87FFBEfZz
zOuU167Ktq72rFspr75t7bnp0hC4JDgQBEUFyt2ZQ9+Pup8Q4sOc9HOloQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2pwsIw3nJtIO9NV6oAUYeoGNYnMB8GA1UdIwQY
MBaAFM6s8wFdMD87sg431mN0wcE2/q8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenF6ekFWMHdQenV5RGpmV1kzVEJ3VGItcndNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZDY5MGQtNTg2NC00ZTBjLWI4Y2It
Y2ZlMjRhYWMxMDk5LzEvenF6ekFWMHdQenV5RGpmV1kzVEJ3VGItcndNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZDY5MGQtNTg2NC00ZTBjLWI4Y2ItY2ZlMjRhYWMxMDk5
LzEvenF6ekFWMHdQenV5RGpmV1kzVEJ3VGItcndNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5DpukQL
it26PKavaKMkWaKzkN8JJB59X5EmqLi/PY5SOMUtgR0zSQf4P2vDn9I0wibd/8Am
gS4pbjnkCNRlywWkNoh7EULhhIzuVVn0acYKVac5NKzXCeVLO01zschE6JJz0KDb
qe6lA0TERKwBx/ypoWG35SMM8q3iPf0nC/UND4PtFQpL6/9/WegGdoj5oB1GsbuO
YRQnLQOyIhsnyVP9MkJPzFtxTW3rDuvWoqEhsn1hyB6qmHFYsjBBSYnA2ZBUXngW
0Xh+klE64xxlLW6YaPrypoVt3iA1JrJyDGWHtupJorbdo3F0UDzwpZ/QRcHbSBIT
00LZExSQdGTg3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:53 2026 by rpki-client