Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File:                     Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier:          ci8MrvxTsTjHSB1M5rz3eg8Bs0BAs+JmqvP5EED9tYA=
Subject key identifier:   A7:CD:AD:BB:DE:C8:07:74:F2:6F:C7:A5:D9:D4:E1:03:C9:0D:40:3F
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer:       /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial:       019D37531DE727063D79C9554896914DCB91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 02:01:27 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:27 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:27 +0000
Files and hashes:         1: 8V38VHEkwBfuD3hKlUMAwAWf0gY.roa (hash: imN6z7AkUfOmEGnz8pAEu90fdda1mOaxJQPyio4Pb3I=)
                          2: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: aK04f2QoAT0pTFAs3NMqhQ46wUpei43Mm4e0zuNCAck=)
                          3: _X7djEtEeel6rznCy89Da-wo810.roa (hash: MybIr2vIo4CNJaPziQgcTc/X4EYFmstJ5wpm8V4UqW0=)
                          4: v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa (hash: oRN0RpTL9cEOLFpMfM+oW8RC/6m7RJC5l8CQ7D2QtoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:1d:e7:27:06:3d:79:c9:55:48:96:91:4d:cb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
        Validity
            Not Before: Mar 29 02:01:27 2026 GMT
            Not After : Mar 30 02:01:27 2026 GMT
        Subject: CN=a7cdadbbdec80774f26fc7a5d9d4e103c90d403f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:51:d5:cd:6a:eb:1a:35:7b:4d:7b:ed:4a:
                    a3:96:7a:de:c1:4f:14:2d:35:bc:b6:64:92:63:6f:
                    89:dc:0b:78:74:41:ab:cf:8e:95:5b:41:17:7b:5f:
                    b2:d0:7a:d8:06:e1:8b:ff:b7:63:e9:8e:56:2f:89:
                    2f:8c:0d:e5:b6:92:ee:53:d8:bf:4c:df:f5:ef:02:
                    d1:35:70:88:96:20:56:02:12:c6:8f:a0:a6:42:63:
                    1d:86:d0:a2:ec:2c:3c:ef:bc:70:88:81:a5:6e:6a:
                    65:9d:52:14:42:73:f6:f8:40:af:b5:3f:5c:89:f1:
                    a5:01:09:a1:32:3a:a8:32:7b:30:a5:f8:1b:52:ad:
                    4b:ba:f2:c5:da:25:66:a9:a1:0c:af:79:db:e0:dc:
                    49:90:59:6a:11:52:0d:c5:0c:7b:cb:50:16:b9:0a:
                    40:31:b5:41:2c:55:15:49:a7:55:5f:41:61:13:11:
                    e2:1f:39:ab:bf:38:b4:32:38:de:c3:26:8c:fc:f5:
                    13:65:24:dd:34:f5:a8:0e:a7:3e:c7:8c:64:e4:aa:
                    fb:c8:b0:67:c4:32:86:81:94:25:82:3b:f8:69:1c:
                    a0:30:8b:8c:63:20:ed:1b:9d:db:01:ac:17:4b:21:
                    51:02:90:fa:00:12:6a:e1:03:35:9f:c3:8b:c9:18:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:AD:BB:DE:C8:07:74:F2:6F:C7:A5:D9:D4:E1:03:C9:0D:40:3F
            X509v3 Authority Key Identifier:
                keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:00:43:73:7b:06:7e:26:4b:0e:e0:80:e2:95:99:a0:d2:
         5b:d7:77:03:83:48:8d:3e:8d:b9:a3:d1:9c:02:46:8b:35:4f:
         58:3a:33:f4:99:7d:cf:fc:51:06:00:29:5f:19:91:7f:a7:d0:
         09:94:b9:d8:7d:46:c7:2c:ac:b0:43:be:61:3d:6f:68:3d:08:
         01:1a:5b:f6:bb:22:82:06:0d:53:b5:71:f7:4e:64:bd:f6:30:
         52:d2:ff:60:4a:e7:6d:89:59:c0:5c:0a:bb:13:d2:c1:e7:ac:
         ed:72:11:21:36:f8:27:ba:a1:c9:1e:ab:15:68:0c:5e:b4:43:
         5e:a1:97:4a:da:ea:ca:bd:d3:3e:f8:cb:4a:ec:23:b7:d9:c3:
         e7:1f:7e:89:a3:f0:c1:4f:57:67:42:ee:84:50:1a:42:b4:92:
         09:86:5c:27:b9:b5:f4:20:88:a0:4d:1a:5c:65:1a:b9:ef:40:
         fc:6d:b3:f2:68:34:c9:9b:53:17:b6:54:ab:2b:f9:bc:83:4c:
         30:35:e6:90:12:c1:a5:da:f5:10:d0:49:5f:06:c2:d4:c3:51:
         d1:46:c0:7a:6d:93:d5:90:8f:91:91:be:83:34:50:e7:10:c0:
         a3:f4:57:86:03:1a:ad:b7:72:da:52:43:94:5b:2f:b2:67:de:
         8c:5e:9d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Ux3nJwY9eclVSJaRTcuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2
NzkwZjUwHhcNMjYwMzI5MDIwMTI3WhcNMjYwMzMwMDIwMTI3WjAzMTEwLwYDVQQD
EyhhN2NkYWRiYmRlYzgwNzc0ZjI2ZmM3YTVkOWQ0ZTEwM2M5MGQ0MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPZR1c1q6xo1e0177UqjlnrewU8U
LTW8tmSSY2+J3At4dEGrz46VW0EXe1+y0HrYBuGL/7dj6Y5WL4kvjA3ltpLuU9i/
TN/17wLRNXCIliBWAhLGj6CmQmMdhtCi7Cw877xwiIGlbmplnVIUQnP2+ECvtT9c
ifGlAQmhMjqoMnswpfgbUq1LuvLF2iVmqaEMr3nb4NxJkFlqEVINxQx7y1AWuQpA
MbVBLFUVSadVX0FhExHiHzmrvzi0MjjewyaM/PUTZSTdNPWoDqc+x4xk5Kr7yLBn
xDKGgZQlgjv4aRygMIuMYyDtG53bAawXSyFRApD6ABJq4QM1n8OLyRi2yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfNrbveyAd08m/HpdnU4QPJDUA/MB8GA1UdIwQY
MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt
NWU3NThlODFlZmY2LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2
LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgcAQ3N7
Bn4mSw7ggOKVmaDSW9d3A4NIjT6NuaPRnAJGizVPWDoz9Jl9z/xRBgApXxmRf6fQ
CZS52H1GxyyssEO+YT1vaD0IARpb9rsiggYNU7Vx905kvfYwUtL/YErnbYlZwFwK
uxPSwees7XIRITb4J7qhyR6rFWgMXrRDXqGXStrqyr3TPvjLSuwjt9nD5x9+iaPw
wU9XZ0LuhFAaQrSSCYZcJ7m19CCIoE0aXGUaue9A/G2z8mg0yZtTF7ZUqyv5vINM
MDXmkBLBpdr1ENBJXwbC1MNR0UbAem2T1ZCPkZG+gzRQ5xDAo/RXhgMarbdy2lJD
lFsvsmfejF6dOw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:36 2026 by rpki-client