Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File:                     Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier:          3DaSt8RDL+A/lyrrVUVBCuwPG/wDEOpb67XHKTSzbl4=
Subject key identifier:   CF:6C:1D:AD:78:CA:D8:E0:59:B1:FB:43:E3:B2:43:73:76:9B:A4:67
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       019D092FF5297D0E552CC8C56EF2FAF6F02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number:          0D39
Signing time:             Fri 20 Mar 2026 03:00:31 +0000
Manifest this update:     Fri 20 Mar 2026 03:00:31 +0000
Manifest next update:     Sat 21 Mar 2026 03:00:31 +0000
Files and hashes:         1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
                          2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
                          3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
                          4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=)
                          5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: vfdrw2MabIZDLR9NwaUmqlNcLtpkG7FibP3pp1UPaNk=)
                          6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
                          7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=)
                          8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
                          9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
                          10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:09:2f:f5:29:7d:0e:55:2c:c8:c5:6e:f2:fa:f6:f0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Mar 20 03:00:31 2026 GMT
            Not After : Mar 21 03:00:31 2026 GMT
        Subject: CN=cf6c1dad78cad8e059b1fb43e3b24373769ba467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:d4:41:a3:11:e8:22:26:1e:b4:cd:69:c0:
                    85:08:53:aa:1b:67:50:8f:6e:62:11:d0:b3:72:94:
                    7c:d9:f7:3a:9f:99:43:70:c7:e1:10:f2:c3:de:95:
                    d0:f3:a7:88:90:89:fa:88:61:59:5f:15:20:8e:12:
                    d0:04:67:c5:46:26:9f:95:09:ef:9f:c9:56:6b:c5:
                    72:ec:eb:80:7f:bd:8e:af:de:a0:89:50:ef:0d:f8:
                    21:71:4c:99:98:33:62:00:5e:68:6f:43:5c:12:b6:
                    62:5b:f4:a2:de:b8:97:b2:5e:16:e4:c4:b0:6e:92:
                    b7:15:1f:80:c4:68:36:e7:9f:95:e2:30:a6:c4:77:
                    43:8e:ee:86:44:99:16:37:ac:56:56:69:e3:75:fc:
                    fb:37:bc:77:98:1a:96:cb:47:f1:d8:54:25:0b:78:
                    31:ea:cc:56:32:2c:5e:52:fd:86:d8:7b:14:2d:19:
                    fe:3e:d2:71:c9:f8:07:66:e4:d5:65:4c:34:23:65:
                    56:dc:d0:db:ed:cd:f8:51:c9:97:e8:30:5b:ca:a0:
                    88:06:1b:f9:73:aa:e2:57:04:65:5e:38:72:47:e6:
                    6e:6e:72:19:c7:2d:3e:61:1b:94:e1:0b:35:e8:f4:
                    42:21:27:34:8a:b4:fb:63:6a:4e:9c:fc:cd:af:a8:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:1D:AD:78:CA:D8:E0:59:B1:FB:43:E3:B2:43:73:76:9B:A4:67
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:66:b7:b2:3e:24:9f:9c:4c:f3:d7:8f:b1:a5:af:d5:8f:ac:
         f1:5b:95:02:2c:d9:3d:4f:c1:3c:ab:44:7c:2f:93:a2:95:fa:
         9a:65:b0:90:d7:66:9a:ff:77:91:6c:c2:29:a9:43:79:ce:82:
         12:c5:2c:2a:3f:db:2e:5e:31:53:0d:8e:9c:86:e3:1b:eb:f6:
         2c:d4:2a:ea:f1:ed:10:d0:95:62:60:4e:c4:99:1c:16:97:63:
         53:e7:c0:a1:02:6f:50:cc:86:af:bc:0c:57:8b:cb:77:a2:96:
         15:01:c3:0f:ac:11:50:64:32:8c:96:6b:13:73:b6:17:0b:e0:
         a1:e6:f4:15:4c:29:f8:f3:98:b6:e0:47:7c:66:d1:0d:e4:9e:
         59:8f:13:cd:a9:ae:8d:80:3e:f8:26:d7:da:d6:2e:52:7c:9f:
         c8:50:16:22:87:05:f4:18:dc:80:6b:f1:85:78:a6:d7:a8:9c:
         23:d1:d5:78:b7:2e:d6:41:14:64:3b:2d:74:bf:3d:18:86:d4:
         f3:c3:45:fb:bc:55:42:21:9f:73:01:51:5e:c0:f0:6a:f5:ca:
         fe:7c:56:fa:1e:6c:a5:df:29:df:43:5e:74:15:cf:3c:cc:cb:
         f8:9c:64:dd:5d:61:06:ee:49:27:29:32:c6:35:9f:95:41:61:
         72:27:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 11:01:40 2026 by rpki-client