Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          yUjT6puMDmm9kJHX3kyCryfLi5BF6XZhtJXTiWAxlHE=
Subject key identifier:   9A:BE:B3:EC:3D:6A:B9:86:7D:4D:9E:CB:BC:8B:FF:81:4A:F1:6E:19
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       019D3753063B2B0E55D1D019D6ECDA93BFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          11EF
Signing time:             Sun 29 Mar 2026 02:01:21 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:21 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:21 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: NtjROQP4scj-bd3rAQIfTM_a3J0.roa (hash: 2Z01mIMovc7MNUUvtWcENZUi/UbUUYFottmL0jYMx2s=)
                          3: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          4: VsCifY8XLUBVZAJIXlh4tHs6Tys.roa (hash: yx2cdHQ3fO2iayrPEdicOAnB23aOaGWVWINVVkpgEOY=)
                          5: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: LTEmHzZTpRzY+mRy29/+0VeosGNJqcXFw5NuYEIcCKI=)
                          6: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:06:3b:2b:0e:55:d1:d0:19:d6:ec:da:93:bf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Mar 29 02:01:21 2026 GMT
            Not After : Mar 30 02:01:21 2026 GMT
        Subject: CN=9abeb3ec3d6ab9867d4d9ecbbc8bff814af16e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:60:c8:35:f9:df:14:27:2d:3d:33:d4:fe:
                    74:29:73:24:64:1c:5a:e3:db:93:20:26:5f:25:a2:
                    76:ce:33:89:ab:ec:d4:1d:e8:7d:88:0a:52:61:d0:
                    6b:e6:75:f0:28:59:c1:05:fb:a2:8d:d8:f6:c3:90:
                    fc:46:25:64:a7:ef:25:51:41:a9:31:89:30:8c:a8:
                    f4:29:25:51:8a:6e:2e:93:86:9a:53:1a:44:f7:17:
                    1f:36:96:36:6c:46:b3:3d:f2:38:3d:0c:b5:93:0a:
                    aa:5f:66:f2:ca:77:b3:fd:45:82:cd:63:a2:ea:89:
                    ad:a4:8b:0a:21:b5:c6:d8:a1:c1:6e:b4:80:f8:7b:
                    83:e5:ac:52:47:1f:95:0d:8d:4d:5a:95:03:18:10:
                    15:5f:9f:82:cc:cb:f5:da:e2:44:61:6f:45:ae:65:
                    91:d0:c6:26:24:ef:2c:0d:a0:89:93:67:20:0f:f7:
                    fa:91:6d:41:4f:cd:43:f4:4a:51:57:dc:07:b8:71:
                    b9:6a:8f:a1:dc:61:04:e0:86:75:79:ed:bd:75:00:
                    55:0c:29:d5:40:72:8c:56:81:5c:aa:6e:8c:2a:57:
                    21:aa:a3:40:1c:61:5d:df:0b:7c:82:2a:ce:1e:74:
                    a2:b8:bf:27:1a:34:fb:c1:79:43:f9:1c:eb:47:7a:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:B3:EC:3D:6A:B9:86:7D:4D:9E:CB:BC:8B:FF:81:4A:F1:6E:19
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:de:ef:84:0d:a4:ae:26:e7:48:18:6d:4d:ff:02:6d:2b:
         1d:99:bc:30:04:61:c9:80:cf:b6:6f:fe:62:43:46:47:b2:c3:
         c3:b9:ea:c0:7a:07:b6:43:40:c5:3f:1d:eb:9a:3a:81:bc:de:
         b2:7d:76:ef:e8:49:92:85:06:1e:09:82:73:6e:f9:1b:b6:8b:
         7d:96:91:89:59:9d:76:01:5a:6b:2d:14:5a:89:09:ec:d6:a2:
         f8:6c:2c:c9:21:c5:e6:ce:17:e7:a7:72:1f:59:c8:9d:c1:6c:
         5e:7b:8e:dd:0b:94:56:64:be:dd:9a:19:b2:5b:0c:aa:a2:53:
         ac:5c:cf:83:55:57:fb:e1:80:32:7e:95:b9:ad:3d:54:c4:b2:
         45:e1:6e:f1:f0:07:47:92:44:c1:50:67:0b:dc:d2:94:92:16:
         bd:72:98:39:c5:04:d5:7f:8a:7e:19:db:fc:ad:5f:60:db:3c:
         83:13:35:e9:6f:b6:4e:78:e4:bb:8d:2c:f3:6c:74:62:00:5e:
         4f:85:22:cb:fe:a6:72:78:65:20:12:df:e9:46:2b:19:81:d7:
         08:19:f1:a2:24:25:54:76:bc:5f:6a:d6:32:c5:95:ae:68:82:
         2d:86:86:c6:a4:ce:cf:c2:e1:8c:4a:03:8d:be:e3:ce:ae:da:
         f0:38:30:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UwY7Kw5V0dAZ1uzak7/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTY5MWNhOWM1OGQwODU5YjZiODcwMjMwYjBmNTgxYmU2
NmE1OGEwHhcNMjYwMzI5MDIwMTIxWhcNMjYwMzMwMDIwMTIxWjAzMTEwLwYDVQQD
Eyg5YWJlYjNlYzNkNmFiOTg2N2Q0ZDllY2JiYzhiZmY4MTRhZjE2ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4pgyDX53xQnLT0z1P50KXMkZBxa
49uTICZfJaJ2zjOJq+zUHeh9iApSYdBr5nXwKFnBBfuijdj2w5D8RiVkp+8lUUGp
MYkwjKj0KSVRim4uk4aaUxpE9xcfNpY2bEazPfI4PQy1kwqqX2byynez/UWCzWOi
6omtpIsKIbXG2KHBbrSA+HuD5axSRx+VDY1NWpUDGBAVX5+CzMv12uJEYW9FrmWR
0MYmJO8sDaCJk2cgD/f6kW1BT81D9EpRV9wHuHG5ao+h3GEE4IZ1ee29dQBVDCnV
QHKMVoFcqm6MKlchqqNAHGFd3wt8girOHnSiuL8nGjT7wXlD+RzrR3rzqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq+s+w9armGfU2ey7yL/4FK8W4ZMB8GA1UdIwQY
MBaAFGYWkcqcWNCFm2uHAjCw9YG+ZqWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQt
MWE4MGRhZmZkNzk2LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQtMWE4MGRhZmZkNzk2
LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8/e74QN
pK4m50gYbU3/Am0rHZm8MARhyYDPtm/+YkNGR7LDw7nqwHoHtkNAxT8d65o6gbze
sn127+hJkoUGHgmCc275G7aLfZaRiVmddgFaay0UWokJ7Nai+GwsySHF5s4X56dy
H1nIncFsXnuO3QuUVmS+3ZoZslsMqqJTrFzPg1VX++GAMn6Vua09VMSyReFu8fAH
R5JEwVBnC9zSlJIWvXKYOcUE1X+Kfhnb/K1fYNs8gxM16W+2Tnjku40s82x0YgBe
T4Uiy/6mcnhlIBLf6UYrGYHXCBnxoiQlVHa8X2rWMsWVrmiCLYaGxqTOz8LhjEoD
jb7jzq7a8Dgw1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client