Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File:                     ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier:          kUF9vzHUOTxIOhqFwbAKpXdcSlQOPoLOWI+SHKjaLXY=
Subject key identifier:   85:D6:47:A0:7F:85:46:99:CC:18:FF:B9:C4:E3:AF:E9:73:AC:A8:27
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer:       /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial:       019DCCE215E2036118CBC17CEE3DEA10C2FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number:          0BCE
Signing time:             Mon 27 Apr 2026 03:01:01 +0000
Manifest this update:     Mon 27 Apr 2026 03:01:01 +0000
Manifest next update:     Tue 28 Apr 2026 03:01:01 +0000
Files and hashes:         1: 4Kqssfz45wqKl4Y5usAP2cryF-s.roa (hash: VtsQh8EBUySqJ+8n7XXtvvG+r8GbNYVy0DLEl3LAFic=)
                          2: PlJpj7jP73E4zbfMxQODYMcp_7s.roa (hash: 6ejhDKH+4IAoIUxzT6kMmGZlbm0mSbrfcniUm7Rso6I=)
                          3: Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa (hash: Rrtw6rU9+BgwK1Mhs6SeDqlpBkER/cCVfCVvQJ88CfE=)
                          4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: rkDSUBW7Ttseg6qaKxOEtcaojbNKwpbeh9w8pe+NUmg=)
                          5: b1C1K0R4SsuxHJd-26aSi9G1s-s.roa (hash: UdNuNIgIX4vDZ6cHekj/pIxiG7gV3J4SuyTuh3WadyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:e2:15:e2:03:61:18:cb:c1:7c:ee:3d:ea:10:c2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
        Validity
            Not Before: Apr 27 03:01:01 2026 GMT
            Not After : Apr 28 03:01:01 2026 GMT
        Subject: CN=85d647a07f854699cc18ffb9c4e3afe973aca827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:fb:4f:b4:42:a0:e1:cc:fd:bb:a7:43:e0:
                    86:21:06:cd:0e:e4:80:93:e2:fe:63:af:7b:f0:0c:
                    ab:b1:b2:56:3d:0b:56:9c:be:86:cd:f6:49:dd:68:
                    b3:06:1c:90:cb:62:88:21:64:4b:9f:cf:72:50:6f:
                    9e:ab:c6:fd:be:c1:ac:92:39:87:33:35:e9:47:db:
                    ac:4b:a4:ce:79:8d:74:f1:22:ea:32:ce:94:a7:7e:
                    83:44:e3:35:5c:ef:a5:3d:09:67:61:f8:dd:b9:cb:
                    c8:06:b6:15:58:50:8e:3f:27:21:f0:de:79:ed:ae:
                    a5:d0:81:2a:b6:47:16:f0:4a:bb:a2:88:b5:62:f8:
                    f5:b6:1d:2f:68:42:21:fa:7f:e3:08:10:d5:6d:bd:
                    1e:a5:b0:61:9b:94:a3:6b:47:89:92:c7:58:40:1f:
                    bf:e9:ed:fa:fd:e8:11:98:4e:d7:8b:af:eb:89:e8:
                    03:37:66:7d:6f:2c:69:46:c9:c0:0d:57:d1:d4:56:
                    d4:60:c3:7a:18:7f:20:af:04:a1:80:53:ca:89:bb:
                    20:0d:44:af:8a:cb:97:64:4a:9d:f3:8a:63:c8:f6:
                    84:ed:af:83:8b:f1:4d:e8:78:0d:24:92:3c:1c:7e:
                    f2:d9:49:8c:c1:4b:a9:74:34:d4:33:1c:2a:1b:94:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:47:A0:7F:85:46:99:CC:18:FF:B9:C4:E3:AF:E9:73:AC:A8:27
            X509v3 Authority Key Identifier:
                keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:00:a2:fe:f6:47:dc:65:ed:60:74:38:ba:a0:7d:1f:55:55:
         83:c1:f7:90:ed:a1:e5:32:3f:e7:75:1e:4b:00:66:b9:c1:76:
         3c:62:fa:d1:12:39:f0:9f:5f:4b:be:73:71:fc:b6:c4:5e:62:
         88:eb:83:6c:51:fb:de:75:da:3a:f0:40:c0:c6:4e:24:db:c9:
         11:f6:3b:f7:24:55:9a:32:20:43:ee:0d:3d:6b:2f:9e:b3:26:
         a4:12:e7:f4:d6:5c:2d:0e:fb:bd:ac:39:71:c5:77:eb:76:b2:
         6e:91:80:56:cc:a4:ea:3b:5c:e4:af:66:85:0f:82:78:43:55:
         a0:ce:dd:6c:bc:91:0c:07:60:5d:73:3f:1a:99:4b:25:2b:60:
         ef:f5:24:52:7e:f1:81:3a:50:98:b6:15:08:c1:cc:f3:61:3b:
         30:a8:fe:3b:ad:af:1b:ba:8c:96:b7:35:26:91:00:e6:6c:31:
         42:0d:a4:25:5d:5a:21:3b:84:02:11:8b:cc:99:5d:0d:a0:e4:
         04:0e:73:4d:72:46:af:55:88:17:52:35:49:9e:a2:29:c8:df:
         ec:49:80:10:be:3c:e9:a9:dc:b3:02:80:2f:ac:85:51:64:55:
         84:13:f8:67:af:a0:76:8a:e5:0e:75:52:f7:d4:c8:cf:66:b5:
         f4:4d:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:06 2026 by rpki-client