Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
File:                     ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft (raw, json)
Hash identifier:          ZyqD4Pek3QpJ0O0X5BAtkKlMLB8fVag9TRzBKn00oAA=
Subject key identifier:   A1:2B:71:1D:3F:88:47:26:FF:A0:E6:F8:B7:63:A4:45:80:E3:C5:06
Authority key identifier: 66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4
Certificate issuer:       /CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4
Certificate serial:       019D382E082B4D2C45960DED32B307F16285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
Manifest number:          0182
Signing time:             Sun 29 Mar 2026 06:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:33 +0000
Files and hashes:         1: CODBHLL76kvV5Qoxx12ifwuJ430.roa (hash: aYjgy7JYh3+PwYmVg/lQZAVSTIaumS2/ByrRxhGDLbo=)
                          2: ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl (hash: 7Wqc7kHnT+NzeC0HqmS+VRHF85KOki/8u7jEqZLrJmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:08:2b:4d:2c:45:96:0d:ed:32:b3:07:f1:62:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4
        Validity
            Not Before: Mar 29 06:00:33 2026 GMT
            Not After : Mar 30 06:00:33 2026 GMT
        Subject: CN=a12b711d3f884726ffa0e6f8b763a44580e3c506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:03:36:49:a3:fe:72:1a:5d:5f:aa:98:f8:
                    56:15:19:ed:c6:45:cb:e9:f2:41:b4:53:1b:95:28:
                    1d:a2:2f:e3:66:07:ca:62:99:55:64:b9:ed:3f:ee:
                    8a:71:be:cc:49:55:42:be:97:a0:c1:2a:96:7b:2a:
                    fb:58:95:50:0b:cd:5b:15:6b:03:fe:9f:e1:be:9b:
                    bb:22:ea:9e:3d:06:bf:ba:7b:a1:e3:1b:54:a7:4b:
                    50:87:af:aa:41:32:33:88:6a:97:5c:79:30:4e:23:
                    1e:bb:c7:b0:d0:9c:ec:f4:20:4b:5f:a8:9d:eb:40:
                    2a:44:49:e9:5e:1f:31:d4:ea:6c:f9:db:58:f9:c0:
                    15:41:69:07:85:fc:f3:90:43:e0:fb:8a:77:51:f1:
                    3d:6d:bf:f0:ef:7f:1d:b7:d5:00:f8:a4:71:a0:23:
                    6a:1c:23:76:7d:85:b4:ed:b1:a1:3d:49:a9:74:43:
                    9a:a1:ad:01:4d:82:3d:28:e9:e1:46:c3:04:aa:72:
                    6a:1e:d1:14:85:52:a1:ab:c3:21:f3:f9:31:45:0f:
                    a5:d8:f4:0e:16:70:06:67:a9:e5:a2:a6:b2:02:d1:
                    78:5c:70:bd:ab:92:7c:d9:16:af:e9:ca:bb:b1:0f:
                    c9:06:6e:1e:57:94:4d:50:57:45:a2:35:1f:b0:34:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2B:71:1D:3F:88:47:26:FF:A0:E6:F8:B7:63:A4:45:80:E3:C5:06
            X509v3 Authority Key Identifier:
                keyid:66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1a:3d:34:c6:56:a5:1f:7f:f8:8a:35:7b:4d:da:fe:7d:fd:
         58:6e:46:1a:45:6a:c6:14:a4:2a:75:f5:df:43:67:80:93:cb:
         3c:89:ca:9e:67:b8:84:4a:00:ce:e3:6f:38:19:c3:a8:25:e2:
         fe:54:da:3d:ef:4e:a3:7e:78:bc:11:76:5f:69:5f:de:3d:fd:
         2d:0c:a3:3f:21:09:c0:c0:fc:e7:bf:c9:5d:c8:4c:29:7e:2b:
         02:73:d8:1e:b9:32:6f:6a:a8:f9:54:59:68:b2:73:cb:7f:70:
         e1:8f:88:bc:98:7e:89:eb:bd:5d:19:76:55:d7:58:b6:8a:e6:
         8f:67:16:05:79:24:47:e0:d3:48:92:ba:88:15:e2:29:43:74:
         ff:11:24:de:1c:24:0d:8b:80:c3:39:07:b4:5f:77:05:02:a0:
         2d:78:c2:15:8a:b9:c0:99:fa:d9:85:e4:26:18:56:34:51:d2:
         2a:c5:76:d0:2d:d1:98:04:66:98:0e:52:43:7b:f5:1b:b9:23:
         7b:2b:5c:f7:6e:6f:70:77:3d:e4:e5:61:2c:2f:01:df:5e:e6:
         c1:ba:7e:a9:84:c1:f7:f7:89:29:d9:74:be:77:d5:48:3d:07:
         79:9d:17:59:00:39:8a:e1:ac:ca:e2:27:03:89:95:a2:7d:2e:
         68:a5:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:24 2026 by rpki-client