Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File:                     ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier:          tdytZhf/nhW7u8B5Nw4I9XRTu5ZmiiAd89Hc6kCfkOQ=
Subject key identifier:   00:EE:51:0E:09:A1:32:A2:6A:8A:30:3C:24:5C:15:4D:26:F0:1C:A9
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer:       /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial:       019D378979D1CE3D1EBB937793E14824DE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number:          042E
Signing time:             Sun 29 Mar 2026 03:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:49 +0000
Files and hashes:         1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=)
                          2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: wlUmy3kocZ88ApmtNCGwZIYn4H9v6f/FHRAyQluffyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:79:d1:ce:3d:1e:bb:93:77:93:e1:48:24:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
        Validity
            Not Before: Mar 29 03:00:49 2026 GMT
            Not After : Mar 30 03:00:49 2026 GMT
        Subject: CN=00ee510e09a132a26a8a303c245c154d26f01ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:47:4c:31:94:26:3b:8b:e7:3a:f4:67:51:
                    35:97:46:0c:d2:1f:7d:c6:b2:03:49:24:b0:3d:e8:
                    9e:72:e4:5a:d0:5b:6f:dd:d5:0d:e8:ea:0e:55:2c:
                    1f:f8:d4:e4:49:fd:58:ec:b3:1d:c6:6a:e7:9b:3e:
                    e5:a8:90:03:40:1b:d7:c2:c6:79:34:fa:48:5c:1e:
                    33:be:b1:bf:82:ef:49:82:03:9c:4e:fc:c9:4a:a2:
                    35:c8:81:ff:87:86:00:fb:4d:04:d8:35:36:45:e0:
                    12:cb:1d:1b:22:d1:ce:6e:ad:39:f0:1b:89:2c:4b:
                    dd:30:33:82:4a:79:7c:79:a3:5b:69:4c:19:ec:ab:
                    00:28:30:1b:b7:04:ee:44:d1:d6:c2:18:a7:10:31:
                    2c:1f:8b:f1:af:ce:cc:67:fc:f5:a6:73:27:e1:81:
                    d5:fa:b2:f4:12:18:12:83:41:3b:e2:99:fe:0f:19:
                    ac:49:23:0e:eb:3e:06:e1:fd:45:f5:3d:fd:44:2b:
                    80:51:1e:0e:88:58:1d:00:81:05:5a:e3:96:83:d1:
                    f1:7b:b8:c6:08:5b:17:71:c7:a3:39:2b:ed:2f:16:
                    fd:94:67:4a:0e:d2:1f:9f:4f:f9:58:59:3f:ff:55:
                    ef:ad:79:38:46:62:a8:c7:c5:ab:fa:a9:74:1c:b7:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EE:51:0E:09:A1:32:A2:6A:8A:30:3C:24:5C:15:4D:26:F0:1C:A9
            X509v3 Authority Key Identifier:
                keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:df:95:ad:a8:77:7b:91:be:77:47:ca:f9:23:4a:0c:10:
         ac:60:0c:26:d2:69:58:6e:b8:cf:a1:8a:c7:ac:c1:bd:d4:fe:
         ba:f1:e8:df:07:e7:e6:db:53:ff:f2:f3:4f:bc:79:3c:21:f9:
         a9:3b:9a:b0:d6:9f:0e:c1:42:21:a2:25:7e:a9:cf:a3:08:7f:
         e9:39:23:56:b2:76:cd:c7:d3:d8:f8:8f:c2:04:7c:72:9b:7f:
         f0:17:d9:c8:e4:c4:77:a2:3b:86:71:7c:4f:40:79:d1:2d:81:
         d7:67:09:1d:c0:dc:cc:78:7b:3e:13:cb:f9:5a:33:5d:5b:20:
         fc:96:ca:9c:5b:17:81:ac:f5:9d:39:6f:3e:83:ac:56:fd:aa:
         f6:52:48:00:0c:1e:75:d1:76:d8:3e:6d:9c:c0:61:74:35:09:
         77:15:b3:5c:8e:ad:c7:46:2e:bc:03:3d:7a:a9:27:96:fc:9c:
         3c:43:37:4e:3e:62:f8:e4:60:63:68:ea:6e:e1:04:32:e8:f0:
         3b:29:07:46:05:de:87:5d:7c:50:23:23:19:d8:43:be:bf:89:
         84:d2:ae:e0:83:fb:23:e5:fb:b0:f2:bd:c6:f6:dd:20:be:16:
         e7:ee:af:d1:ab:29:a4:dd:5b:52:e5:f4:3e:1e:0d:38:0c:60:
         5b:b0:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:55 2026 by rpki-client