Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File:                     ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier:          hyaEdxbK48ZrKrCqFQzVswOv3dYr9V0leXAeuxpmniA=
Subject key identifier:   E6:A7:F7:FC:C1:18:7D:AE:E8:E0:52:A4:56:97:76:5A:1E:9A:0D:FF
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer:       /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial:       019D386675CCCB8755C7C9F145042A9AC3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number:          0829
Signing time:             Sun 29 Mar 2026 07:02:12 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:12 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:12 +0000
Files and hashes:         1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: 12LhDqnMBEnAZbBG+Pq4EE9Sx/Z7OkgF6br7ILY7+pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:75:cc:cb:87:55:c7:c9:f1:45:04:2a:9a:c3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
        Validity
            Not Before: Mar 29 07:02:12 2026 GMT
            Not After : Mar 30 07:02:12 2026 GMT
        Subject: CN=e6a7f7fcc1187daee8e052a45697765a1e9a0dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:67:dd:c9:b6:25:4a:11:4b:9f:c7:6e:54:
                    9f:35:15:7f:ba:0b:80:32:15:df:0a:42:59:3e:1c:
                    30:8c:35:a4:6a:03:64:5f:bd:cb:2e:29:f2:10:45:
                    b3:c0:aa:7a:31:a0:b2:50:77:ce:30:9c:eb:68:a6:
                    bb:4f:be:f4:35:60:a0:2e:72:56:5c:b7:93:29:a8:
                    dd:d6:98:a8:5a:75:54:bf:d6:bb:bc:34:d4:36:9f:
                    ab:68:d8:0f:6c:d5:0a:14:6d:e0:db:04:16:70:86:
                    8e:38:55:40:cf:3c:74:73:e8:3e:a5:b4:a0:06:bd:
                    06:da:0b:b9:4d:bb:ad:b8:24:59:ff:10:2c:4d:42:
                    ca:2f:b8:2a:fd:cd:ee:cd:08:04:2d:0c:28:3a:94:
                    75:1a:f1:da:1a:0a:9c:81:43:e9:f5:f8:0b:b9:6e:
                    60:5e:0b:78:a6:98:d7:b0:d7:fe:33:4e:44:1c:12:
                    d5:70:6b:b6:ab:20:6f:67:c0:ae:40:83:cc:ea:1c:
                    60:f8:5a:6e:53:9a:f7:05:e1:42:01:a9:7f:12:65:
                    03:3f:8b:b1:06:65:78:65:10:c0:4c:35:01:b1:fe:
                    c8:00:47:60:b5:8e:a8:37:06:4a:d0:48:b7:62:c6:
                    97:a1:91:ff:7c:94:10:2d:ff:c5:b0:67:c5:e3:d2:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:F7:FC:C1:18:7D:AE:E8:E0:52:A4:56:97:76:5A:1E:9A:0D:FF
            X509v3 Authority Key Identifier:
                keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:74:1b:c0:df:be:14:3c:60:d1:52:92:18:55:e1:72:b2:ba:
         81:28:05:3a:27:da:aa:93:68:58:15:c3:d8:6a:38:35:f3:62:
         8f:d5:b2:b5:cb:f1:70:92:42:e1:22:62:ec:34:21:28:62:21:
         6e:d5:41:25:bd:48:53:d1:fa:44:ca:50:b9:be:31:7f:48:5e:
         d3:79:db:66:a1:af:90:4f:11:28:f4:cf:03:85:44:88:57:f4:
         b5:e2:ab:3e:a9:ee:81:3f:3c:bd:f4:81:3d:bc:8c:b0:4f:0d:
         c9:a3:80:8a:cf:83:91:4e:eb:3b:ff:78:8c:bd:ed:a3:e0:c5:
         17:cb:1a:35:7d:c1:3c:8f:89:8c:1c:53:68:08:b6:0d:fc:36:
         70:65:22:3d:51:1a:02:db:66:0e:3b:20:1d:e6:3b:aa:e5:92:
         e0:3b:8e:7c:1c:5b:d2:50:9d:9b:c1:7f:57:76:b1:7b:2a:f3:
         41:37:ee:01:dc:9b:f5:12:78:a5:d6:a2:53:3e:e7:7c:89:a2:
         b5:d5:e1:0c:53:a4:b0:a1:14:b0:9f:e1:b1:3e:b9:cb:68:2b:
         58:a8:9d:56:7a:37:39:23:74:56:15:62:e2:d1:51:da:ab:59:
         b4:a3:f7:df:9d:2a:55:de:69:88:8e:22:ef:a2:6a:53:b7:f3:
         38:c3:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:21 2026 by rpki-client