Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
File:                     ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json)
Hash identifier:          D5L26t/6SKAhYGKDpcpSbMSnqtgCagyg44wM6BiC3Eo=
Subject key identifier:   A0:A4:2C:1E:FC:5F:58:85:AF:10:DB:5D:48:86:11:72:E5:BD:E5:F1
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Certificate issuer:       /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial:       019CE3A33FA59EF79C0D62CC2B098F24CB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
Manifest number:          14FA
Signing time:             Thu 12 Mar 2026 20:00:52 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:52 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:52 +0000
Files and hashes:         1: VrGbU3QOrHG9m3kuxOwRhUx6Wbg.roa (hash: hDz07lJqNzJNY545cD3FDRksWHSBVWWDKwpbA8KVi0Q=)
                          2: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: M0v/mIzPWCEHWVf8oUpDlJZvlud60yx3HN8/iP71XSE=)
                          3: eKcVeXq2wt0SKbLGS84_xIQwRyI.roa (hash: o/AvUkqirZcVTc0Fj5CZijcSI6/NhaqXETyeyP//FGQ=)
                          4: enrj7Rmn-Rbin2HO4jtah8-M3bU.roa (hash: NrW7rDMpz8LFJnfE1GrWjyKulkBnQDA8wPMx4nsv1l4=)
                          5: vY_Y2rXzdf11VrMeTl5FVuF7Wcg.roa (hash: K8iieu6LpRNKFrHbCk+qEiKWtP8c1OcOi1kq2jJqsAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a3:3f:a5:9e:f7:9c:0d:62:cc:2b:09:8f:24:cb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
        Validity
            Not Before: Mar 12 20:00:52 2026 GMT
            Not After : Mar 13 20:00:52 2026 GMT
        Subject: CN=a0a42c1efc5f5885af10db5d48861172e5bde5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:20:b8:7a:61:48:13:8a:3e:74:ef:91:72:
                    b2:61:19:17:8c:29:2b:bb:34:3d:88:8b:66:53:a7:
                    f6:c8:0e:3a:b7:46:88:0e:89:bd:80:bb:78:3e:c7:
                    00:32:01:1f:0a:3a:79:83:75:15:9f:62:2f:b0:3e:
                    4b:ca:72:43:e3:8d:40:44:9d:5b:56:36:e5:ac:c1:
                    2d:a4:a9:bc:8a:7b:2f:e5:ca:73:db:41:90:a4:51:
                    58:ec:1d:ef:8d:b5:95:92:b4:40:ad:b4:63:ed:f1:
                    76:88:a2:ca:23:b9:e5:ca:21:0e:35:0d:7e:77:db:
                    41:74:6c:d0:27:eb:69:0f:64:10:58:3e:bb:90:f1:
                    9d:1a:c1:f5:0c:97:57:65:d8:41:d9:58:0e:27:c3:
                    d1:c9:e4:60:d3:42:78:dd:5c:9b:f9:06:4a:cd:a2:
                    c1:1a:56:da:da:a0:87:60:91:6d:08:fa:7e:a4:e4:
                    d7:77:65:4b:af:95:42:43:7d:2e:4d:1c:23:c4:16:
                    48:0c:a1:10:f2:02:bc:c8:d9:91:2e:2a:1e:44:4c:
                    a9:89:56:84:5f:37:84:71:dc:b0:f8:f7:b6:9c:1d:
                    ad:2f:c8:67:2f:46:da:f2:8d:72:a5:53:eb:d1:7d:
                    57:47:a8:b6:57:21:f7:3a:e7:72:63:48:b1:7f:e3:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:2C:1E:FC:5F:58:85:AF:10:DB:5D:48:86:11:72:E5:BD:E5:F1
            X509v3 Authority Key Identifier:
                keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:dd:db:45:5f:79:33:49:c1:51:7f:b2:e3:b4:7a:17:c6:
         24:b6:5a:73:42:c7:ca:37:9d:ae:d9:57:0e:b1:46:1b:06:ae:
         c5:c1:7d:e5:48:18:4e:e2:10:b6:f9:ff:d6:d8:e5:5f:1c:53:
         c6:89:d2:cb:fc:59:c5:2b:c4:cf:06:8d:74:79:d5:93:74:9c:
         9d:43:4a:92:97:f3:51:ca:90:70:06:80:17:12:1d:1c:1a:a0:
         1b:ff:a5:9e:26:74:67:c3:03:51:44:7f:b7:be:14:73:01:75:
         ca:5f:42:56:a5:33:1e:70:77:89:a8:c2:ff:5a:07:96:e6:eb:
         63:e9:71:2b:69:3f:0a:6a:a1:4f:91:ac:8e:50:c8:9a:cc:bd:
         6b:f3:d6:24:26:e8:c6:d9:81:36:e5:5a:79:47:71:3a:9e:5e:
         98:c4:fc:24:bc:8b:df:ca:41:39:45:21:c4:8e:52:2a:5f:e6:
         b5:1b:7f:05:3c:d2:f9:d7:2c:e1:41:af:65:2d:df:44:8b:2c:
         75:50:dd:10:40:fe:37:ec:2e:39:0b:a4:c3:5b:84:29:7a:7d:
         f2:d9:8c:5f:ca:8a:5e:21:a8:02:73:d8:5a:2e:29:12:24:8b:
         39:21:57:5b:37:fb:ea:01:b7:f7:ef:90:db:a0:0c:fe:60:30:
         33:52:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:15:20 2026 by rpki-client