Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          qyL3MLDjfsJogHkTYT1/pinXuSgK3ZCXj2ghUOaz9y4=
Subject key identifier:   EE:EE:CF:2A:95:11:6F:11:26:AA:D2:BB:7B:37:69:33:C1:C9:20:23
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       019D38D2AA5A2CB21354D68C3965933C3E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          117E
Signing time:             Sun 29 Mar 2026 09:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:23 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: HmzijLAwPETZJL6rnOLK90dssy5C4F81or5heUoXWtA=)
                          2: A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa (hash: ZJ8TUlGdBNBoCbzk5y55t6BbjVatJaYuCVCQyVMAmI0=)
                          3: Z03CvgZnFdZytl33-YciJtYTgkU.roa (hash: QAeqd5R10qGg/87fO27tsqGhGaG/xmcTXnHVP0UeCmo=)
                          4: mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa (hash: M+cnkCbpwUSVeDkZOpqH/x6dTTigBQw7I8bx8zhShTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:aa:5a:2c:b2:13:54:d6:8c:39:65:93:3c:3e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Mar 29 09:00:23 2026 GMT
            Not After : Mar 30 09:00:23 2026 GMT
        Subject: CN=eeeecf2a95116f1126aad2bb7b376933c1c92023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e4:a1:cc:e6:77:1c:4d:8d:af:52:dd:67:00:
                    66:70:5e:9b:ed:6d:37:2a:23:51:6c:2f:b9:7f:95:
                    49:0f:e1:3f:4a:15:1b:a8:4d:c0:91:ea:21:2b:e5:
                    2f:19:ae:c2:3a:3e:f1:d9:13:a4:f9:dd:91:dd:9d:
                    cf:98:14:78:2a:bc:2a:67:ac:8d:a2:5f:0f:f4:90:
                    a8:cb:0a:83:f0:5d:e2:54:75:f5:74:38:52:82:47:
                    f6:f0:55:87:68:8a:e0:cb:31:9e:3f:39:6c:bb:c9:
                    80:2a:df:a0:0a:04:c7:c5:ff:65:88:06:c8:fc:0b:
                    b3:75:1d:59:61:1f:25:94:ea:9a:c0:9a:32:71:be:
                    be:11:96:29:09:3b:37:4a:b7:85:50:5f:ec:01:0f:
                    da:9b:42:51:33:31:28:c3:ca:68:e0:c1:5f:83:a8:
                    ed:d3:49:f0:64:b0:bb:a6:60:43:d1:34:d6:7a:10:
                    73:eb:94:0c:1f:e3:67:5d:1d:c4:5a:49:a7:1e:ad:
                    f9:d8:83:f0:b1:9d:ad:f5:9d:9e:21:d1:d1:62:e8:
                    85:20:fe:eb:c6:60:00:c0:da:79:fe:25:41:54:4e:
                    54:34:75:31:b7:51:d9:e3:4c:96:c1:6b:f6:2d:d7:
                    9e:0e:be:9e:fc:a7:15:1c:dc:d5:06:08:48:db:16:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EE:CF:2A:95:11:6F:11:26:AA:D2:BB:7B:37:69:33:C1:C9:20:23
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:73:9c:1b:57:a9:d0:4e:3f:ae:c3:8a:da:d0:0f:50:5c:4d:
         5f:a8:9f:58:bc:1e:3e:fb:b1:53:b4:e0:2e:75:16:38:95:fa:
         1f:07:b6:88:0e:3c:d9:1b:63:f4:bb:09:ae:8b:19:7c:bd:6c:
         8b:99:ed:24:5f:a5:64:dc:3b:77:7b:e8:f8:55:c3:a1:95:98:
         31:be:ca:2e:02:71:e4:37:2a:44:b7:89:6d:a2:59:9c:0b:87:
         63:13:57:d9:21:ae:6e:d6:25:f7:c3:10:d4:fa:38:5e:6a:c1:
         10:51:ac:fa:44:44:be:35:c6:22:30:b6:4f:ea:8b:e4:31:94:
         33:ac:fe:2d:8f:bc:57:97:1b:e0:0c:f9:fa:22:6a:59:84:1a:
         1b:66:3a:5b:d7:2e:da:6e:f8:b3:e3:6f:c9:4f:27:b5:63:6a:
         ff:27:68:78:6a:38:2f:c8:73:44:0d:a3:a7:ea:8a:5d:d1:fe:
         0c:3e:e9:0f:48:99:6f:fe:7c:94:46:81:3f:5c:58:d5:34:d1:
         a9:b7:2b:fb:f1:18:87:fc:71:54:f7:79:48:b5:51:29:50:a9:
         5d:88:31:d0:cb:1f:a6:ab:02:25:67:70:79:00:a0:9d:a4:a3:
         3a:c8:ad:00:75:3c:be:cd:ec:d3:5c:c6:38:69:db:65:d3:87:
         75:fc:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:42 2026 by rpki-client