Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File:                     Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier:          Ks7lqV4N/OyNsFR4UsfPKQyrD8TqTgERJAFNhq8FQAA=
Subject key identifier:   50:B5:C7:03:06:5F:D4:E9:8C:B7:68:5B:2E:20:E7:7C:9B:EB:40:C7
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer:       /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial:       019CE4EC7480148D9DD9830A0D4EAD0DC76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number:          E7
Signing time:             Fri 13 Mar 2026 02:00:27 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:27 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:27 +0000
Files and hashes:         1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: Kj29vo5rcAkRfIqRB63brQCI2MptsDLrS9fHmtmLNtk=)
                          2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:74:80:14:8d:9d:d9:83:0a:0d:4e:ad:0d:c7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
        Validity
            Not Before: Mar 13 02:00:27 2026 GMT
            Not After : Mar 14 02:00:27 2026 GMT
        Subject: CN=50b5c703065fd4e98cb7685b2e20e77c9beb40c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:96:dd:08:9d:53:5e:e7:59:bf:58:87:93:
                    8f:d7:a5:d4:3e:83:71:2f:96:70:08:da:16:8f:ec:
                    47:dd:18:96:0f:fe:61:f8:35:0e:1c:58:0e:d3:75:
                    34:5d:2b:32:e7:c2:a9:55:11:21:63:06:2a:f1:34:
                    03:1a:5a:2d:96:e4:ee:3b:44:18:f4:84:ce:d8:76:
                    af:78:6d:1c:17:2a:8b:37:2c:c6:66:8e:f3:7b:cf:
                    7f:fc:b1:63:3c:ad:87:f3:61:00:44:d7:ab:fd:3f:
                    9d:79:0e:6d:d8:9b:ab:47:dc:8f:86:00:d6:ae:56:
                    91:a2:49:b3:c4:c5:3f:5e:14:ac:51:dc:d1:a2:3e:
                    b7:1d:37:bf:bd:a6:05:b0:77:21:3c:15:48:bc:fb:
                    79:18:68:b8:74:b5:ab:52:dc:74:9a:23:80:65:31:
                    f2:30:a6:04:a8:50:09:d1:db:24:51:29:d9:bf:1a:
                    26:e0:bd:29:4e:61:23:ef:28:43:22:a6:0b:60:f9:
                    56:67:32:fc:b2:4e:eb:e9:b8:2c:34:85:65:82:0d:
                    4f:1c:6c:ed:ca:66:49:a7:bc:f1:a8:6e:d0:06:05:
                    76:06:45:9d:3b:25:8b:18:53:3e:e7:f5:cb:e3:d9:
                    55:23:36:77:a8:35:d6:d4:f2:c6:9a:ea:d3:3f:4d:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B5:C7:03:06:5F:D4:E9:8C:B7:68:5B:2E:20:E7:7C:9B:EB:40:C7
            X509v3 Authority Key Identifier:
                keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:21:cc:56:1b:3a:11:7c:a3:e4:e9:21:66:c4:47:4f:f0:1c:
         07:f0:35:42:7e:f7:8c:08:79:e8:dd:25:01:d8:90:cf:4c:92:
         06:a1:5f:7f:9c:fe:ff:d3:de:14:ea:65:8a:14:db:96:30:85:
         ce:27:3c:8a:44:e4:35:a5:8b:64:26:e5:b3:d2:4d:d1:ae:30:
         7d:7e:f1:ce:89:a0:01:20:cc:eb:70:f9:ab:12:30:dc:5a:6e:
         9e:9f:d4:ec:5a:27:a8:26:df:01:a6:78:75:ab:b1:4d:ee:10:
         d3:27:0e:61:51:0e:22:1c:6c:33:4b:69:0b:20:cb:63:91:7f:
         4e:b0:56:99:52:e0:28:72:b7:cf:6c:72:11:3b:75:de:f0:00:
         9d:91:9d:9e:68:0e:bc:23:4e:3d:a9:25:ae:4b:65:4e:05:9e:
         8f:7e:b7:64:18:60:a8:05:a8:e5:f3:5f:13:fc:3f:e3:c5:26:
         7e:d0:49:06:62:9c:e6:69:76:fd:bb:64:64:c6:24:c7:63:0f:
         fc:e6:71:ed:cf:57:62:9a:a0:d3:40:94:ef:cd:e7:91:3a:47:
         e6:e5:d1:73:aa:6e:f0:73:02:b3:64:07:f0:2f:63:40:57:79:
         35:0c:a1:b0:07:91:44:e5:e9:c7:94:d3:be:4c:6e:13:3c:b5:
         14:b0:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:46:26 2026 by rpki-client