Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
File:                     MeZZHRoE1q_h7V9O0B05SuUUhYk.mft (raw, json)
Hash identifier:          VUsKKt1pj48VmFjtm2fU61OvwHQ9IS+tGEhJhv/Bt/8=
Subject key identifier:   0A:B8:47:91:B7:2E:9D:AB:02:74:6F:84:05:19:BA:15:92:EF:84:DF
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Certificate issuer:       /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial:       019D389BC9799B6B70EA0CC0ECC51E6FD98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
Manifest number:          088B
Signing time:             Sun 29 Mar 2026 08:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:26 +0000
Files and hashes:         1: A3lVBLx0tfXqu8Z1p69hC72YSag.roa (hash: jjAjeAWWLQ7XK9pNf9wldiLMOA+vzwkIFXt7EDHljaY=)
                          2: MeZZHRoE1q_h7V9O0B05SuUUhYk.crl (hash: L9gHuvx7RGRNEgA+jk8PLjCXCuiX3HNxwtxRQi6qp+8=)
                          3: SxGsz39JK4elqIESwZ8Cfqg5W6w.roa (hash: 12+/ABqOQXT9ibPvlhUH6RlbzbI9x38jh4FCtzMqGuY=)
                          4: _P35jS1YdYMseUzMHuI97ooNJeg.roa (hash: /gCkgKwVc1WRgNPEwprmDB3zy3RVJ0h/ka2X69aylhQ=)
                          5: csbbsPh9KC49mBnhTppZksDsY40.roa (hash: mPaBJJIoQKQRRnr2VJcXQT7Jq69TiXABx2jiGwRlgYY=)
                          6: lKlsXSW_UufTRSeT5DpXUJKMYeM.roa (hash: js4hI1WGiX+pBxnEihMMzWhTJzxKRFZYyb/eWGT+JX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:c9:79:9b:6b:70:ea:0c:c0:ec:c5:1e:6f:d9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
        Validity
            Not Before: Mar 29 08:00:26 2026 GMT
            Not After : Mar 30 08:00:26 2026 GMT
        Subject: CN=0ab84791b72e9dab02746f840519ba1592ef84df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:e1:74:37:ee:85:33:0b:f4:1e:b4:48:be:
                    ec:eb:3a:21:3d:fb:bc:ad:a2:22:fe:37:cb:6d:e2:
                    6c:1d:67:d5:54:43:f0:54:fa:d1:5b:05:37:5d:5b:
                    4f:6f:d4:7b:a0:1f:f8:9f:28:5a:e4:ff:54:18:21:
                    64:0a:15:c8:e8:b8:2e:ce:82:b7:b7:57:17:3f:6b:
                    a3:41:90:1b:0e:a7:70:ec:01:ae:51:64:b2:6f:e0:
                    29:d9:a1:c5:74:89:3a:11:dd:cd:d0:f3:63:9a:7b:
                    8b:81:f1:d5:a1:5f:62:32:82:3e:0e:1f:1e:7e:2e:
                    fe:fe:0c:31:48:8d:55:aa:5c:4e:af:be:7b:69:26:
                    7b:19:58:75:8c:3b:9d:43:49:67:c1:3b:3b:82:87:
                    fb:83:56:e6:ea:eb:01:df:16:eb:4c:0a:5f:f8:6f:
                    6a:9b:a8:f2:f0:dd:da:d3:56:a1:72:12:b6:e1:d6:
                    6c:07:dd:82:35:d0:75:db:63:ee:85:7c:6b:72:ef:
                    ae:75:eb:99:a5:bb:57:1b:84:4f:2b:a8:bc:b8:49:
                    11:1f:6e:06:51:72:0a:07:1f:1e:4c:19:1a:19:2d:
                    b6:9c:5c:86:8c:90:7e:05:ee:3a:a0:6b:ff:d9:a6:
                    9a:fc:e9:7b:3f:dc:9a:9f:a4:50:4c:41:0b:82:4c:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:47:91:B7:2E:9D:AB:02:74:6F:84:05:19:BA:15:92:EF:84:DF
            X509v3 Authority Key Identifier:
                keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:c5:eb:43:3c:9c:ec:9b:49:f3:c5:96:31:e0:89:da:be:
         89:53:d0:a3:53:5b:de:37:ec:68:20:64:e0:8e:51:48:7e:c6:
         0b:22:4e:36:34:76:b6:da:c7:62:97:85:03:4b:9c:8e:16:89:
         8c:e7:33:a4:7c:b5:42:50:8e:3f:09:5f:56:91:1d:b7:d4:e6:
         9f:e4:fd:7e:d6:d0:00:29:ac:1a:38:cf:99:05:84:cc:e0:55:
         3e:99:23:c9:9f:9f:03:4a:3b:fc:61:9b:3a:33:7d:5e:64:5c:
         ad:95:a4:f9:5d:3d:a0:45:cc:23:57:92:75:ad:00:63:80:0a:
         7f:48:f5:b2:e5:67:66:66:57:38:10:bd:dd:45:cf:8b:33:41:
         64:88:2f:0e:b1:81:8e:03:09:27:11:f5:fd:9f:00:d9:a2:18:
         46:18:81:e9:cc:85:05:ea:cf:9d:08:ff:fb:13:9e:c5:43:e5:
         b9:b7:c2:8d:e5:f1:2f:6c:6f:07:66:05:c3:d4:06:6f:77:dc:
         b8:36:18:91:8a:36:75:a3:3f:b3:2f:2f:9a:fb:39:c1:a3:e8:
         f7:d7:57:ea:ed:b3:fb:21:94:6a:e0:b1:92:34:c4:fc:b4:54:
         26:b5:43:6b:d3:44:1d:8c:ee:e9:69:bb:4a:14:d3:15:84:ec:
         cb:5c:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:05 2026 by rpki-client