Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File:                     mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier:          plNmQOR5Yt2vG/K0eutxBClNj+fQ+ZGVFcjFa1/rZ5s=
Subject key identifier:   3B:93:E4:30:1E:0B:99:E9:39:4E:0E:A8:8C:F9:8A:EF:1F:BF:8C:59
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer:       /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial:       019D38D3702565F2BD78B8B8EAA13DF3DD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 09:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:13 +0000
Files and hashes:         1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: 2zbKVNzYHMHDYS3uJDJMftoq/bpOZ85YywJIDFqij3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:70:25:65:f2:bd:78:b8:b8:ea:a1:3d:f3:dd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
        Validity
            Not Before: Mar 29 09:01:13 2026 GMT
            Not After : Mar 30 09:01:13 2026 GMT
        Subject: CN=3b93e4301e0b99e9394e0ea88cf98aef1fbf8c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:64:3d:33:73:92:c1:85:12:9b:af:c7:ca:
                    b1:09:83:9a:39:3b:c8:a4:0c:de:4d:de:7c:bd:41:
                    6a:07:2c:47:7a:8d:55:fd:87:d9:69:5b:81:37:89:
                    57:5a:38:69:3b:8b:0e:51:dd:2a:cb:4a:15:18:b7:
                    ba:f2:d2:3e:c7:b1:bf:a0:2c:52:a6:16:e0:21:23:
                    40:d6:24:99:bb:e3:54:d9:12:dc:f7:a5:10:75:d1:
                    3a:ad:d1:c6:66:11:51:08:8c:43:2d:bc:37:e1:85:
                    31:c8:4f:46:a8:7e:17:f6:b0:bc:8b:02:0e:16:42:
                    61:d7:a5:7c:bf:f6:56:9b:ff:b0:2b:4e:fd:f5:b4:
                    93:df:2b:ae:b1:d2:dc:83:6c:9f:fd:bd:b9:a1:44:
                    de:72:0f:96:20:b6:ef:e9:22:06:d0:b9:10:16:9b:
                    06:9f:16:e5:44:34:9b:5d:8f:dd:5c:4b:dc:6e:30:
                    53:5b:9c:65:82:4d:21:92:68:8a:07:6f:43:42:ed:
                    7b:83:0e:b2:e0:c1:48:c5:cb:ea:07:14:42:94:74:
                    4d:3b:eb:1d:93:ec:b5:b2:34:bf:1c:b2:78:08:7a:
                    2d:ea:d1:d8:d4:b3:9a:0d:e2:6f:f8:ff:03:7d:69:
                    a9:57:05:ec:77:d0:de:41:2b:a9:46:a0:c2:50:e1:
                    37:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:E4:30:1E:0B:99:E9:39:4E:0E:A8:8C:F9:8A:EF:1F:BF:8C:59
            X509v3 Authority Key Identifier:
                keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c4:1c:dd:19:b2:84:b5:72:ff:e5:89:0e:05:bf:96:b0:4f:
         8a:a8:58:c1:d3:e0:9d:29:fb:35:30:4a:70:0f:32:c6:43:ad:
         93:b3:d9:78:11:2f:41:a4:fa:57:2f:33:1f:f7:cf:37:1a:05:
         7d:b1:77:a5:fc:78:99:f5:0d:7a:51:ed:82:d4:c2:22:6f:86:
         b3:e0:dd:4c:4c:2a:79:a3:12:5e:89:f9:e7:19:91:62:b3:86:
         01:9d:79:5e:86:7b:47:bd:35:52:ac:a9:b6:de:8f:85:84:9b:
         13:4b:f1:aa:c9:c7:51:b0:a2:7a:5e:6b:62:7f:3a:4d:47:a3:
         fe:04:e2:4d:04:33:e2:65:85:06:b6:ab:fb:8e:3b:25:d3:d4:
         a8:d1:59:ae:b2:ec:c3:4f:31:6b:82:c2:b6:82:62:63:0a:8f:
         51:4a:98:03:23:92:fd:d7:47:1d:2b:3c:99:4c:43:e9:9e:04:
         bc:80:87:16:16:29:84:6e:ec:19:8e:76:64:34:af:65:ec:1f:
         16:51:fb:bf:27:9b:6c:16:3a:72:6b:28:be:69:df:cf:99:8e:
         bb:08:80:cb:2d:9e:4e:f2:18:d4:37:e1:e7:0f:5a:78:75:b9:
         9c:07:d2:da:f3:e5:2d:28:85:f0:97:72:a5:bd:06:b6:12:39:
         ff:52:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:41 2026 by rpki-client