Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          eFD/bzsFVgDzMfY2ZVvkWXco0ERgLbr5QItUZJrYLFg=
Subject key identifier:   AA:9C:1F:8B:4B:C7:2E:78:CA:35:6B:C3:0F:38:26:20:DF:E4:77:AF
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       019D38D3630FAA8E73D97E2BE995B892B966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 09:01:10 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:10 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:10 +0000
Files and hashes:         1: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: iV07P1IPtcqaJ9DHRh+JM3mAtYQFEeMETuzrSw1uKIY=)
                          2: grSCYxr48GkiiLbXBFVvfPRGYDo.roa (hash: ORzXiCXEzDF1CBNSnKaHZkAM6lGFJh0djBj0NrfV6eg=)
                          3: mzEPgdHmNv6bVe96qDtXIbjnZeI.roa (hash: tpqt79V0TYHF3bsLDiHBBd9SAjg/wnNF2aCiJu5NIss=)
                          4: nqWceW59cc5C0IxxcTrydFGb1mM.roa (hash: Mg96y0myQny6t5nbNgLVhCKgERm7JW8N5FpEDhGxjoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:63:0f:aa:8e:73:d9:7e:2b:e9:95:b8:92:b9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Mar 29 09:01:10 2026 GMT
            Not After : Mar 30 09:01:10 2026 GMT
        Subject: CN=aa9c1f8b4bc72e78ca356bc30f382620dfe477af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:d1:4c:63:7a:49:60:81:a6:92:fd:d9:b0:
                    a7:77:70:2d:0b:a7:fe:a3:e4:50:b3:88:58:dc:b7:
                    69:a4:3b:a1:3a:69:33:6d:47:ec:75:e8:d6:a6:1d:
                    8b:df:c5:f1:70:2b:28:94:83:66:4e:48:6a:6d:d1:
                    26:27:39:d7:e3:9e:21:b0:0b:1a:e8:f3:e0:68:41:
                    9d:70:a2:9e:e1:c5:2e:88:03:d3:df:d3:94:c1:7b:
                    ef:b1:a9:4e:93:db:fb:1b:f9:ce:7d:2e:b0:f0:7e:
                    dc:4f:23:8b:aa:b7:5a:9c:c6:c0:d8:45:37:dd:99:
                    91:df:32:e4:e7:ea:eb:97:50:45:fc:35:9c:f5:de:
                    d7:e0:5d:a7:e9:93:be:92:06:f1:6c:6c:15:5b:e3:
                    34:fb:5c:77:f5:2e:47:f0:1c:09:58:65:99:34:43:
                    b2:ee:88:6f:09:64:ba:08:cf:fb:3e:35:4b:61:61:
                    1f:b5:63:67:69:ee:ed:52:fa:d1:cd:31:6f:72:18:
                    bd:c8:78:7e:3d:08:ce:1c:27:c6:02:db:9b:f8:36:
                    26:ce:29:9e:c9:cc:a3:13:93:7e:80:df:c1:de:16:
                    85:ee:6f:66:2a:b0:94:d2:bf:d9:ca:1f:91:ae:7a:
                    5a:96:ce:cf:66:86:09:f4:64:09:e9:80:e2:c0:54:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9C:1F:8B:4B:C7:2E:78:CA:35:6B:C3:0F:38:26:20:DF:E4:77:AF
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:04:82:91:66:31:42:c7:1c:24:b5:bc:cc:e8:e1:c9:34:
         00:48:cb:60:af:8f:5d:21:fb:a7:c5:f1:9c:f0:ab:a5:25:8c:
         6d:22:17:e3:d1:9a:77:72:3f:51:81:41:c4:65:a6:ef:52:2a:
         6c:9c:a2:73:a6:24:d7:8d:df:8a:96:3a:b4:e2:31:8c:85:8e:
         ca:4c:2b:1d:d1:28:8d:49:52:d6:8e:c4:fc:ae:1a:23:b0:0b:
         ab:17:2a:ae:65:8c:42:ff:12:d4:61:df:42:e9:45:bb:80:0b:
         e5:46:26:03:16:7e:7e:39:b9:db:e4:5e:09:8e:9b:49:b5:05:
         5b:42:c8:44:15:32:19:da:a6:9d:04:11:77:b6:8c:16:61:0d:
         fc:56:91:15:4d:74:34:43:e3:07:60:ca:fc:44:c6:b8:b0:a7:
         92:ac:1d:78:77:6a:d0:9f:69:e7:c0:6c:74:c9:17:ac:f7:3b:
         24:ac:cf:0e:61:74:73:e5:e1:81:83:b5:69:3f:bc:68:c1:d1:
         72:6a:97:fe:7d:fa:bd:a3:9e:77:60:76:04:a4:3a:0c:d6:61:
         9e:97:01:95:a1:a4:a5:f7:d5:02:51:4a:ea:71:70:f7:7c:6b:
         0e:d9:d8:66:ef:be:3d:58:4d:69:a3:33:e4:d9:e9:a0:55:0f:
         91:57:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:11 2026 by rpki-client