Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          sYLSfAwnWoTUUwLv4npTvBwhIeIuu1W/5PwHAKxnQBI=
Subject key identifier:   46:D1:FF:B3:4D:1C:B6:94:85:FF:AD:58:02:5C:5D:5E:BC:2B:E2:44
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       019D3752320E9956428107756352EEDAA5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 02:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:26 +0000
Files and hashes:         1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: VCX+KYxb2UTFTbg31SFpZdp/gY5GPACRf1foo93qi9M=)
                          2: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (hash: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE=)
                          3: y1-SGhZC7LSQ3xAFEOGz9QyG038.roa (hash: G+7mp0FPcfU99vlwCxTLgDF4pbzcHad2tCEvXbWZJ1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:32:0e:99:56:42:81:07:75:63:52:ee:da:a5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Mar 29 02:00:26 2026 GMT
            Not After : Mar 30 02:00:26 2026 GMT
        Subject: CN=46d1ffb34d1cb69485ffad58025c5d5ebc2be244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:fe:93:7b:52:94:0f:dd:e1:0f:ea:b3:7b:
                    5b:f5:6c:21:6f:0e:af:d5:67:8e:8f:05:0c:4a:35:
                    fd:d2:cf:67:ef:f7:a2:84:29:dd:a5:39:0f:6b:8f:
                    da:ff:08:42:5d:89:d7:d9:74:36:f9:f4:44:a3:52:
                    c0:6e:35:85:44:9f:93:0e:64:0f:d0:5e:9f:58:63:
                    d5:e2:ce:cd:b0:17:97:5a:43:e8:d1:2c:82:46:88:
                    1a:6f:47:65:66:ea:1b:70:f9:ab:30:55:0e:af:dd:
                    b3:ea:bb:35:d1:7a:9e:37:4e:9e:0f:cc:e3:2e:d6:
                    72:a8:c7:ff:5c:9c:79:7d:5d:46:72:0d:90:51:02:
                    59:33:49:d5:bd:2d:ef:0f:d1:ad:43:e5:9c:c3:06:
                    9d:76:f8:12:24:09:15:7b:ff:8b:bc:a5:46:33:a3:
                    42:39:f9:76:f6:5a:ea:2c:57:53:ec:9d:03:30:bd:
                    0a:46:d2:2d:4d:53:73:b2:12:c1:8f:65:34:6a:cc:
                    cd:da:7c:aa:d0:08:dd:5d:28:14:f1:a1:1e:02:e6:
                    86:82:82:0e:f1:1c:af:13:8c:2c:15:ad:ad:4d:30:
                    36:2b:ea:12:c0:4a:1a:34:70:67:27:42:69:cf:02:
                    4f:b0:29:c0:60:f6:c5:15:4b:1c:3d:c6:08:30:d7:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D1:FF:B3:4D:1C:B6:94:85:FF:AD:58:02:5C:5D:5E:BC:2B:E2:44
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:82:38:01:ae:cc:7c:b2:04:bc:4b:d1:d1:8d:e5:7f:f7:
         56:f1:37:55:29:01:60:d5:41:a9:1f:5b:7c:63:4c:1c:23:68:
         50:3e:6b:30:cd:66:bb:be:c2:32:c6:13:9d:4b:d1:cc:4f:90:
         f1:05:c4:2c:f1:28:01:ab:90:b8:b6:35:0e:c3:47:d3:2b:32:
         f0:6c:19:29:7d:3a:60:84:e6:35:11:e5:0d:25:ff:8d:f7:64:
         7c:d1:95:73:40:d9:06:c8:7a:10:37:3d:13:d4:1e:9e:6c:b8:
         5d:79:df:e5:26:58:df:af:80:cc:fc:d4:ae:64:c8:a5:6c:9e:
         92:a4:59:5f:b7:df:33:38:2f:6e:62:54:e3:78:c4:1e:4b:47:
         fb:8e:a1:9f:d6:b0:cd:48:70:dc:76:f0:1c:ee:93:a0:f7:30:
         b0:87:2b:ee:93:73:78:f3:c1:83:6c:93:50:89:38:9a:c2:43:
         f2:07:31:22:14:cf:41:b6:7c:a5:33:f4:41:81:8b:a0:fa:e3:
         50:5f:84:71:4e:21:cb:05:4a:da:33:61:9d:b2:4f:44:a0:9f:
         5f:e6:33:97:b7:6c:4d:4a:4c:b4:e3:2d:a8:72:a2:9b:de:90:
         57:32:56:2f:5a:3b:a3:38:d9:3f:7d:cd:37:b4:e6:0d:ba:b7:
         31:cc:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:24 2026 by rpki-client