Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File:                     Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier:          Aqr+kXVXpKMVnqEGg9a5THPtP1ZwszSDz80U6DnW7Cc=
Subject key identifier:   C8:BA:66:F8:B3:7E:C4:21:5F:2C:8E:2C:4C:BD:70:89:1F:05:8A:EB
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer:       /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial:       019D3AC1A816373B5836FBC5F917DCB5D6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number:          036F
Signing time:             Sun 29 Mar 2026 18:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 18:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 18:01:03 +0000
Files and hashes:         1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
                          2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: A6OX0Z/8PQSvooMx4gyTB3TwbrcPdEW6xDWYFYlxFQY=)
                          3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
                          4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:c1:a8:16:37:3b:58:36:fb:c5:f9:17:dc:b5:d6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
        Validity
            Not Before: Mar 29 18:01:03 2026 GMT
            Not After : Mar 30 18:01:03 2026 GMT
        Subject: CN=c8ba66f8b37ec4215f2c8e2c4cbd70891f058aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:fe:9d:a4:a5:88:12:75:f4:8b:73:a5:d5:
                    9e:cd:d2:fa:93:b2:30:98:f4:a2:d7:64:fc:0e:96:
                    e2:58:6d:7c:41:53:58:55:33:99:48:ea:8a:5b:c4:
                    87:41:b9:c8:4d:59:fe:65:c3:f4:bc:f8:de:33:ad:
                    1f:01:69:95:20:b2:e1:4a:ba:36:86:f2:c1:3e:8a:
                    17:78:b8:61:93:b8:89:12:5e:be:a4:7b:a4:81:6c:
                    c6:4e:43:8d:bf:42:0b:52:dc:e7:25:04:d5:19:4b:
                    16:c1:24:ba:1b:f5:a3:d7:db:e7:a2:d8:92:43:19:
                    fa:d3:f2:0b:35:53:05:b8:d3:81:7f:0e:87:7e:26:
                    b4:d0:02:ba:0f:c9:eb:3c:12:bd:22:a8:c2:85:90:
                    fd:30:78:f3:96:c6:c4:1f:9d:52:fa:0c:2b:bb:f9:
                    ea:e8:fb:02:86:9b:0a:62:35:8d:c8:24:08:48:ee:
                    6a:6e:e4:ea:0f:6f:5e:45:4e:48:ae:a3:a7:8d:26:
                    e2:76:dc:5d:05:b6:8b:42:b4:35:ee:e9:62:0d:e1:
                    01:fe:95:5f:eb:59:20:83:f0:0e:de:1d:b2:44:65:
                    88:d0:f5:5f:2b:4f:8b:b6:3c:f6:f3:5d:05:92:0f:
                    f1:f1:78:d5:33:57:57:94:ee:5c:71:f9:f5:d8:a0:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BA:66:F8:B3:7E:C4:21:5F:2C:8E:2C:4C:BD:70:89:1F:05:8A:EB
            X509v3 Authority Key Identifier:
                keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:56:33:15:47:82:6c:cd:3b:84:14:57:08:33:63:88:46:80:
         6c:4e:a9:72:5c:80:4a:11:53:32:f0:cd:0c:c5:17:fa:e2:aa:
         07:ac:59:40:d1:be:da:d1:51:cd:fb:20:4a:3b:56:32:93:31:
         db:c0:08:a3:fb:28:23:fe:38:94:1e:4d:e2:eb:14:45:42:16:
         2a:2e:c4:eb:e5:ce:70:9e:4d:bf:bb:57:e5:93:7e:42:da:be:
         76:f5:2a:e7:e3:57:62:8f:ff:83:2e:f3:21:c7:71:fc:05:8f:
         9c:d1:f8:3a:fc:e5:5b:65:a5:9c:b8:ea:c4:6d:12:d8:32:50:
         75:71:a6:81:6e:07:3a:51:ab:f2:55:3f:07:d7:48:d0:90:ff:
         e4:3d:f9:65:7e:ae:85:40:4b:a1:b5:75:40:f2:59:cb:ff:11:
         08:e3:02:f4:94:16:32:31:79:22:0a:67:39:94:af:d7:80:96:
         35:eb:61:64:3d:0c:55:02:94:eb:1d:cd:d1:56:80:b7:ee:d8:
         22:06:35:02:94:b3:7b:2c:d0:d5:6d:72:fe:ba:16:10:d0:9d:
         ef:2c:44:47:1e:e3:91:92:c3:e6:00:5c:06:8b:83:ea:14:39:
         2c:1c:26:24:2a:73:81:4b:8b:39:38:ce:8d:62:d9:46:4d:76:
         00:46:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:39 2026 by rpki-client