Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          1vY140Z0mCscxjlh07Aelnn1YCkFKLnzDZ0NF99PunM=
Subject key identifier:   F0:52:5B:99:64:3F:43:47:9E:95:BC:2C:C7:35:F3:42:26:14:BE:AC
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019D37528EED2816E5E794350B166A95DEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          189E
Signing time:             Sun 29 Mar 2026 02:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:50 +0000
Files and hashes:         1: S9aocZiWXKfHvZNPaf5WoEf7SnA.roa (hash: /8QyR50KJ5D46vkCWxohVgZ13WY9lfH7A6s3dBVjWko=)
                          2: UOZsE5b35JNXfg_IIsLyehdpPrs.roa (hash: B5Ar4Jz3LgUlDqwY0/hfOFF8E3tyzpK/7QyvL/RqoB4=)
                          3: cOUUKUyq3fFSSy6l5-mjbaxhQhs.roa (hash: KLqb5U6DgNfIS88yDz/06LUw3OWjpinY/pIyqKDYmR4=)
                          4: jEDoIOuzE2brdF7d7iq9hFOFlPY.asa (hash: kX7sndI49J41h5949MxSdq1CeT/ptM/wjBq7+tQD3mw=)
                          5: uRY9g6Gy3YyX_PRylcS32inQ9rs.roa (hash: 3mJ9ZcgbYGOOr6G6keum/3GZ8lqgRL5uINIeRXZgMkI=)
                          6: wTS__dIeTC3lA6AssMEajeAKTdM.roa (hash: idBhRu7TCGlVKLYCjs+6R4IiVK5lmWxVN8xPxI2XQ1M=)
                          7: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: pZKiID2hGwPpB3J2psmpqbhfV26nNnVC8fct7rOQh5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:8e:ed:28:16:e5:e7:94:35:0b:16:6a:95:de:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Mar 29 02:00:50 2026 GMT
            Not After : Mar 30 02:00:50 2026 GMT
        Subject: CN=f0525b99643f43479e95bc2cc735f3422614beac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:3e:76:d1:8f:06:bf:74:93:60:9f:1c:b6:
                    66:0e:46:b7:54:77:ab:0c:12:69:1c:22:0e:12:3e:
                    ce:fb:d2:e2:72:58:87:f5:fd:a8:10:48:82:40:03:
                    dd:80:98:fc:19:d1:ec:57:cf:bc:1a:93:c7:52:47:
                    45:16:e4:72:c6:a3:77:36:b8:ee:7a:cc:e9:8a:ab:
                    cb:15:70:46:46:56:19:37:9f:e2:83:c7:7f:d1:01:
                    2f:19:f7:ce:81:d1:af:19:81:62:21:45:31:fc:41:
                    9f:b6:94:3f:3d:3e:ee:47:05:b2:c7:b1:53:4e:ee:
                    c4:a6:10:a1:7f:01:49:ce:ea:71:aa:e2:c4:13:56:
                    18:a3:07:ef:58:4e:b7:cb:dd:bd:5b:1b:b0:a9:36:
                    30:e2:c7:15:70:dd:4b:5f:f0:6a:e8:fb:32:ff:d6:
                    b1:1f:68:29:8a:64:57:9d:8c:b9:19:7f:d0:25:6c:
                    e2:31:22:4b:80:5b:fa:07:c2:27:c1:27:03:56:4c:
                    a1:76:f7:b2:fe:98:bd:dc:52:b7:f3:df:76:2c:f8:
                    ea:cd:e8:58:60:ab:f2:b8:53:4d:94:e7:06:da:00:
                    36:ed:b6:72:64:1b:cd:22:dc:cd:a9:da:ae:31:87:
                    c8:fe:82:53:9c:1e:65:4c:69:e1:9a:14:a4:c1:e8:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:5B:99:64:3F:43:47:9E:95:BC:2C:C7:35:F3:42:26:14:BE:AC
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f0:0e:be:a8:79:2b:05:97:b6:b6:37:f6:22:3c:42:f2:c4:
         cd:63:e6:31:d8:60:f2:1b:43:38:4e:20:cd:45:66:ba:c3:16:
         dd:68:86:e1:f4:fd:2f:38:48:3a:cd:b0:d6:d2:3b:6d:cd:72:
         b9:51:fc:73:b8:c5:75:4b:82:41:e7:51:93:06:f7:ab:9c:cd:
         0e:7c:1b:6c:c7:5e:a3:95:03:29:f3:bf:3e:d7:40:e7:4a:67:
         f4:87:ac:08:de:3a:35:f9:15:df:41:9e:ff:92:1a:dc:c7:a7:
         d0:d8:28:37:91:3a:80:33:7a:b7:72:cb:13:b0:db:31:45:2c:
         b7:67:bd:4c:55:ca:29:b7:6f:8b:b2:bf:d3:a2:40:fb:97:b5:
         72:7e:99:c8:a4:11:6a:bd:f3:f1:ad:09:c4:60:16:8c:dd:ca:
         74:29:15:53:78:53:6f:d2:10:55:45:0f:9e:1a:6a:9c:a8:ba:
         2e:5e:2b:e3:21:4c:79:6c:ea:09:6b:34:8e:81:89:30:b4:88:
         da:b4:a6:3e:69:e9:7c:db:af:34:1c:b3:5e:90:9c:3f:8c:6a:
         cb:ca:e8:52:35:c9:3e:23:c8:bc:81:77:0e:ae:4d:8d:66:04:
         e9:29:4d:78:a9:4f:8b:15:97:e9:17:ff:b4:68:ff:e0:3f:4f:
         41:72:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:55 2026 by rpki-client