Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          YslST0qhfDR9fFjadpi4WsK7vtnsfJEzMwp9yFugOTc=
Subject key identifier:   9D:93:4A:DB:14:11:E7:07:84:4B:E5:1A:6A:5D:AE:21:ED:E1:C0:F4
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019D3564A8A5D3A8845DBD483AA96B08DD9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          1563
Signing time:             Sat 28 Mar 2026 17:01:22 +0000
Manifest this update:     Sat 28 Mar 2026 17:01:22 +0000
Manifest next update:     Sun 29 Mar 2026 17:01:22 +0000
Files and hashes:         1: 4QHBn9ucdlKQY-OkJvc7Ig6NIBo.roa (hash: 7wIOmcrsKNPm1pT+25Dr7MjY3mEMyojJiBNkSyV1lM0=)
                          2: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          3: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: ZEnBlZMHj+w6ycE/WmXb1/8/ROneqyFw4A7cWhYv694=)
                          6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:35:64:a8:a5:d3:a8:84:5d:bd:48:3a:a9:6b:08:dd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Mar 28 17:01:22 2026 GMT
            Not After : Mar 29 17:01:22 2026 GMT
        Subject: CN=9d934adb1411e707844be51a6a5dae21ede1c0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:19:36:a0:ee:57:21:1f:ad:8d:da:0b:81:
                    2c:e9:58:0b:14:cb:a6:6d:75:d4:52:39:22:cb:10:
                    db:e6:1b:3a:e7:4b:94:0d:74:cc:16:a0:b1:f7:e1:
                    d8:fa:66:89:8b:1d:09:0f:46:c7:5e:7f:06:8f:b5:
                    3d:b3:fb:f4:a7:85:8a:e9:46:9e:6b:dd:e7:dd:d6:
                    9f:ec:c8:bb:13:37:aa:d3:77:86:58:36:43:20:58:
                    a8:50:b0:ca:d9:6e:58:e7:16:d1:63:e5:a6:ed:4b:
                    1a:8b:7a:4d:b4:89:b6:a7:86:43:00:59:18:bb:b7:
                    af:23:45:c4:ac:77:54:a7:81:05:f0:49:f2:5a:47:
                    1f:e0:4e:7c:c3:46:e0:05:91:65:f3:21:49:d6:5c:
                    54:0c:d7:4c:4c:dd:10:33:64:e9:56:ea:3c:6c:d5:
                    61:f3:51:7a:6d:f1:fc:ff:b4:55:d1:8b:da:0f:b6:
                    33:59:1e:58:a7:ea:da:2c:a1:91:0e:82:a0:2b:9a:
                    ce:85:23:f2:9b:6a:ba:b0:ed:71:e2:9f:70:aa:7a:
                    06:4e:a9:6d:ce:c7:d4:82:5a:c8:17:ec:06:d8:4e:
                    49:a9:5a:51:e0:1d:34:63:3f:39:35:9d:0e:59:a0:
                    17:44:2c:37:f3:02:30:b6:87:f1:60:22:67:e0:cb:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:4A:DB:14:11:E7:07:84:4B:E5:1A:6A:5D:AE:21:ED:E1:C0:F4
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:33:e3:06:20:1a:e9:a4:72:d2:19:35:58:d7:d0:bd:23:be:
         ae:84:99:de:29:85:0c:2b:13:ef:44:cd:43:5c:67:85:ef:ce:
         e1:e1:04:4d:ba:58:2c:df:eb:2e:80:3e:a3:bf:c6:f7:67:c1:
         7a:cc:64:cb:e1:18:e5:d7:c2:8b:f0:13:17:6e:f3:88:23:f3:
         ee:df:00:9f:8e:9e:7e:da:6e:d4:8b:53:f1:8c:3e:67:1a:41:
         c9:d5:f5:48:25:fa:8f:d1:2d:01:c4:55:70:81:d7:c1:c5:3e:
         4b:0b:6f:f0:33:0f:53:31:54:60:bd:69:82:f3:3f:a5:b3:e6:
         07:e1:24:5f:0e:47:b5:b5:b3:c0:b4:3a:79:d6:32:98:71:c5:
         42:df:f1:8c:c9:90:8c:b2:64:c4:54:c3:c1:12:c7:85:fa:38:
         85:74:11:8e:7d:c5:7b:10:49:2d:38:5e:05:85:e5:99:58:87:
         3f:89:48:f5:92:a7:33:76:13:e3:f9:a7:15:a0:5f:1a:62:fe:
         03:58:6a:57:60:34:09:3f:07:45:82:6a:f0:1d:9a:cf:41:29:
         99:63:ac:23:eb:cd:b8:72:57:f7:87:cb:4b:61:26:fb:0e:80:
         4a:5a:c0:90:b8:35:14:6c:bd:36:be:09:a2:56:02:23:5f:7b:
         35:58:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:45:46 2026 by rpki-client