Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File:                     Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier:          GmtJyYfIGM++BUwd8igDr5xuBHRDy36dvaLbgL+dlcc=
Subject key identifier:   D0:84:33:95:FF:A6:A9:13:EB:56:7A:34:28:A3:9F:F6:11:F6:22:DB
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer:       /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial:       019DD5AE784D35402198C41C21BF04E704C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number:          078D
Signing time:             Tue 28 Apr 2026 20:01:14 +0000
Manifest this update:     Tue 28 Apr 2026 20:01:14 +0000
Manifest next update:     Wed 29 Apr 2026 20:01:14 +0000
Files and hashes:         1: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: Zlx0df4HcE63OLj/QPLDD/DKDHD1qsz63XeCph5moug=)
                          2: zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa (hash: adtaF+5W4MxrQ+0iffQsTYlJHGFBvciDfETz57Ec0LI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d5:ae:78:4d:35:40:21:98:c4:1c:21:bf:04:e7:04:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
        Validity
            Not Before: Apr 28 20:01:14 2026 GMT
            Not After : Apr 29 20:01:14 2026 GMT
        Subject: CN=d0843395ffa6a913eb567a3428a39ff611f622db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:63:05:b8:35:34:aa:8e:6c:f1:7b:74:51:
                    32:98:47:1b:d9:50:c9:10:3c:b0:50:6b:b6:c0:a3:
                    cf:18:5c:ae:69:6f:a4:b2:41:9f:ec:de:36:db:5e:
                    50:44:5b:ef:37:85:38:c7:28:e0:0c:16:e0:16:89:
                    81:62:e6:f6:f3:b5:e4:6a:a9:cc:36:a5:19:91:7f:
                    20:1d:a7:97:e2:2a:2c:4f:e7:df:81:24:8b:f4:00:
                    84:1f:cd:37:c2:60:66:fd:29:ea:9c:78:24:a3:96:
                    f1:45:a8:34:3e:e1:56:a0:48:a8:f4:52:4e:36:56:
                    71:b3:ae:c4:96:ef:0f:14:d5:8d:6e:21:2a:27:d1:
                    95:28:18:fc:96:c7:93:b2:f0:84:7b:b9:d5:91:51:
                    bf:ea:a9:3f:d5:dd:94:b3:17:e4:3a:52:47:ac:82:
                    36:e6:7b:98:c3:29:35:00:9f:67:46:a2:82:47:ab:
                    ed:e3:ad:72:95:6b:f1:e5:4c:18:69:8f:50:1c:d0:
                    1e:3d:36:22:1a:fb:2a:92:87:4d:ad:8a:12:01:40:
                    86:b3:58:8a:24:6f:90:f8:5d:82:73:56:b7:46:05:
                    49:fe:07:c2:19:87:c9:9c:5c:e4:f0:93:97:50:35:
                    bd:39:44:86:40:9e:9a:ef:08:c2:0b:d2:9b:32:67:
                    f5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:33:95:FF:A6:A9:13:EB:56:7A:34:28:A3:9F:F6:11:F6:22:DB
            X509v3 Authority Key Identifier:
                keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:69:4c:a1:ca:43:09:76:97:70:64:9e:e4:45:8d:10:20:
         d3:36:4f:35:a4:27:3e:b6:07:70:9a:c9:36:c2:59:66:cd:38:
         2c:87:0e:37:ec:2f:ee:b5:2d:2e:33:0e:40:3a:22:b7:6e:cc:
         94:da:3f:11:ba:36:fa:9c:64:a3:c2:b9:4b:1d:5f:26:9f:40:
         bd:0e:21:2c:a4:74:20:9f:7f:10:59:e1:ab:94:02:04:19:86:
         d1:db:d7:51:ae:27:33:e7:25:d4:88:63:91:6d:20:5c:d4:18:
         1f:4a:86:53:39:8b:c7:f1:95:22:22:73:f4:ec:7c:44:0d:41:
         bf:9f:fa:cb:49:eb:5f:ce:9a:ab:fa:09:61:ab:16:ac:1a:8e:
         98:d5:6e:fc:c5:3a:f6:a8:c8:25:f6:81:37:ca:af:fd:6b:57:
         4e:6f:9e:d1:6d:c7:3e:01:0e:95:ad:1d:41:07:c5:95:7c:2a:
         58:31:b6:bd:2f:92:60:89:85:06:1f:f5:9c:29:21:23:57:d7:
         c4:f9:4e:3f:5b:bf:c3:61:d6:fa:55:a2:c4:09:99:ea:3f:f9:
         d9:f0:5f:8a:19:ae:77:5c:72:c3:12:50:ef:88:f9:e0:2c:c0:
         f8:d8:63:87:9a:66:8b:85:39:da:1d:eb:14:35:54:8c:a0:cd:
         7b:b3:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 06:48:08 2026 by rpki-client