Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          zR5fbY5YOOunYO9++p4xEh8WR3s3HQE/XUjqy5Ml4kk=
Subject key identifier:   EE:FA:CC:9F:19:B9:71:DD:23:A4:A5:93:46:74:3D:E5:1C:8C:20:37
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       019CE3DA0D54CFAA51079D1183B5BAAFFA1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          07E6
Signing time:             Thu 12 Mar 2026 21:00:44 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:44 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:44 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: m97MvuJ/UceYj6ITJ9KGgWulDAY4g/nHNEzcGPMOi0U=)
                          2: io0GvTpo_VyMUyPyaPwaY5qhYQs.roa (hash: o71eBkqnQim23+RZGUgawhsMcbHLdUbBzsu6ep4SKt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:da:0d:54:cf:aa:51:07:9d:11:83:b5:ba:af:fa:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Mar 12 21:00:44 2026 GMT
            Not After : Mar 13 21:00:44 2026 GMT
        Subject: CN=eefacc9f19b971dd23a4a59346743de51c8c2037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:ec:75:60:cd:a6:b9:2c:83:f5:2a:59:f5:
                    cc:24:86:f7:1a:63:ba:0f:ea:51:3c:82:a3:1b:1e:
                    ec:31:7c:f0:38:ba:6a:63:b4:b3:a6:2e:b5:49:c4:
                    fe:8e:c1:83:71:19:5d:f7:aa:bb:51:30:86:9e:ae:
                    5b:28:65:c6:da:e0:44:79:9c:f8:67:c8:6e:12:a5:
                    6e:9a:ec:49:b0:f4:64:de:e7:6a:1b:f0:21:a8:7a:
                    53:55:29:bc:02:91:2d:ed:cc:9a:b9:a4:68:b8:72:
                    62:7a:36:02:7c:6b:48:22:55:d3:ea:38:1f:34:ef:
                    6d:e5:9a:e1:b5:76:6f:e3:0d:f3:26:6a:ad:f0:89:
                    40:9f:c3:c1:d4:0c:73:a0:d5:45:c9:85:09:24:92:
                    d6:44:27:3a:54:ad:a0:ab:b6:05:9f:81:6d:ec:69:
                    e4:9b:93:d0:a1:09:a0:7d:f4:d8:5e:af:c3:bf:ce:
                    33:38:ae:26:c4:15:1f:f3:36:85:ee:fe:aa:a7:0e:
                    99:b4:1b:f5:a2:bc:c4:72:6f:22:77:fc:18:52:2e:
                    f7:54:f1:8d:88:80:ea:60:4a:31:d7:b9:34:96:15:
                    db:fb:82:59:49:b0:cd:65:24:e8:d5:83:be:c0:79:
                    fc:f3:0d:45:0b:8b:d6:cb:f7:23:d4:d4:e2:86:f4:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:CC:9F:19:B9:71:DD:23:A4:A5:93:46:74:3D:E5:1C:8C:20:37
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:e7:ba:9a:ec:40:99:de:24:1e:52:01:ee:e9:fd:b2:b7:
         32:91:ce:f6:a4:89:80:68:45:07:64:f8:d3:0e:15:b2:63:a5:
         1b:a9:c5:ec:fe:d3:12:e9:4e:5d:4f:13:70:2b:9e:d3:51:30:
         87:ba:10:31:55:eb:f6:e8:c8:a5:83:fc:20:7d:d2:a0:d7:ff:
         e4:3c:10:a9:37:a4:09:de:bb:8b:75:91:af:da:30:62:23:cc:
         54:4a:02:a4:30:fd:c0:ac:61:f5:75:ff:46:82:73:87:17:60:
         bd:8a:b2:ee:c8:dd:6d:b6:71:ad:b5:1c:31:a8:b7:b1:c4:e7:
         cc:68:35:7c:15:c2:5a:fe:7b:8d:3b:9b:13:60:93:a5:86:a9:
         a2:37:a6:09:9a:5c:8c:b1:50:2a:97:87:78:1a:6d:73:0d:1c:
         1c:a4:b4:60:36:12:1f:65:90:3d:7a:bc:8d:48:40:69:6d:c3:
         a8:68:03:90:80:83:cb:cf:c1:5b:a8:a4:ad:d2:c6:e0:a3:d2:
         4c:16:26:ad:88:eb:92:6e:3f:34:1b:85:e9:a4:4c:77:ae:2e:
         05:20:cc:6f:c1:8a:f6:29:f8:f8:bb:4a:e5:50:17:ed:53:ab:
         36:71:06:15:53:21:f2:f8:b1:74:23:7b:50:f2:10:4c:af:48:
         d0:22:20:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2g1Uz6pRB50Rg7W6r/ofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOTA0ZjU0MDlmZTU0MzVmMWZiZjVjZjQ2ZTRjZTk1ODgw
YjYxM2MwHhcNMjYwMzEyMjEwMDQ0WhcNMjYwMzEzMjEwMDQ0WjAzMTEwLwYDVQQD
EyhlZWZhY2M5ZjE5Yjk3MWRkMjNhNGE1OTM0Njc0M2RlNTFjOGMyMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjHsdWDNprksg/UqWfXMJIb3GmO6
D+pRPIKjGx7sMXzwOLpqY7Szpi61ScT+jsGDcRld96q7UTCGnq5bKGXG2uBEeZz4
Z8huEqVumuxJsPRk3udqG/AhqHpTVSm8ApEt7cyauaRouHJiejYCfGtIIlXT6jgf
NO9t5ZrhtXZv4w3zJmqt8IlAn8PB1AxzoNVFyYUJJJLWRCc6VK2gq7YFn4Ft7Gnk
m5PQoQmgffTYXq/Dv84zOK4mxBUf8zaF7v6qpw6ZtBv1orzEcm8id/wYUi73VPGN
iIDqYEox17k0lhXb+4JZSbDNZSTo1YO+wHn88w1FC4vWy/cj1NTihvQZjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO76zJ8ZuXHdI6Slk0Z0PeUcjCA3MB8GA1UdIwQY
MBaAFP2QT1QJ/lQ18fv1z0bkzpWIC2E8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTIt
NWZmMDdjM2I2Zjg4LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTItNWZmMDdjM2I2Zjg4
LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBrnuprs
QJneJB5SAe7p/bK3MpHO9qSJgGhFB2T40w4VsmOlG6nF7P7TEulOXU8TcCue01Ew
h7oQMVXr9ujIpYP8IH3SoNf/5DwQqTekCd67i3WRr9owYiPMVEoCpDD9wKxh9XX/
RoJzhxdgvYqy7sjdbbZxrbUcMai3scTnzGg1fBXCWv57jTubE2CTpYapojemCZpc
jLFQKpeHeBptcw0cHKS0YDYSH2WQPXq8jUhAaW3DqGgDkICDy8/BW6ikrdLG4KPS
TBYmrYjrkm4/NBuF6aRMd64uBSDMb8GK9in4+LtK5VAX7VOrNnEGFVMh8vixdCN7
UPIQTK9I0CIg8Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:31:37 2026 by rpki-client