Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          X7OaXvsYKcycRjY+vyam3R57Y57ddYVSSprRECfniJk=
Subject key identifier:   2A:13:0B:03:C9:89:EA:79:2F:DD:4E:68:08:FF:CD:52:70:E4:91:C5
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       019CE335362D183D2CC71000A76840D20C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          186B
Signing time:             Thu 12 Mar 2026 18:00:41 +0000
Manifest this update:     Thu 12 Mar 2026 18:00:41 +0000
Manifest next update:     Fri 13 Mar 2026 18:00:41 +0000
Files and hashes:         1: LyD-byAqHkCId2X413D2X1Z2qHU.roa (hash: X3jzbRpGbv2O4J/HEOEG5KsHYAnqovf/BVNCZIBzGEc=)
                          2: NciFosUTZQjh8wuLeV_tqda00bY.roa (hash: zOA4Wef7GnD51/XhXMPfbgxKu5akVCbUSUyI9R7xcbI=)
                          3: Y8fFR3SR2JFo5SN-QHUy1g5AXnQ.roa (hash: rcBm3Sru1/9gzs1C6m5Kf+QWRSXdM9HmkBd/Rq/ayVk=)
                          4: gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa (hash: HeuNS/isx5Ir7rrhD9rHIdV2SzMR1qCm5KBXOXdXtqU=)
                          5: np_2_SKmGfgCwircPk4_KpAxetI.roa (hash: EXS4ryAU66idTchghJIvxISW9h87H73QFGZzRNJ0+zI=)
                          6: uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa (hash: xSRJcjd0eLR5MNbT/qQW4MnOH8NKSKy8VGBBsMm1Rj4=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: Wa1JzEGu/58QtiGD+ps/GSoQ6jGjiFhW2tcvrtW/nLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:35:36:2d:18:3d:2c:c7:10:00:a7:68:40:d2:0c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Mar 12 18:00:41 2026 GMT
            Not After : Mar 13 18:00:41 2026 GMT
        Subject: CN=2a130b03c989ea792fdd4e6808ffcd5270e491c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:ff:8b:cd:b7:af:99:00:36:fd:ea:bf:af:
                    1f:0a:e8:45:03:81:71:04:69:42:4f:c3:00:08:f1:
                    08:dc:d0:62:ac:79:d1:70:19:71:92:6b:76:f9:cb:
                    37:17:a3:97:5c:e6:3b:c6:7b:3e:e0:6a:71:f1:f6:
                    74:79:18:db:bc:bc:ed:3e:93:40:5e:bd:ae:c4:4d:
                    9a:a4:a1:6e:83:44:4c:65:e4:e5:d0:43:f8:d5:23:
                    08:76:86:0f:b9:57:ee:b7:81:0c:20:c6:a7:97:c6:
                    75:a1:0b:ae:10:3f:d4:9e:a7:c1:7f:f2:6f:e5:7b:
                    f1:9f:d0:92:1c:c4:e8:e3:45:c6:99:36:31:f2:37:
                    bd:ce:82:6e:49:0c:e7:bb:06:a9:a3:78:3e:98:75:
                    79:f7:50:bc:ba:a4:c8:74:18:56:1a:2e:7c:94:0f:
                    ca:43:7d:f9:43:c3:2d:b0:48:c4:cb:df:e4:c7:22:
                    12:95:7e:1b:2f:8f:5f:e6:67:3a:06:0f:25:ef:f8:
                    f2:87:5f:22:ed:d6:f1:54:b9:0d:7f:14:f4:94:6b:
                    7a:6e:6c:99:b3:d8:a3:b0:49:d3:29:9c:b2:7f:5f:
                    fe:0f:39:50:7d:d9:55:02:56:b2:51:7f:67:fa:3b:
                    79:27:d5:7b:de:05:3f:46:8e:50:55:77:03:83:0f:
                    8b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:13:0B:03:C9:89:EA:79:2F:DD:4E:68:08:FF:CD:52:70:E4:91:C5
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:e8:64:c4:83:76:9f:b1:77:91:0d:17:11:00:b7:0b:b2:
         6d:3f:12:ab:67:9e:29:07:5d:e3:ce:4e:4e:83:51:f2:70:87:
         ef:af:15:85:9e:62:0d:88:d9:ed:53:7b:16:08:26:22:18:a2:
         01:50:e5:45:de:6b:ce:fa:b1:2a:81:ec:67:9d:12:27:72:b0:
         b7:1a:fd:3d:0b:bf:99:79:a7:2d:34:08:67:a9:f3:c8:b7:9f:
         e9:df:53:65:4a:b2:02:05:e9:c0:ea:66:5b:98:18:46:f6:d2:
         3a:22:a9:7e:e2:2f:0d:8b:5b:03:fe:9a:ac:c9:68:68:c4:b0:
         c9:f4:6c:40:f1:81:bc:f7:6e:74:06:cd:9e:4f:86:35:30:11:
         31:fa:06:dc:9e:58:d3:fa:6c:b8:08:9e:cc:b1:7c:64:d9:5d:
         7b:99:a9:f8:f9:88:05:21:bc:9f:af:98:33:c5:a7:6f:28:58:
         38:c1:c8:72:fa:b5:d6:5a:61:cc:de:ba:a2:71:13:b4:8a:81:
         72:79:c3:4e:a4:5e:38:0b:c5:62:90:c7:54:7f:14:d4:d4:ef:
         b8:1e:c5:2a:f1:a8:92:9a:d7:82:16:2f:f8:d9:7a:24:f1:a6:
         4c:fc:d9:15:23:41:49:ee:35:c9:73:b1:a8:6d:fe:1b:eb:9c:
         14:11:73:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjNTYtGD0sxxAAp2hA0gwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0
MWFlZjAwHhcNMjYwMzEyMTgwMDQxWhcNMjYwMzEzMTgwMDQxWjAzMTEwLwYDVQQD
EygyYTEzMGIwM2M5ODllYTc5MmZkZDRlNjgwOGZmY2Q1MjcwZTQ5MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWD/i823r5kANv3qv68fCuhFA4Fx
BGlCT8MACPEI3NBirHnRcBlxkmt2+cs3F6OXXOY7xns+4Gpx8fZ0eRjbvLztPpNA
Xr2uxE2apKFug0RMZeTl0EP41SMIdoYPuVfut4EMIManl8Z1oQuuED/UnqfBf/Jv
5Xvxn9CSHMTo40XGmTYx8je9zoJuSQznuwapo3g+mHV591C8uqTIdBhWGi58lA/K
Q335Q8MtsEjEy9/kxyISlX4bL49f5mc6Bg8l7/jyh18i7dbxVLkNfxT0lGt6bmyZ
s9ijsEnTKZyyf1/+DzlQfdlVAlayUX9n+jt5J9V73gU/Ro5QVXcDgw+LsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoTCwPJiep5L91OaAj/zVJw5JHFMB8GA1UdIwQY
MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt
NWRjMmZhNmEzNTAzLzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz
LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+foZMSD
dp+xd5ENFxEAtwuybT8Sq2eeKQdd485OToNR8nCH768VhZ5iDYjZ7VN7FggmIhii
AVDlRd5rzvqxKoHsZ50SJ3Kwtxr9PQu/mXmnLTQIZ6nzyLef6d9TZUqyAgXpwOpm
W5gYRvbSOiKpfuIvDYtbA/6arMloaMSwyfRsQPGBvPdudAbNnk+GNTARMfoG3J5Y
0/psuAiezLF8ZNlde5mp+PmIBSG8n6+YM8WnbyhYOMHIcvq11lphzN66onETtIqB
cnnDTqReOAvFYpDHVH8U1NTvuB7FKvGokprXghYv+Nl6JPGmTPzZFSNBSe41yXOx
qG3+G+ucFBFzgw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:33 2026 by rpki-client