Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File:                     ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier:          HgN3HcdqSmTSTWOcDIKyKvmwXaOd7bvQoIdVgXrmfVY=
Subject key identifier:   79:F3:3A:18:6A:D8:04:75:A0:AB:59:49:A4:76:39:20:A2:2A:F8:E4
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer:       /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial:       019D37F6FD1132387C408B2F811D5A683704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number:          16DD
Signing time:             Sun 29 Mar 2026 05:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:26 +0000
Files and hashes:         1: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: KZ8CNoJf1RbmWKFUb1r4E/NU3rva8WCXC5ewJcmgcfg=)
                          2: c0zEfFDSZZWFy-vBS9NWpwPjwoE.roa (hash: Degy9LDZTNrQEBY/nXvirHbXKz42WXh/PcwFt1G3pj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:fd:11:32:38:7c:40:8b:2f:81:1d:5a:68:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
        Validity
            Not Before: Mar 29 05:00:26 2026 GMT
            Not After : Mar 30 05:00:26 2026 GMT
        Subject: CN=79f33a186ad80475a0ab5949a4763920a22af8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:89:55:fb:39:76:96:78:10:4a:07:a8:53:
                    59:c7:58:54:34:68:d5:2c:8e:b7:b1:a7:ec:1b:b0:
                    d4:d8:61:a9:0a:9d:3d:f2:65:6c:b3:ac:fb:e2:d9:
                    ef:21:ff:6d:0d:da:f0:20:96:69:7c:77:9b:fa:91:
                    17:e3:a5:37:92:32:8f:5e:e8:b1:c4:20:39:b4:93:
                    7c:14:72:90:5d:1a:b3:1a:25:7e:33:3a:4e:0f:d9:
                    41:c6:21:03:6e:9c:fd:52:ed:6e:84:01:8b:36:c9:
                    51:0f:b3:77:b4:49:0e:cf:62:b7:c1:10:d2:bd:9d:
                    42:a1:17:7c:a5:3d:bd:ba:d7:20:03:97:41:51:0c:
                    99:2e:ed:b4:ea:ba:6e:25:e1:5d:df:8a:b3:f5:2b:
                    a6:10:82:f3:2d:ce:46:3a:85:89:85:68:88:b7:e1:
                    87:f7:55:e6:2b:b7:44:a1:33:44:b8:1b:aa:2f:16:
                    b5:ca:f6:29:ba:3d:98:5a:68:a3:3e:61:c9:84:58:
                    5a:a5:a1:dd:6f:b1:6d:b8:1d:6b:d2:cd:f7:76:40:
                    24:84:e7:a1:f9:b9:40:60:e2:c7:ef:72:3b:3e:4a:
                    15:23:d2:b6:c9:9c:49:fb:9e:77:cd:b6:fa:fd:fa:
                    87:84:39:8c:c2:a3:a6:10:90:58:e7:dd:c3:6f:12:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:3A:18:6A:D8:04:75:A0:AB:59:49:A4:76:39:20:A2:2A:F8:E4
            X509v3 Authority Key Identifier:
                keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:77:aa:bc:eb:aa:d0:71:82:93:2f:f8:3f:6e:f0:3d:83:98:
         19:c5:52:78:b7:ee:6b:54:d9:cf:fa:e6:9a:2b:01:bf:b6:c1:
         16:19:05:f0:ac:c1:28:f3:1f:f5:b8:8d:89:01:5e:c6:43:81:
         0a:b2:6d:23:00:b5:b6:be:c2:58:2c:b8:2a:5c:36:12:b1:46:
         62:7f:b4:56:63:47:49:45:a2:15:fa:38:be:30:ef:58:fd:f0:
         e0:2a:5c:e3:b7:64:5c:9b:72:14:3f:ea:bf:46:5c:44:9e:b0:
         44:22:ad:09:d2:3d:38:94:0a:39:d0:29:38:32:62:e3:85:7c:
         6d:0f:83:78:e8:f6:b6:d4:5f:b2:c1:3b:27:5d:8c:be:6e:a5:
         e3:cd:c0:aa:c0:ba:80:b4:f8:00:c2:69:5c:18:ee:b4:82:d8:
         52:fe:3d:28:6b:47:44:3a:bd:7b:8d:30:22:3e:c8:11:d9:73:
         ec:d8:8e:5c:72:34:a5:d6:bb:2a:3c:c0:c8:c2:74:e3:41:7e:
         3e:70:ff:ad:df:72:9e:65:18:3e:ff:80:d1:5d:59:f3:c8:2c:
         ad:43:39:82:1a:eb:52:3d:14:59:48:95:17:62:5c:c4:d8:64:
         f4:97:7b:21:36:3a:d3:cc:34:ca:32:cb:ec:10:95:82:b5:ec:
         25:1c:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:21 2026 by rpki-client