Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File:                     ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier:          OcGLIzDVMGAKYI2kshgUWXPd1b0oYIx0xJUJm/dfhMY=
Subject key identifier:   C1:93:30:51:B6:91:BC:1C:A7:4A:B5:9B:B3:B8:F0:DE:F0:6F:17:6D
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer:       /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial:       019D37F71065F51EDBB5CA8D0E4B78FC1508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 05:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:31 +0000
Files and hashes:         1: 1-QSBwL6YQNpRB581xj69Bh0HK0w.roa (hash: 5GWzZ29/zinUcM0sRPnSs7Ch4eJ52d1lcTmUUiRhGHw=)
                          2: 1-kWvGwe3rzaIsRc1gmxCFz8lXgU.roa (hash: daW3ebtu2fPNsARxfFCyXqL/swO4wfgF7RvbMI+oQl0=)
                          3: vVYDZup6TPMR4MVl16L5Tcxugnk.roa (hash: YNo9hVKBV6+t6/2iujMaXScihQA5Uyp7lluOC3Eyk8o=)
                          4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: 7L7owKbG4OKLE/2gMx0fSd3XHzDP4OaOYlRuI3cU6xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:10:65:f5:1e:db:b5:ca:8d:0e:4b:78:fc:15:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
        Validity
            Not Before: Mar 29 05:00:31 2026 GMT
            Not After : Mar 30 05:00:31 2026 GMT
        Subject: CN=c1933051b691bc1ca74ab59bb3b8f0def06f176d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:4a:65:df:5d:6c:bc:5e:b3:83:b2:b8:92:
                    4d:cb:5a:e8:46:e7:3b:1e:67:5e:74:f2:93:d5:c4:
                    22:13:d0:ef:a9:e0:18:e3:5e:fc:2e:64:c1:f3:dd:
                    79:2b:ce:68:ec:f6:ba:71:2c:39:ac:41:61:e9:97:
                    46:86:3d:12:b1:de:74:68:6d:f6:7e:7d:fe:45:c8:
                    ca:e5:d2:39:4b:d8:04:91:54:a9:a5:b6:33:5d:b0:
                    0e:eb:22:b9:2a:08:43:7d:e3:76:93:bf:84:b3:00:
                    9e:b6:9f:43:52:6e:ca:a5:f3:c9:13:8d:27:96:0c:
                    25:d5:ed:bf:3b:53:d6:2c:46:2c:5d:13:9f:01:f1:
                    ad:a3:ce:d3:ce:1a:7d:80:62:11:ef:61:55:96:d2:
                    d3:42:bb:09:4a:94:6e:a8:30:64:66:68:33:76:05:
                    92:1c:d5:cd:bb:0b:85:fd:06:c8:e2:fe:c7:59:d0:
                    71:86:d4:9b:e5:5f:d2:67:3c:c5:43:09:8f:80:66:
                    8d:5e:e8:fd:ed:91:44:c0:76:32:8b:90:ff:c6:be:
                    78:3d:f2:9e:9f:34:0b:83:7c:d0:b1:e3:38:62:fa:
                    b8:2e:7b:19:ea:4f:84:e4:33:2d:76:08:f8:23:a8:
                    e0:ce:c2:d2:a8:6a:b7:7c:f4:76:a8:b3:03:54:76:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:93:30:51:B6:91:BC:1C:A7:4A:B5:9B:B3:B8:F0:DE:F0:6F:17:6D
            X509v3 Authority Key Identifier:
                keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:66:ab:bc:c7:14:22:e4:96:c3:d1:9b:15:47:e2:ad:4d:
         24:d7:14:81:0f:2e:bb:71:48:fd:4e:c0:5f:7a:3e:1a:5c:41:
         ca:f9:d5:f3:fb:84:0f:80:36:14:cf:c4:11:5c:a0:e4:f0:10:
         c2:a6:b8:e6:8f:7e:46:ef:c6:e7:d3:4d:95:d1:34:11:cc:e8:
         63:e1:f7:cd:f2:2b:e1:c7:af:df:90:0e:6d:7c:87:29:c1:d0:
         91:ae:a9:8a:65:02:66:ce:c6:ee:51:6a:eb:13:fc:5e:5d:75:
         64:82:e3:b5:7d:06:77:c9:27:f7:a4:92:9e:95:59:4d:fe:22:
         b2:34:ad:c8:f0:ec:9d:c3:4b:7a:07:8a:ec:da:75:38:ab:2f:
         c9:aa:e1:68:43:70:94:ab:00:2d:f5:1d:00:47:f7:85:d1:1f:
         08:49:e5:6a:a1:0a:c7:0b:d2:41:27:a6:4e:b8:71:f7:ec:a6:
         83:45:17:ea:90:f3:63:b4:00:9b:0c:57:90:af:af:12:ac:c8:
         7e:a4:b4:83:4f:8e:65:7f:d2:13:c0:db:4a:bc:b4:a7:af:22:
         c5:5f:83:34:04:f4:fa:f5:a8:0e:4b:03:9b:7b:9c:f0:83:00:
         de:6d:98:49:fb:14:47:fa:59:d6:a8:41:8a:28:08:0e:6a:1b:
         56:c2:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:05 2026 by rpki-client