Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File:                     1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier:          mk4nZtP/zEP/3Vb6AJ+cU40ABsm2I8FPzCe5hw1qNJs=
Subject key identifier:   F2:0E:6F:03:5B:BE:1C:C5:14:82:34:8E:3A:C6:F4:BD:64:D3:D7:82
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer:       /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial:       019D98BD52949B9A9671A3B853930FBEF8E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number:          15FC
Signing time:             Fri 17 Apr 2026 00:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:37 +0000
Files and hashes:         1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: e5ThiSEnmZUH9EqEP1/NsxIf3y9EjGfMplQEPCF6PbM=)
                          2: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (hash: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:52:94:9b:9a:96:71:a3:b8:53:93:0f:be:f8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
        Validity
            Not Before: Apr 17 00:00:37 2026 GMT
            Not After : Apr 18 00:00:37 2026 GMT
        Subject: CN=f20e6f035bbe1cc51482348e3ac6f4bd64d3d782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:79:a3:c3:ea:9e:ce:71:04:22:2d:54:3c:
                    29:d1:7e:45:6b:19:e5:02:25:9b:fe:81:3e:1e:c0:
                    ce:9f:73:13:39:a8:63:15:de:ec:88:b8:d4:d8:fe:
                    21:0f:4f:75:a2:7d:d1:44:72:ef:aa:80:a2:3d:15:
                    c8:f0:04:fc:c0:8b:20:32:c5:28:22:4a:e0:77:b0:
                    66:a9:5f:50:8d:bc:54:7c:c0:89:45:40:75:6d:6a:
                    cf:1b:c0:fb:e4:db:41:e0:f4:dd:c1:8a:cd:6e:ef:
                    c6:78:37:51:fe:5b:d1:5b:d3:14:ab:24:7d:4f:9d:
                    e4:66:71:0d:32:a6:13:3d:39:b0:d4:f9:45:f4:5f:
                    2b:c8:32:ea:fa:3e:3b:63:53:6e:c7:64:45:bc:52:
                    06:33:33:57:25:f3:eb:05:57:84:a1:a5:b6:98:d2:
                    01:b6:3f:0b:7e:82:32:06:ce:10:d8:01:8a:b4:63:
                    98:79:63:00:7b:b9:7f:51:35:1b:93:b5:62:3e:b0:
                    e9:3f:09:bc:3f:af:07:9d:fa:0e:03:2b:bc:48:25:
                    4a:71:13:10:cf:db:bb:74:6f:11:13:14:e9:2a:b2:
                    d0:a1:b7:a8:42:b3:88:73:92:b0:bd:81:e2:7f:44:
                    ff:64:90:e9:a2:2a:38:2c:43:ff:37:fe:5b:96:1c:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0E:6F:03:5B:BE:1C:C5:14:82:34:8E:3A:C6:F4:BD:64:D3:D7:82
            X509v3 Authority Key Identifier:
                keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d0:e0:b0:5f:47:f1:c2:4a:0b:6e:2c:e7:3a:3f:c6:24:ec:
         9b:e9:9f:2a:39:30:c8:3b:b1:d6:5b:b7:5d:70:23:3d:12:82:
         d8:0d:4d:3d:8d:91:d3:38:39:b9:d4:fa:8b:c8:bf:e4:58:ce:
         5b:86:c3:79:80:46:4d:01:2b:a0:87:b3:6d:a4:04:c7:7e:c0:
         ed:d7:10:66:e7:ae:6a:1e:7f:15:c0:a3:c8:73:e7:0c:ef:b4:
         f5:8b:70:2e:3d:0e:e4:ff:fd:97:d8:9b:43:9c:01:eb:ff:11:
         3b:db:d2:02:c1:d4:61:3d:6d:5e:fb:85:e0:b6:a4:e5:90:4e:
         f1:92:1a:42:7a:22:f8:7d:32:7b:12:94:fa:68:18:24:90:ca:
         d3:45:a6:d5:6f:1f:fd:a7:06:3b:4d:f9:86:dc:b5:f2:41:ee:
         c7:f9:0d:61:fb:ae:e4:df:fc:c8:52:a0:29:29:5c:bd:07:23:
         1b:32:c9:b5:8d:30:c4:ee:77:64:39:8d:4c:9b:c6:6d:0d:68:
         e7:94:3e:f0:b4:e0:a0:06:e6:af:29:b8:78:a8:8f:23:c5:a2:
         58:cc:da:e2:cc:79:b7:17:ec:22:90:28:91:57:87:f7:a5:98:
         c4:39:a1:2e:ce:4e:cd:55:3d:4e:61:02:b9:db:17:6c:bb:a3:
         06:1e:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:33 2026 by rpki-client