Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
File:                     ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft (raw, json)
Hash identifier:          67w18toP3ErAtBEdG90EBuGtDfJJHKUQYFXcYp+Av08=
Subject key identifier:   B4:35:AC:C6:E6:A9:63:57:1F:2D:2E:CA:99:C8:9F:F9:D2:51:D8:BE
Authority key identifier: 66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9
Certificate issuer:       /CN=666bb22ab64acea6248e3eecd4d600797046e8b9
Certificate serial:       019D9CD1D9F8B9D7154F4EBF6836CE492306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
Manifest number:          03
Signing time:             Fri 17 Apr 2026 19:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:31 +0000
Files and hashes:         1: ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl (hash: kNIZWYHxmwJ5vz909rlNjboMxNpTqlz6MI1Lb0e5ANQ=)
                          2: iXdCxqONjbFxErLs984fDtPPuP0.roa (hash: kOe2FaHNUJoqh8TvxUecRv4MaU6ezmauA8mPBQq+gXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:d9:f8:b9:d7:15:4f:4e:bf:68:36:ce:49:23:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666bb22ab64acea6248e3eecd4d600797046e8b9
        Validity
            Not Before: Apr 17 19:01:31 2026 GMT
            Not After : Apr 18 19:01:31 2026 GMT
        Subject: CN=b435acc6e6a963571f2d2eca99c89ff9d251d8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:6f:56:8b:0c:9a:83:18:d3:e4:fb:8e:a6:
                    44:3b:3c:a8:1c:80:40:19:f5:2c:66:27:7c:e9:e4:
                    82:95:04:0f:ea:88:18:56:64:dc:40:71:97:2c:c6:
                    26:60:35:87:a4:43:4b:97:03:98:60:02:bf:c3:61:
                    25:b4:39:5e:5e:7c:a8:6e:5d:33:94:9b:db:da:83:
                    7c:d3:71:7f:36:cb:23:d3:1d:fa:38:09:f1:22:a5:
                    eb:54:98:00:14:e8:81:dc:4c:3d:8f:ef:16:bd:f1:
                    56:d6:e3:ff:9d:43:62:3b:fb:97:b7:f5:3d:fd:db:
                    e8:bc:eb:fc:8b:15:30:bd:44:97:6b:d7:7c:88:62:
                    5b:ba:d7:d5:16:4e:8e:1e:cd:c8:c1:73:1d:de:f8:
                    1d:55:3c:58:74:ef:fc:21:9c:0b:eb:e2:58:0e:a5:
                    01:9b:8e:34:49:e4:65:08:1e:60:d7:d6:dd:0d:81:
                    d3:59:b1:03:b1:68:0c:cc:48:32:00:2c:43:ad:d2:
                    f3:42:42:3f:5d:a1:82:5a:d7:59:93:ec:0e:8d:75:
                    09:2d:6f:b2:95:78:dc:35:61:3b:63:c7:fd:61:0c:
                    52:5e:97:1c:bc:d5:51:4f:68:39:d4:fb:3f:45:e6:
                    2e:05:1c:b6:4b:dd:9f:82:06:db:74:c1:a4:ae:30:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:35:AC:C6:E6:A9:63:57:1F:2D:2E:CA:99:C8:9F:F9:D2:51:D8:BE
            X509v3 Authority Key Identifier:
                keyid:66:6B:B2:2A:B6:4A:CE:A6:24:8E:3E:EC:D4:D6:00:79:70:46:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/33b36a-fd49-44d0-9018-d56719df6399/1/ZmuyKrZKzqYkjj7s1NYAeXBG6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:d7:4e:46:92:1f:3c:46:45:65:42:c3:10:e6:91:8d:ff:
         c8:c1:fa:3c:06:87:85:a0:ab:3b:57:64:43:09:95:30:78:43:
         e7:ea:10:4f:36:63:54:f5:83:1f:5a:05:e7:16:11:e4:64:09:
         b7:db:2a:6b:32:05:c1:0c:f7:9a:9f:70:e2:44:a6:37:07:37:
         4a:f2:19:e8:25:26:c7:66:6b:d4:03:fd:9f:d3:e9:31:20:a8:
         a1:4c:34:75:23:a8:f8:80:0f:ac:96:32:03:aa:5e:33:2a:8a:
         ab:5d:be:b5:70:d0:82:9d:73:c8:d1:1b:bf:bd:91:5c:1d:eb:
         a3:16:a0:51:16:42:02:49:80:c9:bd:25:ce:0b:94:68:b2:68:
         15:1a:3c:38:3b:55:a0:de:24:bc:6e:49:dd:6b:4a:fa:a5:71:
         bb:a7:00:45:55:93:c9:44:65:84:95:c7:68:2e:cb:92:ce:fa:
         39:94:9e:04:2e:7a:88:a2:ee:af:f3:86:13:08:db:15:f3:7a:
         7a:35:f3:fe:ff:65:dd:14:2e:38:a1:d6:c3:7e:a1:d1:46:23:
         1e:3b:80:1e:5f:25:22:43:d5:97:a1:43:36:ec:e1:e8:25:72:
         33:18:ee:9f:dc:1e:2b:91:6c:8e:74:b0:78:e9:c0:80:6f:ff:
         ea:e1:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:45 2026 by rpki-client