Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File:                     zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier:          UsEZ7Jj38OKvL4dJu90Qn/Pjs+T4H1Ya4ICF8Nd6dzo=
Subject key identifier:   80:C2:0E:CA:81:1A:16:FC:0B:BC:40:56:6A:C6:2F:F9:67:AD:AB:2B
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer:       /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial:       019CAD5A1D8EF2062F26C095D659874975D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number:          14D8
Signing time:             Mon 02 Mar 2026 07:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:29 +0000
Files and hashes:         1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: N/bBFZSTxY2sTHLP0wq0p3QBxdu+FWm6teKvOSbhNaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:1d:8e:f2:06:2f:26:c0:95:d6:59:87:49:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
        Validity
            Not Before: Mar  2 07:01:29 2026 GMT
            Not After : Mar  3 07:01:29 2026 GMT
        Subject: CN=80c20eca811a16fc0bbc40566ac62ff967adab2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:a0:35:fa:c5:d2:93:6e:ee:61:e6:39:83:
                    8f:0a:33:4f:6e:f3:bf:17:64:03:28:f2:38:58:c5:
                    4e:da:98:0b:3b:f0:13:0c:57:22:5b:a3:34:90:ff:
                    33:5c:50:6f:4b:a5:8f:f1:e0:3e:15:5c:63:4a:63:
                    23:00:9e:90:6d:90:87:c8:0c:97:d4:0c:70:03:15:
                    82:43:b9:a5:a7:fb:c2:8b:fa:fc:d9:fa:4f:3e:6d:
                    9c:e2:9d:17:6b:ee:95:97:5a:c4:0d:c0:80:18:8b:
                    66:d3:31:83:dc:89:bc:b2:38:be:0b:3d:e0:47:f4:
                    c6:d1:03:62:a4:54:51:48:1c:35:f9:d2:45:4a:4b:
                    9e:cf:8f:9e:40:68:3f:7c:e2:88:4d:3c:2b:26:09:
                    e7:f3:27:20:00:a9:0b:86:13:2c:1d:c1:8f:6b:95:
                    3c:51:4b:8a:5a:8c:5e:fd:76:5f:9b:a4:70:a8:b4:
                    bc:ee:d9:67:42:db:b6:36:f2:55:a4:0e:53:cf:24:
                    27:2a:11:de:5b:ea:a6:f6:eb:73:f6:8b:45:26:10:
                    09:85:57:a1:ba:89:bc:a2:93:06:d2:50:11:a7:ba:
                    ec:a3:1f:a4:d4:dd:9f:95:be:1c:8e:3c:52:ef:c7:
                    c3:58:d1:22:ea:e3:b6:15:de:5f:1f:e3:0e:3f:74:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C2:0E:CA:81:1A:16:FC:0B:BC:40:56:6A:C6:2F:F9:67:AD:AB:2B
            X509v3 Authority Key Identifier:
                keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:ec:32:a8:f4:37:a1:8b:ee:2e:9e:4e:dc:42:ec:6c:ab:
         72:9d:05:be:e2:68:4c:ce:93:0a:6f:83:72:ed:ce:f3:73:17:
         4a:e8:6e:0b:49:00:80:24:17:8c:d1:7a:0c:15:54:90:9b:78:
         d6:b4:82:e1:1d:0f:b5:8b:5c:a7:a8:50:3e:e2:4f:c3:31:a8:
         23:7f:10:aa:aa:a2:56:b9:bb:81:80:cf:33:21:a1:46:6d:5f:
         38:6d:f0:5b:28:49:be:14:fa:ef:45:c0:fc:e4:07:c3:37:90:
         72:88:e1:e7:a1:5e:1d:93:67:f6:8e:68:c5:49:30:d2:2a:b1:
         91:6a:f0:60:2b:87:56:48:fb:f3:6a:a1:5d:69:6e:87:03:86:
         24:55:ed:b2:6d:8f:92:84:c7:a8:43:a4:0c:52:54:8d:bb:38:
         d0:14:6b:f8:2b:9f:1f:6b:07:bf:2f:cb:07:74:39:16:d0:96:
         d9:75:4d:91:cb:44:39:cc:c3:92:d7:98:b6:a0:11:20:7f:45:
         30:07:47:74:df:0a:53:4a:8d:c8:f1:7a:09:bd:85:3e:f6:ae:
         a8:bc:ce:b4:02:2d:ba:46:37:38:a5:10:ef:b9:43:97:8d:ae:
         99:3f:a6:22:67:e5:56:3a:51:b1:3b:1f:be:ab:d1:e8:76:f4:
         0d:46:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:20 2026 by rpki-client