Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          UDvBjG59aQdxehuDkVpBPIlruFB8kRhWvOsh4c55b60=
Subject key identifier:   57:B8:9B:CE:80:7A:50:79:CC:AA:47:74:0C:38:F9:00:EB:DD:BE:35
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       019CAAC6CCFCD217355701DD5B4828C02816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          1365
Signing time:             Sun 01 Mar 2026 19:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:20 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:20 +0000
Files and hashes:         1: QiwWH1RtFqoFlh8ODhTHxGES8wo.roa (hash: HZ1hGzr6d7Gz+vsrN9BoASQoL9FuMmrP2dJvc65ilDk=)
                          2: QqUbGPbWnb6gjhCMOqT2grVMHLc.roa (hash: Nr3sSa3uJP0epmv5crHEIzFx3Y5ip1SyFjThlCVINnw=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: yT3souY5GrdALyHzFokrAnUSCrGDM3itpPefKFboH3w=)
                          4: yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa (hash: DACPJnZscxbHEOmbZYNR1bRZKHxl5ev0RDcNgFEGAgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:cc:fc:d2:17:35:57:01:dd:5b:48:28:c0:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Mar  1 19:01:20 2026 GMT
            Not After : Mar  2 19:01:20 2026 GMT
        Subject: CN=57b89bce807a5079ccaa47740c38f900ebddbe35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:ba:75:cf:6d:45:2a:38:d7:2c:d2:74:13:
                    38:c6:0c:1a:46:d9:18:0c:1d:d8:49:67:83:22:86:
                    ac:2b:c8:77:f3:b3:67:de:2b:16:95:bb:62:b3:c8:
                    91:54:62:77:0b:d3:f2:04:d3:8b:1a:4c:c3:2d:1a:
                    1c:56:b2:3c:cf:11:b4:c6:a8:84:2d:b4:5e:3d:6c:
                    08:c7:41:f1:8e:2c:a8:1c:c4:b3:25:da:ab:64:c7:
                    ee:b4:6c:fe:b5:24:fb:f2:bb:d6:51:15:09:e2:96:
                    41:17:db:67:ba:49:97:2e:fa:b9:4f:14:02:0d:47:
                    a8:58:f1:0f:ec:03:f7:10:15:f5:b7:e7:c1:32:6d:
                    54:0a:fa:06:c5:d0:8c:88:8c:5e:a2:55:e4:67:f5:
                    b3:a4:04:c5:5a:26:0f:30:a2:cb:c4:91:fc:10:b4:
                    17:8f:9f:f9:f6:e3:8a:fc:c2:dc:4e:cc:01:c9:0e:
                    09:a5:d5:80:7f:f5:8d:12:52:80:4a:f4:c3:2c:98:
                    d7:e7:e9:c4:80:b9:22:1e:56:32:3f:80:67:05:86:
                    f6:1b:d8:01:0b:ed:1b:c4:56:d3:5a:38:e4:a5:40:
                    b3:c0:6a:7e:f3:0b:93:93:5f:f0:a0:34:62:00:e7:
                    3d:5f:53:0f:b1:04:65:dc:39:33:e2:97:41:68:3c:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:9B:CE:80:7A:50:79:CC:AA:47:74:0C:38:F9:00:EB:DD:BE:35
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3b:76:23:4b:ca:28:f5:cb:f8:a2:ea:19:97:22:9e:54:fa:
         db:b5:17:9e:4f:13:46:a1:57:6d:0c:41:da:56:a3:f1:bd:92:
         6b:5e:fc:aa:80:44:81:eb:0e:98:40:ac:6c:1a:2a:b5:ca:da:
         a4:1d:54:34:01:ba:d2:45:92:a2:63:31:59:c4:84:7d:4c:f1:
         0d:b9:a0:cb:ab:1f:92:e5:26:25:5c:c2:97:0a:2a:55:95:b5:
         f8:0b:e8:4e:ca:04:34:4b:bb:f9:0d:18:fb:fd:20:f2:aa:e3:
         2b:f6:6f:02:83:bb:d3:38:71:7c:63:b9:36:3c:97:7c:b5:83:
         13:05:7a:3e:58:a1:91:6d:10:31:f5:93:4d:3a:a2:d3:b6:e9:
         e8:2e:4c:53:bf:1e:d6:06:93:4f:88:37:8e:16:b2:18:1d:7e:
         e4:8b:6e:bd:8c:a4:3c:15:ca:da:6b:6a:d0:21:2d:b6:f3:f3:
         6d:06:f0:48:b9:f6:59:cd:3f:aa:73:83:0d:f1:6c:0c:99:96:
         ad:00:14:9c:58:4d:7b:6a:81:6c:02:1b:f3:31:28:1f:2b:6a:
         21:32:b9:84:1c:26:ab:9e:be:e7:48:84:57:da:ac:83:23:02:
         ff:3d:8f:c8:18:fd:32:a3:54:a3:1d:13:51:d1:7c:bb:fc:c7:
         41:ab:fe:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxsz80hc1VwHdW0gowCgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5
MGMxNTcwHhcNMjYwMzAxMTkwMTIwWhcNMjYwMzAyMTkwMTIwWjAzMTEwLwYDVQQD
Eyg1N2I4OWJjZTgwN2E1MDc5Y2NhYTQ3NzQwYzM4ZjkwMGViZGRiZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLa6dc9tRSo41yzSdBM4xgwaRtkY
DB3YSWeDIoasK8h387Nn3isWlbtis8iRVGJ3C9PyBNOLGkzDLRocVrI8zxG0xqiE
LbRePWwIx0HxjiyoHMSzJdqrZMfutGz+tST78rvWURUJ4pZBF9tnukmXLvq5TxQC
DUeoWPEP7AP3EBX1t+fBMm1UCvoGxdCMiIxeolXkZ/WzpATFWiYPMKLLxJH8ELQX
j5/59uOK/MLcTswByQ4JpdWAf/WNElKASvTDLJjX5+nEgLkiHlYyP4BnBYb2G9gB
C+0bxFbTWjjkpUCzwGp+8wuTk1/woDRiAOc9X1MPsQRl3Dkz4pdBaDzpbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe4m86AelB5zKpHdAw4+QDr3b41MB8GA1UdIwQY
MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt
ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw
LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTt2I0vK
KPXL+KLqGZcinlT627UXnk8TRqFXbQxB2laj8b2Sa178qoBEgesOmECsbBoqtcra
pB1UNAG60kWSomMxWcSEfUzxDbmgy6sfkuUmJVzClwoqVZW1+AvoTsoENEu7+Q0Y
+/0g8qrjK/ZvAoO70zhxfGO5NjyXfLWDEwV6PlihkW0QMfWTTTqi07bp6C5MU78e
1gaTT4g3jhayGB1+5ItuvYykPBXK2mtq0CEttvPzbQbwSLn2Wc0/qnODDfFsDJmW
rQAUnFhNe2qBbAIb8zEoHytqITK5hBwmq56+50iEV9qsgyMC/z2PyBj9MqNUox0T
UdF8u/zHQav+3g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:04 2026 by rpki-client