Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File:                     ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier:          w4SO9DH04z/vdPekC3gHSvTX3U46NRj12fcVI4boWrE=
Subject key identifier:   37:C4:CC:62:B3:90:98:FA:85:0F:9F:09:BC:F1:FF:B3:A4:AE:52:E1
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer:       /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial:       019D9962D1889422FD7A93D3732DA101E659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number:          18CB
Signing time:             Fri 17 Apr 2026 03:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:23 +0000
Files and hashes:         1: 1pSJC06N2KwFbuJcYdGA9i6Uz70.roa (hash: 1Wkw53r6H28/yvkp4A/xsBcJ3W3ggfnnl0PpFBIprJY=)
                          2: 6ypYvWruLHwnduCjwA1yDgUF7iQ.roa (hash: vim8165CflcUEUPI7LyT6xVnJSwwiA/ZIHCcO7/ZyYY=)
                          3: WXEMaOaFXRYu5I1vij7KWtGaWy4.roa (hash: Bmbg+nTd8Sk24eSeeR56bOusRM0ye1c9iznMWMYGi8o=)
                          4: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: MGNoWqcoliLUYHOahgcbpoRoejJpOvIpEQY4LSdUQSo=)
                          5: eXtz9qlxcUXDY9qv_cOL7OrM1mg.roa (hash: mPvwGs5vghXg97JZBpfO6Y5/bAb5kwiLFDsCj8CY49c=)
                          6: olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa (hash: DvzOagp2lGIceeK3FkMPLVn9xoT8VD4iuom7PdIZAFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:d1:88:94:22:fd:7a:93:d3:73:2d:a1:01:e6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
        Validity
            Not Before: Apr 17 03:01:23 2026 GMT
            Not After : Apr 18 03:01:23 2026 GMT
        Subject: CN=37c4cc62b39098fa850f9f09bcf1ffb3a4ae52e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:14:57:18:0f:36:a0:6e:e6:af:f1:b2:4f:
                    b1:67:ee:9f:8e:8c:a9:9b:d9:bd:fa:d1:cf:7d:2c:
                    42:64:05:f4:d2:ac:86:01:11:71:35:6d:3d:b8:71:
                    a0:85:ce:a4:15:a1:b2:76:64:dc:80:3d:40:2c:27:
                    d6:64:e3:19:53:72:41:fb:94:23:a4:e7:58:e1:b1:
                    22:54:ea:a1:89:91:ea:69:1b:c4:63:37:7e:fd:3c:
                    ea:75:d3:4a:6d:d9:49:8d:de:f3:a5:aa:c1:b8:0c:
                    15:a5:d2:75:09:8b:a9:8d:01:a2:fe:98:ec:e4:5e:
                    b6:df:06:bc:1e:3e:4a:41:ee:ed:44:cb:f9:0e:b5:
                    b3:c1:9e:0a:5a:c9:bb:ee:dc:0d:3a:31:23:f4:03:
                    bd:12:1e:97:95:9b:c7:45:11:d6:8e:e7:7f:21:54:
                    3b:c5:be:c2:69:1f:e6:27:29:e6:dd:30:5e:3f:1b:
                    7c:1e:eb:ba:53:79:91:4c:13:67:86:26:42:72:04:
                    81:c4:52:74:f9:cb:42:7d:f1:61:04:c4:a4:0f:18:
                    f6:02:f2:8c:f6:62:5f:aa:54:4a:bc:c7:8a:b8:0d:
                    c5:5e:d0:1d:37:fa:a5:c9:05:0f:05:f7:3a:c2:85:
                    cd:e2:42:1f:92:b2:af:77:d5:44:d5:2c:5f:55:30:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:CC:62:B3:90:98:FA:85:0F:9F:09:BC:F1:FF:B3:A4:AE:52:E1
            X509v3 Authority Key Identifier:
                keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:10:75:e5:c7:3f:94:02:5b:3a:1c:f4:24:88:76:be:02:
         04:b6:fa:76:5d:a8:ac:47:ff:90:0c:3b:91:1d:f9:67:85:ed:
         51:39:f5:15:b3:f4:ec:a6:8c:3c:fd:31:8f:0b:20:c0:79:73:
         f8:7f:8a:6b:56:6d:4f:64:3c:18:2e:23:bf:1f:bf:44:b4:94:
         cc:70:47:c1:9e:39:50:16:fd:d7:f0:ab:de:b2:2d:b0:d0:27:
         99:5e:4b:c4:63:ca:35:f7:63:b4:0a:42:cb:ac:6d:f4:94:da:
         2a:42:de:3f:74:45:04:02:8f:84:a9:b6:18:e4:f7:b5:11:9d:
         c7:31:ad:21:3e:63:87:96:9b:3d:1d:4b:9d:95:fc:a2:d5:88:
         4c:09:aa:c2:86:09:74:0b:fb:ce:cd:86:56:96:44:11:9a:3b:
         95:11:41:f9:12:1d:f9:3e:fb:dc:fd:0c:3e:b4:69:a1:5f:6b:
         6d:77:fb:c0:3f:eb:34:64:07:ae:5a:96:1d:67:45:6d:d4:7c:
         2b:63:51:14:da:09:2c:82:98:59:42:83:b7:a8:b5:33:8f:90:
         17:1b:ee:0b:ee:b5:30:8f:80:64:e2:37:4f:d8:20:6b:41:ab:
         cf:c3:7e:c3:9d:b4:06:0b:bd:f8:5e:ba:97:6a:f3:d7:a8:6d:
         7f:c1:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:16 2026 by rpki-client