Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File:                     ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier:          oEhAP1AcrNMufwm8tTs9meOrPL2RoByu3eJ4eldLENM=
Subject key identifier:   34:A9:49:D8:58:A6:DC:70:6A:69:99:75:10:44:95:79:7D:2B:1B:F3
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer:       /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial:       019CACB5837ECC1550ECF9058FA287877FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number:          0D0D
Signing time:             Mon 02 Mar 2026 04:01:42 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:42 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:42 +0000
Files and hashes:         1: 6WoM_xG4wV-AhnwKf_EtMbG7hdA.roa (hash: 6pwcjqwtQhFnc6O4o0o2P45/PvuebPJ0qN/3US6rWIk=)
                          2: Hm7ix848xJAY1AJLhXlaj-jQ_BI.roa (hash: +YVIdKa/bQ1rJbGEdtGfoIRzYOMGIjr/vt5PbGNu18A=)
                          3: XAIFfl9QWcdhRZ9cTQDo6K9EBW0.roa (hash: HAz06rT649O471c8KJFWUb5f8BMSqQwCR6TQ0OuLeP0=)
                          4: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: Ujw8EwM65hVpB4+VW1m/j7C8x/lJ9dhGITtf1eBM5bw=)
                          5: za0KCchEnO8zwmW-feM7Z3UncjE.roa (hash: cvLyxJf9J4OkfgwQV4Z4jYKejpKF+XIzROZmSetrmI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:83:7e:cc:15:50:ec:f9:05:8f:a2:87:87:7f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
        Validity
            Not Before: Mar  2 04:01:42 2026 GMT
            Not After : Mar  3 04:01:42 2026 GMT
        Subject: CN=34a949d858a6dc706a699975104495797d2b1bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:5e:4a:f4:61:62:2a:b7:23:da:6a:da:93:
                    a4:89:47:f3:e3:41:90:39:ec:4f:67:e8:3b:86:b6:
                    a6:07:7b:81:5d:11:c5:13:47:18:70:45:a0:55:15:
                    50:ff:69:cd:05:73:f5:e7:bb:bc:1d:98:63:b9:d9:
                    e4:ad:f3:52:2f:01:a6:a2:c3:0c:26:ed:ad:9d:e2:
                    6d:e1:63:06:e9:9e:44:23:17:5d:af:9b:55:94:3d:
                    73:0a:b6:95:74:4c:d1:c5:59:9f:9f:35:7d:2e:09:
                    dc:07:2c:30:11:50:bb:6e:ee:29:03:71:0b:2e:a6:
                    cb:68:7d:41:1f:6e:26:f8:e1:5f:8b:5e:72:02:13:
                    d2:7a:81:41:0e:2e:16:41:68:47:2c:c5:0c:81:d3:
                    1d:d4:16:2a:99:46:78:7a:07:32:d6:51:46:0f:a5:
                    e3:1a:5a:ea:09:0f:72:c4:76:ba:3f:72:92:f6:b4:
                    d3:82:7a:f3:07:f0:d9:ea:55:f6:b6:fe:91:e2:3b:
                    11:b4:b1:1e:fe:50:e9:e7:ee:00:09:3b:08:c2:55:
                    ed:52:a9:cd:00:48:cb:9d:42:eb:13:0f:52:ad:65:
                    c6:a7:6f:46:9e:5f:38:73:57:21:32:6a:7d:56:72:
                    63:94:cf:94:0d:1d:38:e5:a6:72:41:0b:0f:f7:6a:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A9:49:D8:58:A6:DC:70:6A:69:99:75:10:44:95:79:7D:2B:1B:F3
            X509v3 Authority Key Identifier:
                keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:20:e7:69:0a:56:01:e6:7b:e5:cd:f7:f7:f2:e2:02:ee:da:
         34:6a:9d:fa:3d:d4:92:8c:31:1a:53:d4:ec:30:dd:63:02:70:
         ba:d9:8a:3f:38:72:d4:2a:bb:5a:a9:2f:ce:49:b1:a9:ef:3c:
         5e:11:49:e6:1f:61:61:f2:bb:72:00:78:9f:19:ef:01:f6:fb:
         df:bb:e7:84:f3:f9:cb:14:ad:84:24:a2:a6:96:85:1d:39:28:
         dc:62:0e:76:cf:e1:69:46:d2:37:65:30:fd:34:32:f4:41:77:
         f0:a8:c6:7b:c8:91:e4:ff:5b:25:61:49:b6:41:41:be:62:79:
         46:0b:d6:70:b9:96:a7:33:81:f8:27:e7:79:6c:c9:36:64:69:
         2b:d7:c6:2c:6b:f2:9c:76:32:81:39:a4:15:78:25:6f:f7:d9:
         6d:40:bd:66:1c:67:a7:74:87:bf:9d:c0:fc:39:0f:91:75:b8:
         9b:13:20:28:36:57:ea:0d:72:d3:d3:b5:6f:9f:3f:b0:4a:79:
         4f:c8:1a:20:88:45:4e:fa:4f:cd:52:90:21:6f:06:3b:5b:ae:
         91:99:24:fb:25:8c:45:20:1c:32:96:d2:a2:a0:ff:30:8d:a3:
         51:88:fe:97:63:4c:46:49:d0:ee:70:5a:5b:10:b5:7f:75:ca:
         fc:8c:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:48 2026 by rpki-client