Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File:                     Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier:          uOOvT5V4sBUVcCS3n3+7pBQ721W/j6UKSKOuGJUo2pY=
Subject key identifier:   C0:58:14:89:B0:27:B5:A1:D0:76:22:18:21:97:75:42:CA:B5:DB:23
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer:       /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial:       019D9B508FF2F0DB3252748330A423F78D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 12:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:41 +0000
Files and hashes:         1: Z7YKoT2uZ4toIphTGHeS29211HY.roa (hash: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=)
                          2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: cO006wK3KXTEa1E6DlR9f1npyQgeLv1qmv+vXsrX7pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:8f:f2:f0:db:32:52:74:83:30:a4:23:f7:8d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
        Validity
            Not Before: Apr 17 12:00:41 2026 GMT
            Not After : Apr 18 12:00:41 2026 GMT
        Subject: CN=c0581489b027b5a1d076221821977542cab5db23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:9b:47:84:80:12:f6:5c:94:12:55:fb:c9:
                    e0:d8:9a:e2:54:73:3b:c6:e1:31:fa:2a:22:10:2a:
                    f5:6d:7a:d8:de:4c:0e:43:dc:e0:72:d7:a6:e4:05:
                    88:6a:47:1c:58:37:39:9a:99:bd:5e:ac:76:0b:c8:
                    95:dc:a8:5c:0d:64:85:53:80:ce:b7:8a:6d:46:5c:
                    32:e1:1f:49:b0:13:31:74:d1:cc:3f:d6:e1:82:49:
                    a0:40:0f:10:6d:34:b6:b9:0d:ab:37:58:94:7a:ff:
                    22:5d:48:dd:a4:27:ce:93:ff:17:43:8e:18:17:6f:
                    8e:00:d7:9b:09:61:3a:18:d4:ad:f8:bc:3d:d6:a5:
                    52:13:b4:25:e8:e8:23:ca:84:6c:ba:ea:d4:c6:bf:
                    e1:99:ef:61:46:29:c3:f9:ec:84:ee:e2:1c:94:9c:
                    ab:cb:8b:0a:a8:58:b6:ed:71:39:14:db:be:c0:ce:
                    2d:09:56:31:f7:1b:07:e8:ff:e0:26:ed:cd:b9:96:
                    01:7d:bf:8a:0f:be:a6:ec:1d:1c:8d:11:6f:4b:d6:
                    05:8e:5e:80:b2:14:ae:ec:de:2d:7f:47:83:26:0e:
                    a4:6d:41:7a:32:7d:36:bc:74:82:8e:65:f5:e2:07:
                    d1:34:41:59:62:48:e3:f4:65:94:91:e8:8a:ac:99:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:14:89:B0:27:B5:A1:D0:76:22:18:21:97:75:42:CA:B5:DB:23
            X509v3 Authority Key Identifier:
                keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:95:c7:48:e4:7c:08:b1:ee:bb:46:58:16:f6:91:4e:42:
         23:f5:43:3d:a7:b3:01:72:fe:de:b4:40:d2:b7:11:ca:ee:1c:
         35:d0:66:d3:8e:7f:55:ff:90:e5:10:ba:1c:b9:2f:b1:9b:f4:
         37:1f:12:40:f5:92:ae:c3:e6:e4:f0:60:6f:dd:d8:6f:bc:2d:
         2d:c8:68:22:96:22:5a:25:45:b7:11:5f:02:8f:3b:be:62:e7:
         86:64:c2:a1:3c:23:c7:e8:de:15:bf:14:bb:1c:04:1c:a5:13:
         43:ef:0a:b1:2f:6d:3e:87:cf:7f:fa:42:be:31:04:e3:8e:0e:
         7f:e4:6d:ae:39:69:b9:bc:d8:94:b5:58:fe:d5:ae:6e:6b:4b:
         7e:03:9c:72:58:fd:a4:51:ed:b9:85:f1:88:c0:88:33:da:99:
         6e:b4:6e:02:c3:29:67:d5:6f:a8:64:1c:42:08:05:ff:43:61:
         76:a4:b0:d6:c8:9b:5c:89:6a:49:dc:32:53:a4:f7:77:16:80:
         7c:d2:de:1d:70:ef:0c:8d:27:ea:5c:b8:4b:ce:ed:85:1b:f1:
         c1:db:cc:b1:0e:84:14:e9:fd:bb:e7:df:b7:74:fe:67:f8:a9:
         63:19:ee:57:18:20:16:bf:3c:a4:5e:21:b5:73:03:04:f1:39:
         ac:29:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:36 2026 by rpki-client