Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File:                     ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier:          efP6xOxYbtANlg620Su9UOkSpKxtSUUQ8OKasY3et7g=
Subject key identifier:   A6:C4:05:F3:9C:83:15:CA:0B:A4:A5:92:D6:FE:7A:C7:95:F8:AC:7F
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer:       /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial:       019D988646ABB035DAE3681AE134E795E434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number:          105C
Signing time:             Thu 16 Apr 2026 23:00:29 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:29 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:29 +0000
Files and hashes:         1: JZV9Wmscw-_tBZW5yLoO12kB4nI.roa (hash: 9OD9YsHNLfEzpjHohpylUNvgGqpABxz0jPfe6Fwb8Ws=)
                          2: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: jvUNMH8LhBRhBsMDu3j4kLLC79oXv2HJt73EPNf3yq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:46:ab:b0:35:da:e3:68:1a:e1:34:e7:95:e4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
        Validity
            Not Before: Apr 16 23:00:29 2026 GMT
            Not After : Apr 17 23:00:29 2026 GMT
        Subject: CN=a6c405f39c8315ca0ba4a592d6fe7ac795f8ac7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:57:17:0f:fe:35:78:e2:bf:3f:df:d5:01:
                    0b:e8:ee:76:5f:3a:d8:b8:79:18:85:ff:4e:32:2b:
                    68:5c:2d:ca:e7:8d:22:65:b1:13:ec:47:1d:b4:91:
                    4c:59:1e:01:ac:5b:56:d6:18:93:3b:e4:81:ee:7b:
                    af:3d:16:0d:ab:89:6f:50:fa:22:95:82:b0:38:33:
                    f8:98:c5:1d:94:55:e2:a3:6f:df:a9:ba:3c:86:b4:
                    04:8b:c8:0b:88:98:9e:f9:bd:46:3a:0d:5d:4e:c6:
                    f1:3a:e8:99:7b:1c:b5:be:46:7d:fc:67:ab:5c:fc:
                    2a:75:e6:18:e3:7e:93:d6:d8:45:69:71:fa:f8:11:
                    36:54:d9:8a:c5:21:12:52:c4:1f:df:9f:f5:9c:39:
                    8c:e8:fc:a7:a3:c8:96:d9:70:4f:cb:bb:ae:05:14:
                    3a:35:3f:00:a7:ba:c0:77:73:1f:4f:b2:b1:64:a0:
                    da:6c:71:93:f0:c1:fe:eb:14:5c:d8:08:6d:8a:53:
                    6b:3b:89:b0:86:55:8c:3f:e6:4f:7e:f4:e1:d5:d3:
                    4e:86:72:5b:2a:0b:fc:48:c8:b0:a1:fa:52:bd:28:
                    50:5a:59:4e:60:41:f6:5e:c2:10:7e:a2:4b:44:19:
                    c1:24:6f:e4:7f:03:73:e4:3e:48:9c:e6:2d:8c:dc:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C4:05:F3:9C:83:15:CA:0B:A4:A5:92:D6:FE:7A:C7:95:F8:AC:7F
            X509v3 Authority Key Identifier:
                keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9a:07:6d:bb:3a:37:75:00:a1:ac:b3:c1:72:ab:fe:5e:78:
         c7:54:a7:f6:aa:ca:56:e3:fd:81:18:53:0a:c2:63:68:67:30:
         7d:c4:22:77:3c:a1:53:5a:1c:4a:27:73:0f:47:fb:51:cc:37:
         ef:f3:44:fd:ce:e7:fb:c4:45:f5:47:cc:fe:14:9d:c1:97:72:
         c7:02:60:ca:41:41:21:de:0f:36:7f:42:ff:e8:ac:61:03:0a:
         88:a8:9c:09:c9:25:9f:e4:99:4d:5e:13:71:3b:a7:71:87:d6:
         e1:61:56:4f:b5:8d:f9:ce:1c:9d:16:65:5b:ef:59:13:58:59:
         c4:ce:c9:75:81:f0:22:01:fa:66:a6:ab:3c:2d:ee:9d:b9:21:
         f3:4a:13:24:35:b7:2d:dd:8d:7e:5c:50:cf:26:3a:c8:a6:e5:
         86:f6:fc:06:77:0d:73:37:6e:31:83:a5:b1:07:cb:0f:ac:d9:
         fc:64:6e:6f:da:15:d4:11:99:22:a8:38:ef:f4:78:c2:4a:ed:
         53:c9:f4:e1:96:aa:b3:90:2b:63:ef:3c:6a:25:06:c0:15:5a:
         b4:ed:b8:a8:cf:3d:ba:63:3f:f9:cc:97:c9:b5:4c:8b:44:47:
         9d:35:4b:77:13:9e:7c:60:5a:2c:a8:31:68:83:ec:0f:10:d1:
         2b:57:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:12:09 2026 by rpki-client