Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          CHuL77ZyelF6vQCt2jhXYhnMaXbzvHtzw5Jqe26QqTE=
Subject key identifier:   A9:BE:BC:34:2F:13:E4:A4:72:DC:6B:73:DD:AB:7D:F1:9A:8F:4D:8D
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       019D9A3EFE7E19076521EBB150CF92938E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          122A
Signing time:             Fri 17 Apr 2026 07:01:52 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:52 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:52 +0000
Files and hashes:         1: UAWfVKnuk8IYKAompixGCt2JD4o.roa (hash: 1/V3Gy+/S90DB5jCTWmbg0P9LSy46xSNLw3S2ZpV9dA=)
                          2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: CoR9Xw5YB3dMY45hrreOU+F9LM2wi+0N4TO/jXF6dgo=)
                          3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:fe:7e:19:07:65:21:eb:b1:50:cf:92:93:8e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Apr 17 07:01:52 2026 GMT
            Not After : Apr 18 07:01:52 2026 GMT
        Subject: CN=a9bebc342f13e4a472dc6b73ddab7df19a8f4d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:8a:06:39:ae:04:6c:4a:85:e1:e6:47:93:
                    51:0d:3d:a0:20:df:9a:5e:22:90:51:72:18:8e:72:
                    dc:92:dc:db:37:e2:52:2a:7d:f6:0a:53:03:a1:25:
                    aa:81:a9:9a:48:f1:9c:d7:7c:f4:3b:47:10:5e:82:
                    68:30:60:7a:0f:cd:35:ea:39:b6:fb:c0:5a:6d:60:
                    75:3c:21:13:e4:f8:4e:fc:f6:1a:db:7c:12:de:1a:
                    24:00:cc:c8:0a:f2:bf:d2:9a:cd:43:0f:b2:99:63:
                    02:dd:66:88:52:1a:49:0f:60:79:f9:a6:42:c9:5b:
                    05:61:a9:b0:d4:55:3a:d9:0c:d2:f4:5c:5c:73:57:
                    af:7a:29:04:8f:bd:67:e1:8d:53:b6:b8:80:d0:3a:
                    f1:43:51:b1:23:f9:f5:33:27:cd:f7:3c:6f:9d:5c:
                    13:57:a6:d8:bc:8e:cd:ee:63:5e:99:75:25:71:68:
                    ae:22:d8:97:0e:a2:2f:35:40:c3:5a:4b:25:dd:80:
                    be:12:ba:a3:22:96:86:b2:4a:33:69:99:78:56:f3:
                    42:73:51:e9:a5:c3:8f:a9:b0:ab:41:92:e9:3e:b0:
                    e7:06:1e:36:f8:60:d5:40:33:58:bd:1f:23:72:05:
                    81:97:07:46:e8:c3:cf:8e:01:3b:b8:93:66:c9:15:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BE:BC:34:2F:13:E4:A4:72:DC:6B:73:DD:AB:7D:F1:9A:8F:4D:8D
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:32:1b:01:ea:d6:85:f5:78:40:95:92:4a:ed:c9:f9:64:a6:
         d8:11:e3:30:30:8a:b1:3b:cd:b2:03:0a:c0:ed:54:d3:29:8d:
         b6:21:a9:3d:9b:76:fa:d1:4a:59:89:c0:93:86:bc:7d:f6:fc:
         09:6b:e0:64:bb:fc:a6:c3:46:40:bf:04:a8:14:4c:01:67:fd:
         96:cd:89:87:cb:83:69:6a:af:0d:af:f7:d2:7b:13:9c:47:db:
         19:c7:bb:a2:98:cc:82:49:a7:4f:d4:44:ed:41:cf:c5:b9:6b:
         cc:e4:4e:16:ae:59:c7:33:f5:82:02:95:50:5d:aa:97:6f:c0:
         59:b0:bd:1f:cd:b7:97:88:44:cb:3e:2c:6e:71:ca:3b:f3:0b:
         cc:bd:e1:5e:08:f1:39:0f:92:20:6b:10:dc:1e:a7:65:34:11:
         81:58:0f:f8:a0:0f:fc:9e:e0:bb:6b:9f:b3:85:43:ba:0e:e8:
         b2:c8:ed:5b:b1:26:a5:f2:85:fc:d5:52:5d:7a:4b:20:2c:52:
         6a:a9:3c:f2:c6:1e:ce:33:5c:1a:39:03:aa:18:2e:fb:95:e1:
         b1:1d:0d:b7:6a:69:52:28:c4:f7:87:a2:ec:3c:db:37:aa:8d:
         20:4b:34:4a:ce:30:98:23:6c:bb:7b:55:69:f4:01:bc:5e:1d:
         0e:20:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:38 2026 by rpki-client