Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          qEB/blKKpQhK+8Aqj/YcXJxboM0vSIk5AugZwEJFpGI=
Subject key identifier:   04:7E:A5:2C:7B:3C:D6:2A:0D:60:5B:06:8D:48:D4:F2:5F:DC:F0:59
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       019CAAC641BD79B1383EDADAF6EE6C819036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          11AE
Signing time:             Sun 01 Mar 2026 19:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:45 +0000
Files and hashes:         1: UAWfVKnuk8IYKAompixGCt2JD4o.roa (hash: 1/V3Gy+/S90DB5jCTWmbg0P9LSy46xSNLw3S2ZpV9dA=)
                          2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: lvReVM7XtRJYah1D4oEX7D9pPHtYqIC2CtWuvm4ufPc=)
                          3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:41:bd:79:b1:38:3e:da:da:f6:ee:6c:81:90:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Mar  1 19:00:45 2026 GMT
            Not After : Mar  2 19:00:45 2026 GMT
        Subject: CN=047ea52c7b3cd62a0d605b068d48d4f25fdcf059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9d:c5:60:b4:d5:89:76:67:d5:d2:47:f6:46:
                    3c:9f:53:ac:ac:17:49:9d:bf:a9:6c:a8:47:a7:16:
                    34:04:31:6b:b3:ba:8c:61:e5:58:f0:ce:54:ab:fa:
                    05:83:c8:50:36:a4:5b:fc:d5:e3:b7:07:be:6f:8a:
                    6e:7f:50:88:e5:65:d4:ec:b1:49:85:62:4d:4a:38:
                    71:4f:cb:3c:05:93:b2:38:94:23:0f:62:ab:58:e0:
                    e6:9a:fe:3e:15:7d:5e:94:40:c7:20:59:16:ac:44:
                    8b:fc:dd:fc:e2:dd:31:32:e9:df:cf:1a:1f:b0:55:
                    55:ab:2c:08:08:99:10:d1:cd:b3:d2:4d:b7:b0:36:
                    0c:89:8b:d2:65:e4:19:54:da:eb:c8:8a:81:52:90:
                    f5:bb:d2:9a:59:d2:b0:4c:7f:2b:02:75:6c:b1:52:
                    c2:32:d9:d1:50:bd:2d:65:bb:e0:46:e8:f1:54:c4:
                    7a:bb:eb:9e:f2:74:0e:5f:50:e7:11:bc:51:88:27:
                    1b:70:1e:5e:18:36:c1:6b:c6:36:fc:ee:91:e5:8b:
                    ab:73:e1:94:eb:6b:0e:60:99:e8:0c:ea:76:df:ee:
                    4f:70:89:a9:5f:21:5e:d4:19:6b:cb:dc:27:4d:7b:
                    48:20:64:e7:06:85:e1:bd:9a:61:b3:32:9a:2e:1b:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:A5:2C:7B:3C:D6:2A:0D:60:5B:06:8D:48:D4:F2:5F:DC:F0:59
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:05:7b:3f:da:47:9e:19:2b:bf:c2:24:26:d2:39:df:70:
         72:14:c4:cc:04:0a:7e:21:87:15:af:98:67:bd:d1:67:cc:ca:
         39:0b:d9:0d:67:f4:5f:e5:4d:58:7c:89:31:34:e3:36:f2:a8:
         05:ee:dc:ef:ef:10:a9:29:73:ad:45:da:dd:a1:d4:8e:a6:ee:
         83:28:f1:1c:e0:c7:44:ef:63:20:bd:0c:49:d2:71:84:1d:82:
         44:3c:4e:60:05:fe:46:65:5c:e6:b9:a3:0e:14:7c:4a:4e:e7:
         83:b9:2e:2b:48:8b:19:f7:56:79:f3:47:aa:87:b0:f4:22:ab:
         dd:12:f5:25:65:09:49:7c:1c:e5:2f:d8:7b:20:56:7d:de:9b:
         ec:e8:03:92:57:25:f6:70:fa:38:31:00:dc:11:3e:da:19:c0:
         57:79:73:9c:b2:4d:72:44:dd:ec:63:62:2e:34:d6:8d:38:0f:
         8d:ee:8c:42:07:4a:d8:5d:5b:f0:58:d9:ad:07:af:39:e2:db:
         1e:3b:e4:2b:ef:1c:88:14:1d:02:c3:60:44:b4:14:e9:e8:40:
         08:ff:f5:ae:7a:d1:cd:a8:2f:40:57:7f:c8:03:d1:a5:c4:7f:
         f5:0e:66:c6:0a:7f:e1:6c:78:d9:82:11:4c:31:83:f5:63:01:
         9e:f1:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:24 2026 by rpki-client