Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          KhKqgQpjMsqs5Izb8N5Kj0Rd/F4SGdt5Z7thgAg+ss4=
Subject key identifier:   75:CB:83:E7:AD:E3:27:6D:43:32:1F:A5:22:0B:0C:06:BF:7A:58:77
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       019D9AE2CE67CE979D70C8A9E1031CAB7A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          081E
Signing time:             Fri 17 Apr 2026 10:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:48 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: 3U4FXSUyI212dr0eNRPjgyplerwae/31LKyZfHR5Kfk=)
                          2: lD0Wwhw0gpihU_arbUQK_IQqs4c.roa (hash: 6HIhfJOZXKPxqB9WM2oez5Dgrzz0kzJpo4+10uPExmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:ce:67:ce:97:9d:70:c8:a9:e1:03:1c:ab:7a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Apr 17 10:00:48 2026 GMT
            Not After : Apr 18 10:00:48 2026 GMT
        Subject: CN=75cb83e7ade3276d43321fa5220b0c06bf7a5877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:d4:66:03:3d:ce:3e:52:6c:c7:37:20:53:
                    01:d3:19:cb:02:d0:ff:9f:67:6b:49:19:31:a0:df:
                    d2:8c:1c:e5:cb:db:d7:f8:56:17:1d:66:78:a5:b1:
                    e1:d6:17:40:a1:86:bb:6f:55:ef:61:10:c2:df:ac:
                    3a:5d:94:3d:35:e0:82:58:0c:d0:70:27:80:ef:6d:
                    26:f4:3f:ed:2e:e2:0a:54:0a:04:91:e4:2d:7f:49:
                    50:6c:2a:d5:cf:e2:bf:5c:a9:d9:3a:3d:48:29:6d:
                    c4:a9:ca:a0:1b:81:c3:5e:97:2e:41:42:86:52:03:
                    3d:55:ad:30:52:86:99:1b:37:ab:cf:dc:6d:85:c6:
                    6e:76:0e:cc:4a:dd:24:c6:49:00:5a:48:1a:84:6b:
                    a6:54:67:11:51:ee:f4:3e:88:24:26:77:be:e3:dc:
                    0e:89:e8:55:d9:dc:a4:34:f7:7d:e9:e9:19:1c:b4:
                    bf:77:f4:4b:1b:2b:fe:64:54:39:7e:55:8c:b7:e9:
                    ef:2b:75:84:b0:36:aa:ab:38:3f:52:f9:5f:ea:c3:
                    29:8d:3e:60:51:64:d9:a4:ad:66:2d:79:ee:92:29:
                    d2:53:77:4e:c6:42:20:76:16:86:d8:f8:71:5b:de:
                    e8:9c:7b:be:2d:58:fd:7e:f8:ab:b9:9f:c6:09:6a:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CB:83:E7:AD:E3:27:6D:43:32:1F:A5:22:0B:0C:06:BF:7A:58:77
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c1:6a:14:86:4a:ab:62:e6:4e:41:e3:a7:01:9f:d2:a3:ac:
         de:d4:d5:03:8a:4c:f4:2f:fa:96:73:a9:91:63:2f:96:51:b1:
         86:d4:49:58:4c:38:d6:89:2a:ab:c3:d6:f1:67:69:c1:4b:a0:
         56:54:f2:1f:53:8c:ac:0d:35:da:c6:1c:04:e2:2a:10:d4:ef:
         b9:b9:9f:24:54:bf:bd:26:24:a9:28:fe:5e:d3:77:a1:ef:ad:
         d8:98:39:07:cb:f2:0d:1e:0b:0d:44:c5:59:29:04:87:4b:a9:
         4d:9b:f1:f4:6c:ec:c8:a8:65:e3:43:db:e2:6b:ab:70:63:5d:
         b5:26:ee:de:bf:4b:fc:ba:4a:32:8c:53:41:11:0c:ad:21:53:
         11:87:22:91:13:c2:b9:31:0f:7a:85:12:69:62:a1:11:ec:71:
         ad:fd:0b:11:14:4e:d7:5b:bd:8c:47:62:c8:b2:13:c4:61:b1:
         70:33:f1:be:21:1b:97:8d:ae:2e:4b:37:71:d8:f7:9d:6f:66:
         32:a7:4a:59:85:26:33:f3:98:33:2a:42:e1:7c:da:74:d6:37:
         9b:bb:c2:8f:f5:77:65:49:0d:a0:66:17:a3:7b:38:d6:93:90:
         40:ee:d0:c9:05:d1:a3:49:bd:57:26:be:c1:88:65:b5:af:e8:
         20:d2:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:03 2026 by rpki-client