Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File:                     zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier:          asN64MzSEyINtUtFcph/SPpzEt3wO6u+rBRWjp/wcNw=
Subject key identifier:   77:BE:6E:D7:E6:A2:E8:D7:26:30:6D:44:11:CA:30:EC:09:47:2B:DE
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer:       /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial:       019D9A3EE6D79C126EEEF172E683423CCFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 07:01:46 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:46 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:46 +0000
Files and hashes:         1: PolmcNKUOLtY-UeTb4jkSIvQsTM.roa (hash: b7erTVt5EQJ/JPRF7lrWpbLZEhrxU/WLeG3F+iBfhKk=)
                          2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: KsZ+o/Mi8G7zeiE0HbCwSQq68XY2iJwIWEqLjAWgCFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:e6:d7:9c:12:6e:ee:f1:72:e6:83:42:3c:cf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
        Validity
            Not Before: Apr 17 07:01:46 2026 GMT
            Not After : Apr 18 07:01:46 2026 GMT
        Subject: CN=77be6ed7e6a2e8d726306d4411ca30ec09472bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:e5:f2:c2:c5:3d:6b:97:92:6c:a3:96:06:
                    64:38:cf:89:d2:29:d4:b4:bb:32:1c:48:29:5a:20:
                    81:51:95:2c:e8:54:db:3a:24:a6:58:74:5b:7f:04:
                    5e:50:a1:1b:02:9c:dc:1e:3d:99:b5:55:43:43:e0:
                    9a:1d:9e:0b:73:b7:08:02:de:3d:bb:2b:fc:68:fb:
                    97:28:0d:39:14:47:f7:5f:21:c9:b8:29:e3:e9:9a:
                    7b:7e:19:fa:37:93:5a:5e:f2:1e:c7:03:9e:af:7a:
                    32:53:30:b7:ed:d0:09:59:8a:92:d3:76:a2:35:9b:
                    d2:8d:ef:af:be:e1:04:ba:49:61:0b:4a:b7:28:72:
                    2a:e8:0d:93:ee:3b:68:29:20:41:9c:9b:a8:71:bf:
                    fc:30:6a:58:03:83:c6:51:29:73:3e:ec:4b:bb:33:
                    19:16:8d:14:31:ac:11:6f:4b:38:2f:0d:1d:60:93:
                    fd:dd:4f:71:08:8d:b5:59:ef:be:2a:a4:2f:20:61:
                    4a:45:16:d7:a8:aa:b6:22:f3:4e:96:0b:00:05:e0:
                    81:df:24:e2:5b:70:da:df:e9:b8:6c:46:14:5e:d0:
                    7f:c6:0f:b2:7f:05:6c:f1:0f:b2:63:f3:60:53:71:
                    80:80:ef:e6:eb:2c:3b:ba:00:4d:8d:e9:90:48:2f:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BE:6E:D7:E6:A2:E8:D7:26:30:6D:44:11:CA:30:EC:09:47:2B:DE
            X509v3 Authority Key Identifier:
                keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:49:50:06:5f:77:60:59:bc:68:d9:d8:3c:43:ad:dd:93:
         cf:bb:64:67:50:b4:96:6b:e9:37:a5:07:9b:08:38:c3:3d:05:
         d7:bc:54:2f:a3:cb:6f:01:cf:4d:25:5a:bc:7b:b6:10:fe:91:
         c4:5d:11:4a:ff:7d:b2:18:4c:15:11:93:8c:60:96:3f:4f:5a:
         a1:bc:94:89:90:88:63:9b:b9:ba:5c:d6:32:4b:27:25:f1:f2:
         78:f6:bd:b0:94:b8:77:45:96:0d:65:b9:32:00:bb:d5:a1:22:
         4b:a6:a2:53:6b:a9:b9:23:9c:23:77:24:12:2e:0c:1a:b3:bc:
         e8:58:25:d7:73:dd:00:0f:49:35:7f:da:2d:99:ab:5f:4c:d7:
         21:ab:1a:92:46:a9:a6:d6:0e:8b:9f:b9:f3:9e:51:11:a4:32:
         e7:bb:cb:e4:37:f1:1f:5b:f8:cc:56:29:b2:95:a0:47:0e:0a:
         ce:68:5d:df:8e:ee:7b:14:f0:0a:6f:80:38:c1:a3:db:b3:51:
         d6:12:10:34:d4:5c:ea:eb:77:61:8d:c0:2d:a9:03:15:0d:eb:
         e7:ca:39:62:25:a9:8a:c6:dd:66:1d:74:b8:18:55:be:65:95:
         10:bd:2b:4f:2e:87:45:28:15:5d:85:ab:f4:da:8f:b4:ab:86:
         59:b6:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:58 2026 by rpki-client