Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File:                     ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier:          6z+KukrXCfGwDk3zr/y/XcXIqxDhxRbtF0/oA2yPe2w=
Subject key identifier:   E1:B6:2A:2B:79:85:58:67:32:F9:33:F1:39:D3:B6:05:03:4C:11:F4
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer:       /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial:       019D9886845777DA5E0EEE8239F5DD0DBDBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number:          1176
Signing time:             Thu 16 Apr 2026 23:00:45 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:45 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:45 +0000
Files and hashes:         1: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (hash: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps=)
                          2: QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (hash: eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=)
                          3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: 70lAe6mqQOkYgV/3ngK/1VgF1qNni+lmCOMIgeMOjqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:84:57:77:da:5e:0e:ee:82:39:f5:dd:0d:bd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
        Validity
            Not Before: Apr 16 23:00:45 2026 GMT
            Not After : Apr 17 23:00:45 2026 GMT
        Subject: CN=e1b62a2b7985586732f933f139d3b605034c11f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:4b:d6:6b:4f:bb:a9:ee:c9:d2:b0:1b:68:
                    2f:1c:28:72:91:43:99:83:3a:76:d6:ec:03:33:a8:
                    ed:52:d4:e7:4c:ca:a7:19:fd:a0:77:ed:6f:00:07:
                    a6:37:fb:2f:af:67:e9:3c:95:1e:0c:6e:ca:dd:11:
                    d8:36:2f:e3:45:c7:96:04:e1:07:1f:ea:11:05:5c:
                    b4:4c:1b:2c:70:c2:41:10:84:f9:46:26:a3:d4:f6:
                    47:1f:75:15:4d:87:24:52:c6:bd:8f:70:e4:ce:26:
                    2a:79:76:41:c9:6e:7f:e9:a6:be:de:8e:f1:8d:01:
                    9f:a1:89:3f:5b:d2:61:51:c4:e4:2b:a1:83:72:4e:
                    bd:b9:1e:2b:5a:51:36:91:92:90:1f:9c:b2:2a:c9:
                    3d:95:10:92:cb:9b:97:47:23:13:80:51:e0:c1:90:
                    fa:84:ae:af:cb:69:3e:08:5c:22:32:fe:10:59:5b:
                    78:6d:74:f1:33:99:5a:7f:63:21:20:a4:5c:52:fd:
                    7b:5e:b5:74:34:76:e1:1a:7d:a1:57:0e:04:95:5f:
                    63:ae:f9:a3:54:53:c0:e6:d4:a0:cf:62:85:2b:e8:
                    49:77:4f:4e:6d:07:14:be:c3:3b:6e:79:7b:2a:bf:
                    5b:26:0a:01:cb:32:a2:7d:14:81:70:dc:52:1c:86:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:2A:2B:79:85:58:67:32:F9:33:F1:39:D3:B6:05:03:4C:11:F4
            X509v3 Authority Key Identifier:
                keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:74:36:86:83:90:31:9d:af:04:fe:3a:8d:ea:40:bd:9b:31:
         ee:20:17:b4:de:50:1c:cc:4d:92:e5:1c:db:b8:d6:20:fd:3d:
         fa:a2:16:08:3f:9f:99:ef:fa:e6:da:be:56:ac:bb:45:13:e6:
         b8:3a:01:88:0f:35:7d:04:9e:62:6f:c7:cb:35:b8:46:5e:44:
         53:66:21:fd:2d:a0:93:02:3a:7d:70:7f:59:15:b2:5c:85:59:
         b6:e8:41:fe:85:5d:88:91:f3:92:a9:0f:c3:43:17:53:f4:ed:
         7a:9a:e7:32:f0:09:26:d3:64:73:66:a5:ba:2c:69:fc:f5:db:
         47:03:e7:55:e5:7c:be:51:b9:21:3a:d7:a7:ce:40:c0:74:28:
         bc:c3:dd:41:a3:87:39:82:48:79:8c:97:5a:3a:85:bc:1c:59:
         3f:43:53:5a:f6:87:2b:27:29:68:fc:10:f1:93:9d:b3:27:3c:
         d3:62:f8:9c:03:bf:02:02:5a:22:de:00:5b:9b:78:6b:c9:f3:
         8a:91:e5:48:6f:c2:28:b8:9b:d2:71:47:e3:e2:c3:f4:e9:6f:
         40:f4:29:ae:dc:c1:1a:3a:df:a6:10:7a:c7:e3:5e:0a:67:61:
         fe:6e:9c:ba:54:95:63:b9:d9:ba:42:f5:e7:70:d5:14:b6:c8:
         cd:e6:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:15 2026 by rpki-client