Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File:                     ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier:          9cYTZiUnaWX64nUHRHbIEXPrEdk1+SxjMZTBdnEdLYE=
Subject key identifier:   62:5D:98:E1:E6:B4:1A:4C:EB:AF:79:A1:52:7B:6F:72:D7:0B:F2:15
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer:       /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial:       019D9BF52E062AEE8EF234EE3BF6DC9D3537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number:          0F1F
Signing time:             Fri 17 Apr 2026 15:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:29 +0000
Files and hashes:         1: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (hash: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA=)
                          2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: hEDeRZNZrioeZTuxPeA4M1QJ8ouv8d4ppEBrB5Ptk3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:2e:06:2a:ee:8e:f2:34:ee:3b:f6:dc:9d:35:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
        Validity
            Not Before: Apr 17 15:00:29 2026 GMT
            Not After : Apr 18 15:00:29 2026 GMT
        Subject: CN=625d98e1e6b41a4cebaf79a1527b6f72d70bf215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:8f:9e:8e:2a:40:8c:35:37:ab:04:79:39:
                    11:5c:2a:98:b1:d9:cf:b7:10:a0:7b:fd:db:49:15:
                    5d:48:5c:ca:aa:7d:c4:87:d2:a0:78:5c:8e:2f:f7:
                    44:3f:b4:81:22:cf:1c:29:3e:07:c3:4d:f1:c1:0d:
                    60:2d:7a:95:56:dc:d1:13:b7:5f:5d:95:e4:ff:17:
                    0b:97:28:2a:ea:41:4d:e1:d9:e9:75:67:4f:46:c6:
                    06:a2:93:db:9f:21:18:67:b3:9a:c4:20:8b:b0:67:
                    8c:70:af:32:fe:f7:ac:38:ce:f8:78:fe:88:e2:72:
                    f1:1f:46:b2:d8:aa:dc:fb:f3:54:a1:0c:58:41:05:
                    5c:dc:35:3b:0f:cb:b1:5e:b2:e9:3a:f1:e6:de:78:
                    6d:d4:b1:63:c5:50:75:c9:3b:03:5b:1f:8a:05:63:
                    ee:16:dc:98:39:f4:2d:97:03:27:f8:e9:14:28:7c:
                    69:ea:3f:f0:13:57:72:0b:4c:cc:55:f1:8a:6b:db:
                    60:37:b9:3d:c0:35:bd:a3:fa:17:50:64:4c:11:5d:
                    24:27:b8:8a:ab:61:3d:1a:a3:3d:43:93:05:cb:8b:
                    ff:37:79:e2:aa:10:27:a3:cc:4a:ad:ca:e6:65:07:
                    ce:be:0e:fb:a0:ec:7e:69:e7:af:3e:3d:ce:af:68:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:98:E1:E6:B4:1A:4C:EB:AF:79:A1:52:7B:6F:72:D7:0B:F2:15
            X509v3 Authority Key Identifier:
                keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:31:49:77:63:66:68:b6:35:8e:88:8c:c0:6f:d9:15:c4:
         5a:50:9d:9e:c7:b8:c4:cb:aa:5f:b7:91:8d:be:53:e3:79:d8:
         22:5d:55:76:31:e0:c8:95:28:55:ff:52:76:22:82:5d:69:30:
         da:05:e5:b4:ad:69:50:af:d8:d9:a5:4a:f9:8b:b8:6a:55:65:
         36:8e:2e:10:10:73:b7:f3:1c:ba:0f:69:a8:ea:8b:f9:c6:ea:
         41:dc:72:bb:92:89:e6:c6:8c:6e:6d:7d:27:72:8d:06:41:cc:
         18:9f:08:37:f6:f8:ca:25:61:81:e4:4e:32:d0:ee:53:25:a5:
         b7:28:26:37:75:b0:16:d2:20:1c:48:e3:e0:91:14:8c:44:9a:
         e3:3a:25:74:ec:fb:86:fe:ba:3e:8c:c6:6e:e7:ca:3f:9e:2e:
         05:fa:83:bd:8d:86:43:01:b7:21:07:3c:36:4b:c3:31:66:25:
         db:12:e1:65:db:70:c7:6f:0b:c3:5b:aa:72:e1:3e:da:2d:80:
         25:e3:47:66:8c:bd:a1:8a:2c:09:dc:19:30:10:ce:79:01:8e:
         59:e2:e8:01:87:fe:4b:fe:0b:28:52:50:81:da:e2:12:c4:94:
         47:42:a1:9a:4f:df:47:4e:e9:e3:84:a0:48:ff:1a:f9:c8:75:
         f3:ae:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:37 2026 by rpki-client