Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          XeNMaIOiZZpirqFABcfphuuM4QUJ57ipB7ed0Ztf/vI=
Subject key identifier:   74:26:6A:26:45:39:97:64:51:E8:02:29:E2:6B:B7:27:BF:62:52:61
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       019D9AE35A08EDCD59991C6919114ABEEDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          068D
Signing time:             Fri 17 Apr 2026 10:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:24 +0000
Files and hashes:         1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=)
                          2: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=)
                          3: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=)
                          4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: 7s2MKgk6deMhnIAS1CGYbsyOC0TJ6OlSqKWQ0BTttoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:5a:08:ed:cd:59:99:1c:69:19:11:4a:be:ed:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Apr 17 10:01:24 2026 GMT
            Not After : Apr 18 10:01:24 2026 GMT
        Subject: CN=74266a264539976451e80229e26bb727bf625261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:d9:69:20:b8:e1:da:6a:6c:17:f0:ae:ac:
                    3f:a4:50:c6:6c:1e:7e:1a:7c:49:e6:4e:8d:44:95:
                    68:35:b3:46:d4:45:4f:25:74:2f:ed:7f:2d:38:df:
                    3c:88:a5:0f:52:93:42:0e:dd:3b:9d:ed:66:04:e3:
                    d7:be:70:83:e5:bc:ac:2a:fc:48:be:55:c3:a8:e0:
                    17:e8:90:4f:28:c6:c7:b8:8e:20:7b:7c:64:5b:43:
                    82:58:80:9e:f2:97:68:d3:33:88:07:7c:c8:c6:8a:
                    c0:33:7d:d6:29:83:90:2a:4f:33:af:0c:4d:c0:d4:
                    d4:12:3c:4d:8d:0e:cb:c6:1f:0d:5a:2d:22:e1:01:
                    95:48:b8:7f:79:61:52:49:40:c5:c3:e3:91:fe:47:
                    d7:4b:23:e7:23:38:bd:3e:a4:2c:29:90:ea:41:0f:
                    d9:01:27:a8:9f:bf:1e:f4:9d:cc:0d:8b:64:6b:ff:
                    c4:13:10:a2:de:4f:72:b0:cf:a1:18:7a:76:79:e0:
                    8a:8f:d0:a0:49:90:06:b9:6b:05:60:37:22:80:4e:
                    09:d6:87:6a:27:fb:cb:54:ed:37:5b:73:61:89:bc:
                    5b:40:d8:44:22:fd:64:c4:e0:83:4d:c0:b1:f9:70:
                    fa:7b:29:64:d9:57:ad:cd:df:23:af:05:37:d4:67:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:6A:26:45:39:97:64:51:E8:02:29:E2:6B:B7:27:BF:62:52:61
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:55:06:5f:a5:2d:56:de:84:7b:6f:44:29:b3:3d:29:26:7f:
         4b:89:56:8d:b9:e0:26:ec:52:4f:68:6d:7a:ba:79:02:c5:c9:
         f2:7d:be:97:d4:e4:de:99:80:94:67:02:ae:28:c3:1e:38:7e:
         85:61:3b:c7:2e:cc:45:a2:7a:88:04:19:cb:52:40:f3:d4:8b:
         2f:93:44:9e:d3:32:1d:61:03:99:bf:a4:9f:29:21:df:a3:d7:
         b5:62:4a:db:74:ae:dd:d7:d8:ad:9f:a5:3b:2b:1a:c7:e7:60:
         ee:39:83:38:ba:c5:f1:07:2a:72:46:39:ee:fd:d1:e6:ef:47:
         1e:59:c8:fa:3b:15:53:1b:59:64:19:07:b4:50:bd:39:7f:47:
         86:b8:16:e9:ef:06:09:5f:0b:6e:c4:0e:1a:d2:a5:0e:41:3a:
         83:b7:5e:5a:e7:60:1a:95:56:8d:2e:8f:c5:91:f7:03:99:b9:
         ec:bc:b5:50:b5:21:71:6d:df:11:aa:e6:db:f7:10:a0:b8:d9:
         b2:05:a6:be:c3:f8:ab:45:b8:09:5a:77:dc:da:19:e3:6b:aa:
         12:5d:33:d4:a8:9a:ad:65:87:d4:f0:0d:2d:32:46:99:a9:bb:
         9d:ad:7e:a7:c7:74:ed:e1:de:61:55:66:b6:10:1f:e8:be:7d:
         4c:6d:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:07 2026 by rpki-client