Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File:                     zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier:          WqFKGk7xP77FnBiNoy9OzGnURzBviZkVFCAI/B+n2VI=
Subject key identifier:   3B:3A:6E:CC:E7:6C:3F:3F:BD:1F:DE:4A:42:05:C1:F9:06:5A:85:61
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer:       /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial:       019DA29CCDAC2A276D51EB97BD4140C6A5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number:          06BF
Signing time:             Sat 18 Apr 2026 22:01:18 +0000
Manifest this update:     Sat 18 Apr 2026 22:01:18 +0000
Manifest next update:     Sun 19 Apr 2026 22:01:18 +0000
Files and hashes:         1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: OO///HJl+LyniBk0MgbRMIO9yjv+wdO5CVi74bYALHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:cd:ac:2a:27:6d:51:eb:97:bd:41:40:c6:a5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
        Validity
            Not Before: Apr 18 22:01:18 2026 GMT
            Not After : Apr 19 22:01:18 2026 GMT
        Subject: CN=3b3a6ecce76c3f3fbd1fde4a4205c1f9065a8561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:5b:49:92:84:dd:be:74:3c:28:28:67:3f:
                    ef:55:50:7d:77:dc:97:97:84:6c:55:1b:44:cf:85:
                    20:46:3b:83:48:b0:b0:2a:aa:df:1a:d3:a8:6e:98:
                    1f:ea:07:94:d6:71:77:57:4d:d1:8b:b0:79:8f:58:
                    5b:64:1d:16:7c:47:f2:8f:a1:97:d2:99:fe:a0:8f:
                    82:24:b7:be:96:a1:b2:a6:19:f2:f6:d2:64:6d:8c:
                    80:6f:f9:29:33:59:d0:bb:1d:be:66:5c:a9:84:17:
                    f2:f9:3e:cb:b8:05:f8:fb:53:31:49:e1:13:f9:43:
                    90:c7:e1:1f:a2:6a:05:3c:04:09:90:7b:74:93:77:
                    e7:2b:e5:be:c1:ee:1a:f2:a9:39:10:f6:40:47:14:
                    61:b6:ae:bb:cf:f6:09:58:71:f5:36:51:fc:d4:35:
                    0a:af:f8:4d:2a:22:d2:9c:d8:50:5f:77:8a:29:ae:
                    82:81:0e:9a:44:59:da:99:e0:65:e9:71:dc:76:cf:
                    5e:cb:3a:e0:1e:9a:cf:02:03:1f:0a:e9:1b:b8:f1:
                    7e:6c:74:db:66:a2:dc:ac:6c:ef:d6:1a:50:8c:77:
                    41:1b:c4:43:73:af:7c:79:5a:56:83:16:50:81:8d:
                    b8:5a:b1:79:31:d3:eb:33:39:49:f8:a3:f5:d6:7d:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3A:6E:CC:E7:6C:3F:3F:BD:1F:DE:4A:42:05:C1:F9:06:5A:85:61
            X509v3 Authority Key Identifier:
                keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1b:fb:83:e3:52:cc:e1:2f:b1:e0:3d:04:35:2d:63:a6:17:
         c7:20:2b:a0:0f:86:81:cb:42:a9:9b:1d:65:4b:cb:42:be:f2:
         59:df:82:70:c3:04:d7:a9:2f:a2:5f:9e:85:2c:e4:15:c6:c7:
         b4:04:1a:c0:e6:a2:ba:93:a6:31:5e:74:86:25:3a:13:63:fa:
         4a:ab:a1:dd:15:5c:e0:a0:e0:be:3c:95:a3:13:da:7b:30:16:
         59:bc:dc:b7:5a:5f:97:3f:41:d0:cc:26:c9:2e:ea:9e:b5:5e:
         d6:80:41:17:89:81:66:39:13:11:07:08:b4:c8:02:bc:80:f3:
         50:fe:c7:19:09:82:4f:af:ae:97:88:5e:48:03:89:b8:e3:5d:
         c1:62:15:33:37:3e:ac:cb:52:70:ed:41:09:5e:cc:9f:ca:cf:
         d3:ca:b3:96:bf:89:13:ab:6d:ff:34:21:00:d1:d2:d2:d0:28:
         3c:c5:8c:5d:ff:9e:bd:45:e9:4c:86:c4:2a:85:b4:f9:61:e5:
         6f:27:83:e8:e2:61:7f:b9:36:9b:38:18:1b:a2:db:2d:ec:bc:
         01:64:06:5c:7a:df:f4:81:00:c1:28:29:24:74:b5:33:6d:c9:
         11:dd:55:fc:ce:51:76:b1:dd:9a:d4:f3:12:a6:9a:8e:85:de:
         34:81:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:41 2026 by rpki-client