Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File:                     ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier:          a7K84FudnCqLZYazN1TBL8lWrAXnmAOdfIhi2Fwa+/c=
Subject key identifier:   63:6A:5E:56:9C:5C:3F:CB:C6:B2:6A:BD:D5:71:14:F8:56:72:77:58
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer:       /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial:       019CAD5A13FFA63DAB7120746594CA7B7D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number:          13D3
Signing time:             Mon 02 Mar 2026 07:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:27 +0000
Files and hashes:         1: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: Ias5CEWGjWn9tecc97Xzg3pmEZd7G9b7V9XQBfplOjU=)
                          2: uD5eUDrQgXD4j74OWplFHBQd_hs.roa (hash: 1h/Ex6tXdCvENtcBMUtZd+XOEB+wQCjfinmzLg0hRdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:13:ff:a6:3d:ab:71:20:74:65:94:ca:7b:7d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
        Validity
            Not Before: Mar  2 07:01:27 2026 GMT
            Not After : Mar  3 07:01:27 2026 GMT
        Subject: CN=636a5e569c5c3fcbc6b26abdd57114f856727758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:3f:33:ff:ab:c2:4e:53:ec:28:33:83:df:
                    98:8d:77:1b:af:11:3f:fe:1f:ca:e6:67:db:7b:f9:
                    de:bd:29:31:f1:0e:27:29:33:dd:2b:41:20:26:af:
                    10:a7:85:33:46:83:d7:37:6f:0d:36:b3:1a:40:28:
                    c0:b1:25:04:e8:fb:76:46:61:8b:47:50:65:a3:7e:
                    e2:75:dc:9b:cc:56:64:52:b2:61:fd:ec:85:01:6d:
                    81:e0:6a:f4:6e:9f:c6:58:34:68:c9:6a:01:35:e2:
                    75:b7:29:15:63:f9:2f:8c:f5:ab:07:5b:4c:49:10:
                    c0:60:b3:f0:95:ae:90:7e:0c:99:1d:dc:41:de:4f:
                    4c:5e:6b:20:ad:e0:96:33:89:00:c9:4b:89:d1:dd:
                    0a:3f:e2:09:a7:8d:19:17:f7:9e:ee:59:db:26:92:
                    90:4f:76:64:66:f9:3e:b0:da:66:56:eb:2f:ef:07:
                    e2:8e:b7:09:12:5f:4b:c3:b2:37:dd:76:9d:c8:3a:
                    cd:2a:30:17:97:ec:c8:c0:aa:1b:91:8d:f5:a2:51:
                    45:47:d1:ba:bc:84:e7:4f:57:f2:74:70:ea:08:19:
                    ec:2d:49:14:16:18:11:bd:af:2c:35:b7:18:f8:62:
                    43:8f:f4:71:10:c4:a0:d9:0b:e0:2f:41:88:fa:3a:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:5E:56:9C:5C:3F:CB:C6:B2:6A:BD:D5:71:14:F8:56:72:77:58
            X509v3 Authority Key Identifier:
                keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:9d:30:49:71:e3:32:12:82:fb:3c:09:68:5c:c3:67:6b:
         0e:8e:73:cd:a0:26:6f:e7:c1:eb:1e:f6:53:5e:a3:80:2e:a3:
         05:01:f8:de:53:9a:3d:8d:af:be:75:ea:93:e8:52:02:58:7b:
         b7:1c:7a:e3:f5:8e:8a:ca:f6:64:c1:a9:45:b0:71:c7:8b:8a:
         38:81:6c:67:6e:b4:3e:60:93:62:02:6f:28:d0:40:f3:74:43:
         87:26:a9:88:f7:31:f4:7e:99:7c:fe:35:be:81:7a:b8:a3:bf:
         a4:c4:20:7f:b0:3b:e8:ec:f5:ef:ee:fe:ba:71:b7:31:42:71:
         e1:51:a4:c2:95:1c:e1:ea:20:6f:8a:3e:fd:96:d0:c2:99:b9:
         72:2f:8b:3d:e2:90:c4:59:eb:3b:79:7c:1c:6a:c5:7b:f6:c5:
         bd:a2:ff:4b:aa:2c:f1:da:1a:d1:80:9e:56:ce:f0:a3:ff:ff:
         c0:69:a4:40:c0:9b:62:ec:b6:ce:13:03:47:93:2b:1b:9f:20:
         b0:c0:74:c4:a7:bd:14:55:89:0f:40:3b:27:24:32:5f:e0:fd:
         37:a6:d4:26:32:ba:61:4e:59:3d:88:cc:46:c1:fa:34:d0:7a:
         64:d8:aa:c0:a6:b5:6d:88:6c:22:8e:42:aa:06:86:06:54:c2:
         79:10:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:25 2026 by rpki-client