Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File:                     ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier:          TGJPoQIPOZztgPk+Lc1Lg0y3S10UvQtGcBpKG4PRrac=
Subject key identifier:   BE:2A:BD:C1:3C:E3:A2:8C:3F:11:44:9A:82:4A:D2:1A:A8:CF:3C:34
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer:       /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial:       019CAA21FD9267B6A26EE193B244C329AF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number:          0E92
Signing time:             Sun 01 Mar 2026 16:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:20 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:20 +0000
Files and hashes:         1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: QG5rFRuiJBUvogxD6WVx1ztLSGTfQugxNwG2HYLtQrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:fd:92:67:b6:a2:6e:e1:93:b2:44:c3:29:af:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
        Validity
            Not Before: Mar  1 16:01:20 2026 GMT
            Not After : Mar  2 16:01:20 2026 GMT
        Subject: CN=be2abdc13ce3a28c3f11449a824ad21aa8cf3c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:13:c4:a1:41:bc:1d:fd:77:fb:d4:9f:a3:ba:
                    82:2e:7f:e5:30:3e:35:6c:db:a2:6b:51:45:67:78:
                    bc:9d:2d:5b:6c:d8:0e:64:e2:2f:8c:71:22:ca:a6:
                    d9:e7:d1:09:fc:d7:55:81:c2:77:8a:10:89:84:dc:
                    56:21:17:de:71:32:7c:d9:5a:7f:ea:25:f5:59:99:
                    ee:31:f7:5a:39:fd:f8:78:ea:b7:0a:31:f3:6b:47:
                    48:e4:45:c0:0f:42:33:95:19:f2:b3:db:3e:63:f6:
                    94:7d:db:28:d4:ce:d9:20:a1:95:b0:e0:79:93:8c:
                    a5:f1:78:71:34:dc:17:6b:b1:ce:64:e9:b5:70:bc:
                    14:f3:42:f0:42:57:da:71:35:43:c1:cb:9a:01:d7:
                    04:08:fa:59:85:07:14:28:2f:a6:81:e8:08:29:3e:
                    50:c0:cb:aa:3f:90:18:b7:be:26:55:e4:0d:ca:2e:
                    51:48:90:1f:60:fa:1f:99:61:52:a6:44:f4:c4:7a:
                    c2:e1:f2:25:ae:2e:ac:44:12:0a:72:3a:b8:59:f9:
                    47:e9:82:0b:83:76:4e:05:a6:47:3c:df:80:61:f1:
                    fe:9e:d2:70:c6:8e:d2:58:9c:1a:b0:78:4c:65:ff:
                    a9:11:0a:a5:05:e3:8e:07:46:19:cf:ab:bb:00:71:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2A:BD:C1:3C:E3:A2:8C:3F:11:44:9A:82:4A:D2:1A:A8:CF:3C:34
            X509v3 Authority Key Identifier:
                keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:0b:2c:77:97:d0:60:fe:6b:c9:14:6b:aa:44:d6:95:3e:
         51:20:60:8d:3e:04:7c:ac:af:61:c6:b1:e1:94:62:6f:6b:14:
         c2:f0:28:ca:28:61:67:3a:a1:c5:d6:76:01:a5:97:9b:cf:a7:
         c9:8b:ec:c5:bc:2c:f3:4f:c9:63:47:5a:07:00:bc:43:67:a2:
         4d:88:9e:ed:48:56:8d:fa:63:0b:2b:04:a9:b1:bf:51:76:ed:
         29:0d:19:8e:59:22:32:79:17:90:3b:32:56:4a:16:6a:3d:42:
         08:76:0a:2b:b1:f4:96:d4:e7:01:6a:f4:62:8e:47:33:23:6a:
         ad:b9:48:7a:13:8e:f8:35:eb:12:9f:36:33:ba:8c:bb:98:e1:
         35:91:d8:03:b2:65:9e:82:a0:c0:8b:9b:13:8a:c4:5a:f3:4f:
         29:72:b0:19:36:57:ed:62:7c:21:04:cb:98:2d:22:fc:27:9e:
         9f:7b:7a:70:a3:47:00:9a:fa:20:fd:e4:d5:e2:d3:44:be:45:
         4a:bf:5b:91:ba:6e:f7:ee:7b:e5:e4:28:85:b5:88:49:9e:bc:
         9b:bb:85:c4:cf:70:34:9b:c3:48:a4:4b:74:19:e2:30:e1:7a:
         34:e0:a7:0e:24:f0:e4:62:3e:2b:63:6a:96:26:73:24:e9:f8:
         53:e7:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:35 2026 by rpki-client