Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File:                     ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier:          UaqCQ9VhCIpK0RdUN0twJUKCsNq1bMm++Kj+SurbE5k=
Subject key identifier:   41:63:C6:C7:F3:D2:BB:21:59:42:DC:DB:1A:E8:9E:53:D0:60:5B:F7
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer:       /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial:       019DA41C73173798D0B3C207B935CA6AA158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number:          1715
Signing time:             Sun 19 Apr 2026 05:00:20 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:20 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:20 +0000
Files and hashes:         1: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: ndqluq9GdIxdR3y4L/VJrIw9rEi1V6Exgla69OCBNoU=)
                          2: c0zEfFDSZZWFy-vBS9NWpwPjwoE.roa (hash: Degy9LDZTNrQEBY/nXvirHbXKz42WXh/PcwFt1G3pj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:73:17:37:98:d0:b3:c2:07:b9:35:ca:6a:a1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
        Validity
            Not Before: Apr 19 05:00:20 2026 GMT
            Not After : Apr 20 05:00:20 2026 GMT
        Subject: CN=4163c6c7f3d2bb215942dcdb1ae89e53d0605bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:c2:95:3f:48:b8:90:83:f0:b3:e2:9a:af:
                    18:a6:88:80:9e:1b:b1:58:05:29:04:26:ef:df:9a:
                    53:64:68:20:fe:af:dd:30:0b:d0:7c:52:6c:bb:f8:
                    b7:aa:ef:65:91:f7:4c:94:10:7b:05:44:64:0d:52:
                    dc:37:8f:85:f1:31:5f:12:54:d6:e3:da:90:78:44:
                    57:53:69:cc:96:bb:25:28:e2:a3:78:6a:b6:7a:b4:
                    ca:65:8e:35:c6:7b:18:4f:e1:ae:71:a3:fc:48:f6:
                    5b:7b:80:ba:f8:3f:1d:ee:a3:5f:4b:13:2d:61:f3:
                    d8:a0:5b:f6:8b:6b:e3:4a:b2:97:39:e3:b0:8a:9d:
                    32:f1:c8:de:77:02:fb:15:a7:72:1b:2b:86:d6:3d:
                    94:44:67:a1:c2:33:2f:34:c5:93:70:aa:10:6e:4d:
                    ab:36:8e:ac:09:c7:db:eb:2c:3f:85:0f:85:44:95:
                    81:2f:a9:9b:53:03:44:be:75:a9:0c:fe:7f:37:a4:
                    97:8a:00:88:c7:1f:ac:97:a8:8b:6d:df:22:f9:1c:
                    1a:80:e8:0c:18:68:73:69:e3:c4:5d:2f:2d:c1:a3:
                    c2:a8:64:c1:c1:d3:08:ac:be:6f:49:e8:df:e3:2e:
                    90:ac:29:c7:89:a9:ec:72:96:76:f4:48:ef:11:7c:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:63:C6:C7:F3:D2:BB:21:59:42:DC:DB:1A:E8:9E:53:D0:60:5B:F7
            X509v3 Authority Key Identifier:
                keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:9f:e9:45:ed:93:1b:8f:47:09:24:24:ea:c1:dd:ec:ff:
         c6:c8:2d:70:e7:e9:5e:f0:3c:1e:d7:d6:11:bb:b0:36:0f:72:
         87:70:61:f8:17:60:b9:9f:33:c9:6d:de:00:a3:3a:fd:a8:ad:
         26:a3:5f:b7:e9:43:1b:0d:61:d0:5f:8f:5b:77:d0:f6:dd:98:
         5d:1f:e9:3f:a9:b7:ad:07:bd:7e:ed:ae:60:f3:96:de:3b:31:
         60:1b:f4:ae:f5:a2:55:8b:df:5b:f5:f5:bf:5c:09:ed:2d:45:
         7e:da:cc:70:c2:4b:36:c5:42:2d:5e:19:de:1e:dd:77:14:77:
         ca:cc:13:a3:57:ce:e9:48:b8:29:7c:42:5b:97:a0:c8:4f:d7:
         4e:a8:62:5c:b9:31:1b:65:29:59:8f:e4:6a:c3:bd:be:af:21:
         81:dd:b4:01:a8:d8:10:0c:20:eb:67:75:82:eb:38:5d:5c:b0:
         3f:bf:7e:77:ef:88:ae:cb:00:25:ba:b5:9d:bd:84:fd:fc:d0:
         90:29:31:2a:63:2f:bd:a0:2a:74:81:4a:e5:50:f4:d3:f7:22:
         65:08:c4:3b:69:22:fc:60:0c:2e:10:7a:11:ab:10:42:47:e2:
         9d:b7:1c:08:42:5a:00:72:f0:a8:dd:cf:66:be:b6:fa:18:d4:
         74:58:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:40:09 2026 by rpki-client