Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File:                     zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier:          a83vnQU10eHrEtIcTxJcLswZSZSdzgR3Az1KRCFfqB4=
Subject key identifier:   21:8F:98:1C:8B:20:5C:BE:4F:CF:BA:CD:92:58:C3:8A:71:01:62:71
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer:       /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial:       019CAB6B6D5F11D8AD8D4A8B682668B5D90F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number:          0A64
Signing time:             Sun 01 Mar 2026 22:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:10 +0000
Files and hashes:         1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: dhnZM2oasf5rVo6kjmjd77PBYgla1o7vyhrYUC2Fgyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:6d:5f:11:d8:ad:8d:4a:8b:68:26:68:b5:d9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
        Validity
            Not Before: Mar  1 22:01:10 2026 GMT
            Not After : Mar  2 22:01:10 2026 GMT
        Subject: CN=218f981c8b205cbe4fcfbacd9258c38a71016271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:b9:06:55:0c:c5:e4:ca:07:cf:8b:78:da:
                    d6:c6:6f:2f:06:60:ad:d5:e9:27:6f:c1:17:8c:94:
                    f3:24:ca:0b:96:6e:43:d1:b3:c7:6b:f4:b9:f2:c5:
                    a5:69:e2:7d:14:5f:95:f6:ce:8a:d0:dc:36:a1:84:
                    18:f8:09:eb:70:eb:b6:03:27:93:f5:10:e1:f7:92:
                    cc:a6:3d:97:0d:66:5f:29:63:a4:33:34:dc:6e:23:
                    6b:31:33:bd:43:4f:77:c3:90:ba:76:6f:2f:c3:b3:
                    ad:d7:bf:cc:fb:b5:e5:7f:ab:9f:68:af:ac:f0:08:
                    94:1a:e8:89:8b:a0:4b:81:43:5e:5f:f4:b7:59:10:
                    80:43:59:a4:ad:38:8c:3b:88:69:51:1f:ed:7c:62:
                    aa:34:1c:3b:06:28:99:df:17:2b:c7:53:be:d1:6f:
                    80:20:32:ef:e5:12:f5:8b:c1:ed:c7:d4:de:e4:88:
                    25:bf:ac:12:24:85:ab:b7:ad:ea:74:96:d5:19:b9:
                    3d:3f:54:05:f9:d5:a4:3d:7d:50:a1:5c:69:63:81:
                    f9:38:e7:b6:5c:15:f5:f4:0b:6b:8c:c0:29:6a:0c:
                    76:28:b5:2b:4d:20:21:5e:3f:8f:5f:f4:77:2f:91:
                    6e:6b:f5:1d:6c:15:5b:3a:26:f3:85:61:53:c2:04:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:98:1C:8B:20:5C:BE:4F:CF:BA:CD:92:58:C3:8A:71:01:62:71
            X509v3 Authority Key Identifier:
                keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:98:25:c9:b1:70:ed:67:7f:48:4a:15:a8:f3:40:54:ce:
         78:13:fc:07:26:53:9d:01:83:8e:4a:73:fa:8d:1f:c8:29:6e:
         c5:3a:1f:5b:84:83:70:d4:3d:de:c7:50:ff:23:7e:84:ca:42:
         30:b7:bc:41:b8:8f:ae:e8:61:fb:6d:dc:52:d0:78:24:d9:82:
         14:72:82:95:39:6f:54:9e:c1:74:62:f9:3e:40:1b:f5:74:9a:
         01:ba:d7:f9:77:9d:d4:04:3b:aa:c1:12:a2:bb:30:42:fb:ef:
         60:b2:f6:b2:42:83:80:a8:ce:1e:95:44:06:72:ef:ef:7c:32:
         86:51:b5:fe:70:91:f3:42:bf:a0:ed:40:a2:2e:d3:34:3f:7e:
         5e:68:c1:30:79:2c:3b:83:0b:3f:f0:08:dd:c8:b6:51:44:de:
         32:77:61:77:35:b1:21:02:5c:90:85:62:ca:ff:d1:cb:9d:1a:
         30:d2:5f:1a:5b:a3:d8:3d:fd:03:f7:4f:20:70:a0:46:05:06:
         6a:33:11:1e:3e:4d:12:8c:4b:62:d6:13:16:b1:56:ff:cf:4e:
         9d:fe:a1:3d:f3:7b:68:80:d9:81:0d:bc:f0:5d:86:52:65:09:
         9a:d7:63:8a:7e:e5:bb:43:f7:05:92:a7:aa:f5:0e:d4:51:dc:
         63:3b:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:18 2026 by rpki-client