Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          Eng7DhfKZIhCAHuzsJoC5o3gRj2EWMfSvWpbCvMSA9A=
Subject key identifier:   FA:8E:6F:27:15:C8:7B:75:29:53:F3:99:85:A2:1E:75:D5:6C:E1:DB
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       019CAAC702EFA48EAEFB2EB7ABAB0E0F14C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 19:01:34 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:34 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:34 +0000
Files and hashes:         1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
                          2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
                          3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: uMCG1+T1TgjLBihU+TwWD6DWkd7Se/4zG8HpaOmxqho=)
                          4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:02:ef:a4:8e:ae:fb:2e:b7:ab:ab:0e:0f:14:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Mar  1 19:01:34 2026 GMT
            Not After : Mar  2 19:01:34 2026 GMT
        Subject: CN=fa8e6f2715c87b752953f39985a21e75d56ce1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:da:a0:e7:47:c3:a9:6f:65:e7:67:c3:ff:
                    c9:17:5d:c8:4d:02:42:78:e8:96:73:cf:c2:c9:bf:
                    52:a0:f5:c7:be:52:f2:76:3e:89:bc:2a:3a:2c:14:
                    86:6d:dd:fd:3d:81:22:6c:f0:a0:e1:9e:03:a3:c4:
                    90:02:19:10:2f:7b:e8:9f:71:fb:5c:2d:df:83:cc:
                    78:61:c1:b7:2d:55:b6:59:48:e3:29:bd:00:f1:1f:
                    29:a7:33:e6:bf:30:75:51:31:a2:0c:b2:b4:0d:d0:
                    71:9c:f1:cc:ec:8a:59:a9:62:7e:a5:00:7f:9f:1b:
                    94:47:3f:46:1e:b8:aa:81:ef:9b:5a:f7:39:19:a3:
                    2e:7b:5b:1b:81:40:19:ad:86:58:52:da:92:b1:b7:
                    c1:05:f3:ae:9e:19:85:51:b2:12:cc:ca:4c:63:b0:
                    18:74:3f:54:0f:bb:06:b9:5e:28:a1:06:81:27:92:
                    63:83:b3:34:a0:7b:19:bd:62:ac:4c:bf:3f:08:c5:
                    68:80:38:9a:c9:37:a3:e1:51:37:e7:c4:c5:b5:11:
                    02:bb:cd:df:28:7e:f6:9d:bb:ae:74:e1:4b:ca:65:
                    51:a7:c4:88:55:2b:2f:ff:c6:62:52:f5:e4:4a:ea:
                    4b:0b:77:e9:cc:23:a1:5f:1d:fa:cd:6a:e4:e0:de:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8E:6F:27:15:C8:7B:75:29:53:F3:99:85:A2:1E:75:D5:6C:E1:DB
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:bd:93:0e:c3:ec:5c:f2:33:0e:29:35:6e:08:01:3e:9e:
         ac:8e:20:38:1f:ad:98:8a:5a:2e:20:50:45:51:b6:8b:84:94:
         38:d7:45:33:73:7a:bb:25:95:51:10:a0:8a:8d:5a:e5:25:ce:
         82:9d:5b:12:90:e4:4d:74:8e:04:71:05:ec:d4:9a:df:f0:4e:
         1f:32:36:ce:32:91:01:a4:12:6e:3f:ea:80:28:4e:6f:c0:8e:
         fa:ae:a5:a1:89:ad:43:80:ae:08:c3:3e:76:d1:c1:6a:a0:89:
         e2:ff:cc:c5:2c:f4:ee:ff:85:6c:a5:08:2e:a9:b2:e6:45:02:
         1b:a2:99:01:34:55:8e:ef:b6:4f:17:aa:19:73:7b:33:8a:7a:
         58:ed:51:ff:54:bc:1a:88:43:d8:01:eb:9c:34:3e:4f:df:6b:
         cd:42:8b:e9:2b:5e:f8:5c:15:c3:36:12:e0:26:dc:96:c6:58:
         cc:45:7d:54:e5:01:98:b9:da:54:a9:c5:78:eb:68:b5:b8:2a:
         7c:5b:3b:56:84:ba:e7:e0:68:ab:ef:5f:5a:44:39:7b:81:d8:
         4f:57:64:94:84:76:3d:a8:27:85:9b:1b:59:b0:25:52:7d:b9:
         38:8b:a8:b1:a4:b0:70:3a:8a:f0:6b:0c:13:92:44:dd:a0:f2:
         f1:6a:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:29 2026 by rpki-client