Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File:                     ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier:          6RDc7OnhRUannSZnVodBqGJL4sPVC7I3B8pBNYrG/1I=
Subject key identifier:   45:D3:1D:E8:F0:F1:43:C9:F1:47:52:29:1B:05:C2:5B:97:BA:FF:CA
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer:       /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial:       019CABA201B115BA65D4A7A5549368093C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 23:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:46 +0000
Files and hashes:         1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: b3xw0M8XnJZhPV8+JrUT/GtUs1HuDzWHVzLV3/ulOGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:01:b1:15:ba:65:d4:a7:a5:54:93:68:09:3c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
        Validity
            Not Before: Mar  1 23:00:46 2026 GMT
            Not After : Mar  2 23:00:46 2026 GMT
        Subject: CN=45d31de8f0f143c9f14752291b05c25b97baffca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:af:25:16:6f:2d:9e:fb:c2:d2:60:9b:9e:
                    0b:47:a3:b6:8e:a5:1c:89:6c:58:88:2a:2a:72:c8:
                    8f:f4:73:b7:66:6f:6c:58:1e:63:e4:60:fb:60:29:
                    f5:38:e5:3c:a6:33:9e:e4:cf:33:2a:d4:25:ee:6e:
                    50:92:b6:e9:73:3b:5c:6b:bc:98:be:cf:b5:3e:15:
                    63:57:99:d2:87:c8:e4:10:bd:d3:7d:8e:a3:07:19:
                    d2:57:18:d6:0e:4c:24:3c:63:33:5a:e5:b8:af:18:
                    33:f2:0c:9b:0a:c5:75:d1:19:e9:c5:04:83:c6:92:
                    28:0a:e3:05:ce:e2:bd:6b:fc:1f:5a:5e:20:fa:5e:
                    a9:5e:03:3c:b8:6f:d6:7f:c0:2a:b8:31:82:6e:d3:
                    41:91:1d:48:e9:88:e6:e3:0e:df:0e:fd:3a:f5:77:
                    1d:74:40:49:c4:20:ac:2c:ea:7b:46:51:41:52:b0:
                    35:54:44:1a:06:8c:0c:d2:b0:89:48:5d:00:72:ac:
                    6e:22:ed:65:0a:f0:2b:05:13:d2:4d:25:43:13:90:
                    ab:ac:45:22:5a:13:55:e4:a7:31:ca:21:6a:5c:01:
                    26:ca:27:86:da:95:2c:10:e0:7d:9b:2d:7e:6c:35:
                    53:98:7d:9d:1e:47:2c:89:61:0c:44:9a:65:4f:e0:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:1D:E8:F0:F1:43:C9:F1:47:52:29:1B:05:C2:5B:97:BA:FF:CA
            X509v3 Authority Key Identifier:
                keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4c:2d:0f:d9:89:b7:d9:6f:ef:75:29:d0:05:7d:85:f4:7e:
         9a:84:15:3e:d0:e8:d3:fa:e4:b0:eb:81:64:50:27:6c:0f:62:
         a8:f0:39:b7:cf:0d:fe:2d:dc:c5:c7:3d:fb:de:6c:d2:df:44:
         13:e8:53:ce:e7:5b:cd:37:c1:fc:29:76:93:e2:72:36:7e:51:
         cf:d9:b4:74:bc:07:d2:7d:c9:bd:68:26:a4:92:6e:ea:9e:46:
         c8:32:37:f9:9f:63:a7:f1:87:0e:56:50:d5:15:b4:e0:89:4d:
         db:0f:51:e4:6e:a1:54:55:80:52:65:23:3d:38:59:9e:15:98:
         f2:c7:88:46:11:b8:ce:44:b6:4e:f3:ec:92:f4:bf:a4:68:c4:
         82:06:e1:4a:d1:60:01:0a:fd:7b:5e:ff:21:85:cd:6d:11:97:
         b1:20:f2:c5:42:48:68:df:99:bd:10:18:24:89:04:de:a7:cc:
         d6:e4:fd:4c:b8:00:4b:d3:90:1b:3b:5f:99:30:f0:22:76:27:
         47:09:04:ea:07:d3:0f:16:62:fc:93:01:7c:bf:fe:d0:d0:77:
         1d:f2:f1:2e:da:d5:ce:34:1d:d6:94:a0:a1:8f:55:29:6e:64:
         a0:d3:a2:51:63:66:56:d8:d1:62:a9:be:73:26:8a:61:60:2a:
         b7:2b:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:03 2026 by rpki-client