Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          eaL22M/J4Lv2nlgJpTTwT4g5ETp6BYAO5+fQF7T/K1Y=
Subject key identifier:   CA:EA:BA:F0:F7:CF:A7:ED:92:D5:D9:FD:EC:74:F8:63:2B:4F:58:2D
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       019CA8D7FBB7FAD7039AD15E387CE4BDFC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 10:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 10:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 10:00:52 +0000
Files and hashes:         1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
                          2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
                          3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
                          4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: ROmU7F6g8Ym8u+Oq5ckPBUU++BA5tn/M++36Ftbdssk=)
                          5: uqJ-WoJ0LMUzPyz6AyCWPdAMqaA.roa (hash: lX10IX/8pnEVBdXCqvOlS3MwC2z4PooE1DCcSVaJLYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:d7:fb:b7:fa:d7:03:9a:d1:5e:38:7c:e4:bd:fc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Mar  1 10:00:52 2026 GMT
            Not After : Mar  2 10:00:52 2026 GMT
        Subject: CN=caeabaf0f7cfa7ed92d5d9fdec74f8632b4f582d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:71:ce:b2:45:16:a3:d1:9d:75:f7:09:77:
                    31:21:76:82:1c:d0:80:ee:b0:fd:72:2f:43:4e:5b:
                    77:ea:82:70:26:b6:86:3d:39:39:d8:1f:1e:7f:53:
                    7d:a7:62:2a:b6:9d:4b:33:92:52:f4:b4:87:38:46:
                    38:27:63:65:ba:14:f4:8f:8a:30:f8:10:70:d5:55:
                    18:da:f6:15:f1:d5:c3:69:ae:af:91:19:f4:a5:e5:
                    f3:d4:b7:4e:ab:6d:61:cf:4b:37:b7:f2:92:fd:c9:
                    00:72:76:17:2e:64:ab:87:af:ef:9e:89:8a:3d:6b:
                    2b:5f:57:f4:e2:2d:ee:b9:96:aa:d0:74:8e:88:fd:
                    e4:48:45:6c:42:1b:32:ff:7f:5a:ed:dc:b3:63:6e:
                    47:e2:6b:8d:2b:eb:26:80:1c:2c:31:dc:08:cb:97:
                    97:31:b6:40:24:ac:b5:84:c0:89:91:a2:ca:30:72:
                    c1:bb:18:dc:68:8e:4b:93:81:a4:44:ad:16:c3:c5:
                    78:ca:fe:c5:2e:52:b6:d8:86:ea:35:43:7f:20:c4:
                    53:3d:9a:cc:34:26:d9:e0:be:db:24:6c:9c:53:c1:
                    77:be:bc:eb:d1:5c:4b:dd:68:20:50:b8:64:79:43:
                    02:9c:27:39:86:ee:88:cf:2f:31:92:8b:0b:1f:17:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EA:BA:F0:F7:CF:A7:ED:92:D5:D9:FD:EC:74:F8:63:2B:4F:58:2D
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:eb:cc:9c:28:ee:78:30:e4:39:3e:04:fc:eb:f0:fd:fb:c9:
         5e:f8:c3:5c:b5:1b:31:14:17:09:d3:62:69:2a:d6:81:63:4a:
         2e:d5:cf:3b:a1:fe:cc:4d:31:8e:fa:63:11:f3:9b:a0:31:bd:
         d7:17:a6:9b:7a:d9:78:7e:f9:ba:fe:0f:1f:78:43:14:1b:38:
         15:05:e3:cc:e1:ad:91:46:13:7f:de:52:49:9c:54:fc:b5:24:
         b8:9b:a8:2c:6d:4d:e1:79:55:11:4d:e2:93:ef:51:24:31:0e:
         ed:08:97:f2:57:a3:1b:c0:29:89:4f:a8:54:64:62:a1:c5:4f:
         3e:0c:59:3e:65:3d:e4:fd:cb:c4:8b:bb:a6:41:07:0c:b3:ec:
         dd:02:71:86:4b:65:d5:6b:8c:b6:c5:61:7d:ed:c7:4b:03:49:
         62:08:ac:f9:7b:59:e7:6a:96:22:aa:f9:65:d3:b1:15:aa:6a:
         13:a8:0c:73:02:8d:d0:95:93:2c:e8:5a:6d:d7:3d:32:f1:e1:
         6a:15:93:be:8e:ea:42:b5:1c:9b:ce:ee:9a:94:73:59:b6:2e:
         e2:20:30:8e:f2:f2:7d:dc:59:23:80:8e:fd:34:bf:86:63:80:
         38:df:2d:fe:c2:b4:a7:f5:61:35:b7:39:48:51:9d:0c:8e:72:
         8c:63:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:41:26 2026 by rpki-client