Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File:                     ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier:          IDLgcXnsefypWlLq+A7xD8bJydhb/Ac3X2QgvmeE3Vg=
Subject key identifier:   01:80:BD:B1:68:7D:6C:AD:52:46:05:01:CB:A6:B7:07:AD:33:64:C4
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       019CAAFD5B170F0257E4A62E9E22F0EF8175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number:          18B4
Signing time:             Sun 01 Mar 2026 20:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:56 +0000
Files and hashes:         1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
                          2: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
                          3: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
                          4: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: Q9TVE6LLK0iomxkf3wCEIe069BIKUX1aNV0R/aP1dgQ=)
                          5: axyqBQ48rrA_J1z5ycbZeCJx_Cc.roa (hash: 22q6iAZfHHtYuEjMCMpLAY7a5Lmv2Y859n6zpVXqo14=)
                          6: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
                          7: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:5b:17:0f:02:57:e4:a6:2e:9e:22:f0:ef:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: Mar  1 20:00:56 2026 GMT
            Not After : Mar  2 20:00:56 2026 GMT
        Subject: CN=0180bdb1687d6cad52460501cba6b707ad3364c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:2d:64:7f:90:8d:87:cd:b4:d4:5c:f1:f9:
                    f3:a7:97:8a:13:e1:c1:3b:b3:83:e1:e7:b0:f1:76:
                    17:7f:4e:dc:a4:b6:8b:67:c0:ff:24:f6:5b:df:19:
                    40:44:9a:97:7a:7c:b8:a3:20:5a:96:b0:25:59:4c:
                    e8:37:8e:a4:a8:ee:d1:7d:8a:8e:a5:6a:27:59:45:
                    fb:cc:5c:16:80:3f:83:7a:9a:e2:c6:80:7d:89:b4:
                    62:29:ef:73:8b:ed:e5:b7:5a:30:25:d9:5b:5a:26:
                    bb:cf:19:d8:98:99:cf:75:d2:13:b5:84:c9:27:9e:
                    94:5f:54:67:5e:90:f8:1e:83:c9:3b:a5:39:6c:d4:
                    e3:70:4a:05:f7:6a:bd:af:4e:41:43:1f:f5:0d:5c:
                    ea:41:f5:f4:71:5c:f7:33:56:55:57:2d:bd:3c:d0:
                    cd:43:47:18:3d:5e:3a:b5:a8:40:e7:e6:fd:f5:f8:
                    f8:df:64:d7:a4:31:9e:4a:4d:3b:b6:a3:15:61:5d:
                    24:e9:65:d9:0a:67:83:00:19:13:e3:64:56:45:43:
                    93:4e:14:db:3c:18:2b:21:15:1d:54:48:4d:23:a6:
                    38:a3:5a:bb:7d:3c:8f:de:93:27:b7:75:29:d0:d7:
                    3e:32:12:ac:ec:b0:d7:a3:1b:e9:0e:8b:a5:dd:f0:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:BD:B1:68:7D:6C:AD:52:46:05:01:CB:A6:B7:07:AD:33:64:C4
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:b0:e0:8d:03:b4:be:13:0a:90:78:cc:0d:74:ab:f8:00:
         c3:d3:8f:64:8a:d6:73:41:4b:4e:f3:46:c4:6a:f3:09:ca:ff:
         84:2a:b4:49:00:7f:db:a6:77:89:44:ba:b0:62:9d:16:7a:ac:
         79:7c:2f:f4:03:dc:83:da:78:4e:b2:40:e5:f7:52:39:a5:80:
         d8:fb:40:d0:35:16:43:70:38:29:5a:17:2e:ea:b9:5f:01:96:
         4c:13:20:2b:5f:2f:88:c1:30:c2:5b:3b:9d:a4:03:0c:b8:02:
         5f:6d:df:3e:d2:53:43:7a:50:bd:42:e3:0a:60:e5:9c:2f:31:
         22:19:e3:26:ba:19:9b:fa:4f:4d:03:31:13:26:4b:ac:fd:a7:
         20:59:f9:e4:d1:b2:3e:31:94:9f:b2:70:4e:5d:26:29:07:32:
         0a:2a:17:f5:80:b1:85:c0:8b:e9:dc:e3:4c:45:e5:c0:79:47:
         26:e8:9f:40:06:f7:a9:9a:3c:bb:65:f3:89:70:ee:6a:ab:31:
         32:ce:e8:f2:66:0b:7b:8e:ca:e9:e5:21:a6:17:8d:71:9f:08:
         b1:54:f2:00:6a:9e:a3:4c:af:67:eb:f1:9f:15:8b:b2:f3:b8:
         44:60:fd:0e:0b:a7:55:cc:0f:5f:29:70:15:a9:3c:cc:00:07:
         31:8f:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:56 2026 by rpki-client