Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          zyqLn1zaYWxKySsKV51dG28HIgrR1TDwfu3bvstRp9E=
Subject key identifier:   1B:EB:48:6C:2F:F8:72:B2:5C:BE:81:60:1C:95:AF:85:94:9B:CD:BE
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019CABD916B5D2D0E407FD161BE37DE81816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          1867
Signing time:             Mon 02 Mar 2026 00:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:56 +0000
Files and hashes:         1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
                          2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
                          3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
                          4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
                          5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
                          6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: v06MwL2O4iHvAIUIkeuBUvdWYdrAZKlFoCk0tuP+mH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:16:b5:d2:d0:e4:07:fd:16:1b:e3:7d:e8:18:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Mar  2 00:00:56 2026 GMT
            Not After : Mar  3 00:00:56 2026 GMT
        Subject: CN=1beb486c2ff872b25cbe81601c95af85949bcdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:4e:45:d0:93:bf:58:8a:00:00:7b:4b:d3:
                    12:5c:95:cf:77:0a:40:00:92:e8:94:b6:98:c1:b4:
                    43:1c:0c:84:58:f6:f8:9c:a4:80:b4:6d:8a:f2:c4:
                    7e:10:75:11:61:5a:69:23:71:11:1c:fd:af:a7:f5:
                    a7:dd:d4:85:1f:6e:3e:6e:e3:67:e5:b1:4f:e3:0f:
                    96:38:7e:f7:b9:aa:3a:c0:fd:2f:f2:af:98:b8:3c:
                    e8:18:f5:5d:f0:d0:94:27:ba:95:69:f3:96:23:fb:
                    4c:af:fe:57:1a:ae:54:eb:dc:89:15:18:fa:e9:ba:
                    c2:7d:ad:2d:70:db:4c:70:4d:b6:dc:a9:c0:e7:b7:
                    1d:65:92:d0:3b:e4:de:6b:9d:ff:91:72:c9:82:d7:
                    8d:94:85:ec:cd:27:a4:b2:42:8b:45:47:b0:b7:bd:
                    ae:b8:33:3b:c1:b1:8e:55:37:90:9b:2b:2a:02:64:
                    56:d0:a5:e0:a5:83:83:87:b3:39:96:9a:d1:2b:26:
                    6a:4e:ad:bb:b2:60:d5:14:8c:b6:cc:70:88:db:24:
                    ed:46:f7:04:b4:c3:7f:32:5e:ba:17:7b:e9:3a:0a:
                    63:cf:45:61:f8:b6:fa:75:52:15:6e:15:2f:8d:8b:
                    f6:5a:bc:98:7c:68:06:79:f3:44:75:35:7c:62:dd:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:48:6C:2F:F8:72:B2:5C:BE:81:60:1C:95:AF:85:94:9B:CD:BE
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:74:e3:6d:15:45:ba:ea:bd:d5:2f:d1:cf:72:5f:56:0e:d9:
         bf:94:44:13:1f:70:1d:8f:ee:e1:92:81:60:7b:6a:d9:4e:46:
         4d:51:88:db:72:83:39:95:d0:c4:41:46:c9:a5:7c:9d:2b:a0:
         19:dc:d1:db:94:99:d4:d6:3d:60:78:3b:47:83:e9:a1:d1:02:
         fd:42:c8:86:8a:9d:59:e9:8c:47:2f:ff:5e:8b:01:f4:d5:78:
         66:bd:e1:22:99:7d:5b:5d:cb:cf:ff:ba:7f:88:fb:64:50:a7:
         2d:29:b8:cd:e3:49:2b:fb:e1:52:1e:ac:fe:59:9b:19:06:86:
         7c:e3:e0:f3:90:9a:6b:6e:27:2c:cc:10:ba:49:57:87:ca:82:
         a9:67:77:09:05:bc:71:f4:1f:81:39:3a:cf:43:9b:70:61:92:
         3f:30:1c:cf:f2:46:49:65:08:10:29:d1:03:84:08:18:05:e7:
         8e:da:c0:b7:d0:3b:69:ca:3d:15:37:7c:40:55:a8:3d:c5:84:
         da:08:6e:ab:c6:5b:50:af:ee:36:80:33:63:82:a7:d0:cc:fa:
         7a:23:57:68:6f:8b:1f:ff:cf:6c:ef:c0:82:fb:05:26:21:c0:
         9b:84:a8:98:99:aa:2c:79:63:68:5d:cf:61:de:c0:b8:d1:37:
         9c:f2:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:22 2026 by rpki-client