Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File:                     ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier:          aeC03pVFYWGGiEhUmrZrbDp7tuSgvuNCOg2fB6gqRTA=
Subject key identifier:   CC:23:02:1C:C4:C2:6E:2F:1D:E7:EA:6A:39:4B:B8:D6:99:89:F0:DE
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer:       /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial:       019CACB4932F76F6ED5B8327E68C3738A07A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 04:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:41 +0000
Files and hashes:         1: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: KXxp6KF7uRY34sp+YGgRRKSfHU4plzHDxKMmUmAVGgY=)
                          2: ruf5ygSKBpBoMppN0_Ydb0zlKDA.roa (hash: AYXx9sIQleSTgwqrdqLha3RogyCLh5BNOu7WolJzJ7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:93:2f:76:f6:ed:5b:83:27:e6:8c:37:38:a0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
        Validity
            Not Before: Mar  2 04:00:41 2026 GMT
            Not After : Mar  3 04:00:41 2026 GMT
        Subject: CN=cc23021cc4c26e2f1de7ea6a394bb8d69989f0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:1b:a5:cc:63:fc:fd:35:9c:6f:64:22:e9:
                    c8:a8:fe:17:d0:74:0e:95:53:e9:12:e7:80:90:c2:
                    55:ad:31:b0:11:e6:c0:bb:e5:38:73:10:1e:45:00:
                    d5:57:b0:ca:96:2f:c6:93:55:22:9c:40:bd:93:fb:
                    9a:d2:c0:5f:9d:9f:27:f4:06:81:7e:69:19:4a:f5:
                    8b:1e:3d:a8:4c:84:ec:f1:62:33:d3:7c:cc:de:70:
                    61:3b:e3:6d:68:7a:97:35:90:99:ea:dc:2d:9a:68:
                    e0:22:b3:eb:6c:8a:ee:46:fe:00:54:94:90:48:92:
                    7f:5f:ec:74:06:63:dc:b5:5d:13:05:9f:ab:b4:48:
                    ad:75:79:b7:94:03:ea:c8:6c:e3:a1:58:dd:bb:90:
                    d4:63:f1:0f:0e:7e:b2:11:ce:54:36:f5:dd:9b:96:
                    d4:cd:08:2f:cf:a4:9a:6a:14:a6:85:ab:e0:49:75:
                    49:4c:12:f0:2d:75:e9:dc:e7:b8:fc:98:e4:7b:90:
                    96:e2:60:cb:30:bc:d5:80:8b:d5:02:bb:0c:bd:ca:
                    bd:52:21:d2:6e:0c:db:ae:48:6c:d9:8e:ab:a6:27:
                    1e:bd:1c:e4:a0:8c:97:ea:70:d3:cd:1a:b2:80:c8:
                    86:b0:cb:83:01:3e:03:37:c6:f8:d9:b9:72:7f:29:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:23:02:1C:C4:C2:6E:2F:1D:E7:EA:6A:39:4B:B8:D6:99:89:F0:DE
            X509v3 Authority Key Identifier:
                keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:38:3b:c8:84:78:2a:01:64:b5:49:0c:38:39:be:14:ed:
         3e:ae:9e:16:9a:43:08:ef:e3:9e:9b:32:a4:26:f0:09:35:df:
         c4:da:f3:c4:53:b6:f9:6f:e7:94:a4:ea:7e:88:23:ca:e4:e3:
         99:59:c6:df:e9:39:5d:00:47:b4:fa:7e:98:0f:bf:31:9f:8c:
         27:5c:de:59:1f:78:9f:9c:94:4e:ae:e7:18:c3:a1:7b:55:0e:
         e2:dc:37:d3:82:0f:61:9f:91:78:99:50:00:14:2f:8e:62:1e:
         33:1b:cf:17:30:5b:0c:88:61:dd:7c:9c:45:5c:b5:1a:6b:15:
         9e:12:98:57:f1:1b:9b:4d:da:f7:5f:0e:30:90:cd:7d:c4:ca:
         73:09:66:80:66:5f:d2:81:e2:3a:8a:85:02:58:08:e9:f7:1f:
         20:4a:ca:0b:8f:dc:7b:38:e2:bc:a3:c6:d5:6a:c2:8c:7b:e0:
         65:b9:58:17:c8:ff:48:a1:06:59:98:1c:fb:0a:41:3a:63:ed:
         41:0c:0d:6a:dc:bb:b8:a2:c5:c8:58:fc:60:f0:41:cc:e1:a2:
         b3:cb:ab:ba:5c:96:9a:0a:ab:7b:9c:23:b9:c4:53:f2:a2:bc:
         86:67:5a:3f:23:56:99:a0:f1:48:ca:76:fc:4a:f5:5a:e4:6b:
         91:64:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:42 2026 by rpki-client