Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          JraizO38Pb3/7kgCfupjEC2kqRNjGQEwIJFUueuvAN0=
Subject key identifier:   B2:7E:5A:79:41:8F:D6:FF:0D:7A:31:DE:54:DC:1D:D2:DE:58:50:F6
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       019CABD9BE62D5162189ADF592A9F8C9AAC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          105F
Signing time:             Mon 02 Mar 2026 00:01:39 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:39 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:39 +0000
Files and hashes:         1: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (hash: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: f1t6rk2wr50MiM68JBcVH0hRfSLD8EnGOonvVrE5TfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:be:62:d5:16:21:89:ad:f5:92:a9:f8:c9:aa:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Mar  2 00:01:39 2026 GMT
            Not After : Mar  3 00:01:39 2026 GMT
        Subject: CN=b27e5a79418fd6ff0d7a31de54dc1dd2de5850f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:bd:47:32:7d:31:89:08:b9:1d:69:e6:f9:
                    c7:fc:33:29:3b:95:1e:da:77:c9:44:90:41:87:01:
                    0a:8a:15:48:ba:54:02:7d:00:90:d7:02:85:6d:1b:
                    39:a8:43:ad:fe:fe:f6:44:52:b8:4d:28:75:2b:34:
                    5f:6e:4a:58:68:ce:6c:86:29:a4:cc:80:73:39:60:
                    97:ac:ff:31:15:7d:7e:e4:80:86:91:d1:9c:be:19:
                    4a:35:f2:5d:8f:55:ab:29:ad:12:d5:e6:3b:0a:0b:
                    f7:7a:a5:54:cc:84:ce:43:5d:0b:3a:0b:dd:ac:b7:
                    2c:cb:09:7c:12:44:cf:9e:b4:7c:1c:70:2d:98:47:
                    51:bb:0e:af:e0:da:e9:d5:e2:9d:b3:e1:53:9e:5c:
                    88:0f:e2:45:0f:62:c3:08:16:a1:d6:e7:2f:2c:e7:
                    d5:42:46:6e:73:cb:e0:2b:b7:17:b0:99:ba:d4:8c:
                    99:0a:1c:20:b2:f2:81:98:fa:e4:8f:b2:5a:9a:41:
                    4e:a3:8b:d6:85:6a:e6:23:71:bb:20:51:b2:6f:e0:
                    62:6f:ad:bb:33:04:ea:00:bf:db:09:04:dd:ea:8c:
                    7b:49:db:90:d0:86:5a:a0:b5:ea:f9:8c:06:57:ad:
                    12:32:c1:c2:86:2c:90:0c:49:2c:4b:3b:fe:98:61:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7E:5A:79:41:8F:D6:FF:0D:7A:31:DE:54:DC:1D:D2:DE:58:50:F6
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:be:a6:45:0d:08:b2:33:7f:45:23:85:b6:fb:61:5d:7c:
         68:2b:b0:cc:fa:32:ea:52:e8:8b:43:64:45:ca:17:40:6b:80:
         9b:0a:09:5c:5d:18:1f:ac:05:36:0b:53:a2:63:e8:24:4d:f4:
         52:1a:fb:be:43:4c:c8:5c:7e:13:ef:1c:5a:9a:a5:6f:87:80:
         08:61:93:65:46:78:28:f7:0c:0f:5e:d1:79:2d:46:83:7d:f9:
         c6:cd:f1:27:c4:2b:bd:9e:d0:3a:6d:30:87:b4:12:91:af:98:
         8c:57:a4:43:99:1a:88:fd:bf:2c:35:53:5f:3f:1a:d1:19:e9:
         7e:5a:c2:ef:8a:32:7b:09:54:00:77:93:0b:3f:1a:f6:a9:ff:
         da:da:13:9c:b9:3e:5a:88:99:a3:9a:e1:34:e7:86:f8:1c:f4:
         81:a4:38:12:e7:e5:f4:63:5b:90:68:f2:9c:4b:01:25:a4:c2:
         f4:f3:83:c2:b9:eb:27:79:b2:cb:9c:66:14:1e:89:8d:02:57:
         4e:84:5b:dd:61:79:ec:d7:2f:ee:f2:df:e9:93:dd:99:b4:37:
         79:fb:e9:ea:8f:c5:6a:e4:c9:5d:7f:af:6d:ac:2b:fe:fd:2b:
         87:e2:09:1d:c8:af:59:52:87:6e:9d:0a:cd:e2:bc:f4:97:de:
         7e:e0:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:10 2026 by rpki-client