Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File:                     z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier:          qsMhYlogk5KFVC7KY7v4d88wtBQ90cPjv+8Y5rXoOtk=
Subject key identifier:   0B:1E:F4:90:C7:85:9E:DC:6D:83:62:27:30:4C:26:E4:3B:B0:FF:4C
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer:       /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial:       019CAEDA406E01A224785DDBDFCFA7E8E622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number:          184D
Signing time:             Mon 02 Mar 2026 14:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 14:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 14:01:04 +0000
Files and hashes:         1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
                          2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: r7QvcoG8mUQwsR1hzxSag80q/MAeiRX6pDI5dlb5qI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:40:6e:01:a2:24:78:5d:db:df:cf:a7:e8:e6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
        Validity
            Not Before: Mar  2 14:01:04 2026 GMT
            Not After : Mar  3 14:01:04 2026 GMT
        Subject: CN=0b1ef490c7859edc6d836227304c26e43bb0ff4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:17:27:d7:f5:de:cd:ac:2b:13:e2:30:22:
                    c3:90:ea:ba:f5:b0:4c:fd:99:1f:75:a1:f7:5d:f1:
                    77:5e:dd:f2:2e:1a:bb:bb:1e:11:47:5f:41:e6:c3:
                    95:31:1b:11:17:14:ef:b5:0b:f1:a1:6b:d3:48:5e:
                    5f:a2:ec:63:24:a9:c2:cb:cd:ac:78:6a:91:3c:87:
                    bb:1f:4d:f6:d0:62:a0:e6:d8:92:24:d9:e5:af:62:
                    5c:2c:8e:ab:e0:a9:0f:4d:7c:7a:92:f9:ec:b1:12:
                    00:45:7f:c0:58:55:30:5a:65:04:43:ce:b9:81:90:
                    c1:c6:63:b0:8e:0b:81:4e:c5:ff:0e:30:e0:df:bb:
                    ea:37:a2:35:ad:cf:5a:0c:6e:c2:4e:e8:08:d3:91:
                    8a:fd:3d:f7:de:29:ab:c2:69:43:2a:58:91:5a:a3:
                    dd:5b:ee:df:6a:89:4a:67:18:4e:be:a3:db:80:f6:
                    2f:71:a2:bd:c4:73:cf:f7:80:39:bb:80:6b:22:66:
                    7a:40:db:01:6b:00:ba:29:b7:5b:e5:70:cb:6d:c4:
                    bc:92:b0:d1:98:96:5e:4c:6b:c1:8b:10:75:fd:09:
                    31:94:a4:06:67:0e:a0:b2:f2:69:24:30:8f:c7:1b:
                    e2:ca:8b:fe:be:72:7c:fd:8f:d9:68:35:45:0b:4b:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1E:F4:90:C7:85:9E:DC:6D:83:62:27:30:4C:26:E4:3B:B0:FF:4C
            X509v3 Authority Key Identifier:
                keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7d:3f:1d:65:46:07:c5:8c:77:39:1d:dc:61:8f:6d:c8:43:
         3e:dc:e1:ec:60:95:6d:8d:f6:2b:1b:1d:ee:a9:a0:9d:73:3c:
         66:55:24:ae:34:c5:c7:d8:5f:5b:a9:fe:c2:6c:cf:6c:85:89:
         86:70:8d:12:cc:60:b9:19:c7:6a:28:a9:7c:0e:65:e6:41:58:
         4a:ff:16:62:e0:a2:b4:0a:e9:b3:f8:c9:f7:38:a8:f4:d3:26:
         d2:f6:bc:69:4f:1e:3b:b6:17:1a:ba:85:08:fc:9d:6e:92:90:
         7b:dd:59:50:45:08:5c:c3:24:3f:9d:0d:65:4f:6a:4c:ce:d7:
         64:fc:16:17:06:c6:e9:aa:59:e0:fc:0d:e2:08:a0:94:fe:4d:
         e4:69:1d:83:2b:e2:70:89:c5:fd:de:ce:f2:5e:46:c8:0d:00:
         00:4b:c6:83:19:8f:4a:b3:92:f3:65:9e:8a:50:48:ff:31:e6:
         3e:01:fd:ce:af:bc:1b:24:eb:92:8d:9c:70:ce:f8:b7:95:8a:
         c7:60:e5:a6:38:cb:94:41:ab:97:6a:fa:f7:45:a5:b4:58:a3:
         da:39:e0:43:35:f4:93:e4:88:f5:47:2c:cd:80:02:27:4f:1c:
         ba:1d:cd:58:27:32:9c:bc:35:5a:44:2e:14:84:0a:1e:28:04:
         06:29:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:31 2026 by rpki-client