Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File:                     z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier:          7QrLuG0kmsUdadHcUFdXYis5Du3EWEAQ49AOPUekl6Q=
Subject key identifier:   CF:F8:0B:A8:A2:7C:75:B5:0B:57:53:A9:A9:E9:02:73:28:38:EE:2A
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer:       /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial:       019CAE35788BF84A47EBDD712AA75DE1DC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number:          185A
Signing time:             Mon 02 Mar 2026 11:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:05 +0000
Files and hashes:         1: 1-A-7q5MSfEASgOSJsLHqRfzUioE.roa (hash: Za0B6sbWjI78oQmGRktphtY5YZXqOifBcaQfnD50Rt0=)
                          2: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=)
                          3: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=)
                          4: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=)
                          5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=)
                          6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=)
                          7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=)
                          8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=)
                          9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=)
                          10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=)
                          11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=)
                          12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: RLs5pABbTg2XJ4ly61qJ+662R/mEL42mu7SmGjadMoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:78:8b:f8:4a:47:eb:dd:71:2a:a7:5d:e1:dc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
        Validity
            Not Before: Mar  2 11:01:05 2026 GMT
            Not After : Mar  3 11:01:05 2026 GMT
        Subject: CN=cff80ba8a27c75b50b5753a9a9e902732838ee2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:5e:f4:cd:fc:74:6a:a8:80:17:f7:ef:34:
                    48:81:d7:d3:76:42:a8:9c:4d:ff:f8:9b:da:32:af:
                    9b:17:23:cf:3a:69:0b:64:6d:0d:45:89:90:ac:88:
                    6c:5c:e9:ef:d5:85:77:3f:15:27:7e:b9:ed:09:74:
                    8d:44:77:24:23:67:92:7e:71:76:55:5d:9f:55:ee:
                    03:78:78:5e:9d:51:c5:76:62:80:1f:c4:fc:94:06:
                    b6:f2:e6:0a:68:dd:4a:20:6d:5a:83:36:eb:51:73:
                    db:85:b8:87:0b:74:b6:dd:1f:b4:01:b9:87:71:64:
                    0c:2c:69:f3:48:b4:84:52:90:82:12:33:b1:e9:75:
                    9f:80:e8:a6:33:f4:99:47:b1:45:62:df:83:e6:01:
                    14:6e:e9:20:94:b3:04:46:e6:45:ce:a7:ef:b6:ab:
                    bd:18:61:b4:8b:c7:f4:7f:0f:dc:55:e6:74:bf:21:
                    36:da:97:29:1b:73:ac:2c:b0:ad:98:98:db:d2:f2:
                    a6:11:9e:0c:a8:9f:07:71:ef:82:fa:83:de:af:58:
                    e3:be:fe:3b:7d:d2:1a:3a:75:53:49:fd:d5:ab:ad:
                    14:52:ce:01:50:4f:de:fd:4f:ac:30:e9:f2:3b:97:
                    01:16:51:d6:f6:d5:21:32:60:ab:a9:c9:02:b7:2c:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F8:0B:A8:A2:7C:75:B5:0B:57:53:A9:A9:E9:02:73:28:38:EE:2A
            X509v3 Authority Key Identifier:
                keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:47:d4:13:54:10:f1:1a:51:8f:8e:8b:19:18:20:e6:63:
         d1:98:6b:d2:b3:c5:20:5f:37:8a:2f:87:21:b2:e6:ad:5d:16:
         36:95:1b:3d:c6:34:bf:20:7d:eb:72:fd:7f:c6:90:a6:3e:8b:
         4d:b1:d8:ac:5a:32:4a:17:6f:92:d1:bc:bf:d4:36:b8:98:37:
         05:19:bf:56:db:d9:84:bd:3f:79:b1:b7:b1:20:a5:14:90:9d:
         2e:be:8c:1c:42:a0:d5:e1:3d:d5:32:c5:f0:c2:71:8c:0c:52:
         c3:11:d3:a3:b9:d4:e6:3b:3d:c3:d2:98:2a:04:4c:26:df:53:
         ef:12:f4:32:75:d2:f0:11:64:6b:de:5d:ba:99:d6:32:e7:27:
         56:6f:86:e2:e0:bd:32:a8:cf:6c:da:8f:9e:f3:40:ae:9c:af:
         87:06:8f:cf:dc:2e:d4:7c:f0:1b:dd:00:d6:df:0b:45:48:fe:
         b6:13:5d:0a:75:95:17:fe:21:b6:70:62:d7:bf:f3:ea:44:94:
         df:75:82:c6:01:c7:83:a5:a2:2d:fd:2b:e8:e7:31:53:7b:74:
         9e:09:75:96:c7:c4:dd:23:70:db:fb:95:de:54:90:31:6a:f5:
         8c:0c:29:68:30:9d:94:e9:0a:98:cb:5d:46:f8:7f:7e:03:ca:
         e5:55:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:31 2026 by rpki-client