Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          3kqlQBC5C7WAOQW0puFDEM2MrRKzGhNi/CwGxYoNr/g=
Subject key identifier:   32:D1:02:75:9D:78:86:4F:D1:6A:1E:2F:DF:C6:5B:40:CA:41:ED:AB
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       019CABA211F7D86DFCC94F0CFEA508756D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          1871
Signing time:             Sun 01 Mar 2026 23:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:51 +0000
Files and hashes:         1: AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa (hash: 0umZskah+CEr8ip186+RE27wIFvtLRl5c7E3qXa1bJA=)
                          2: C2VLEg7n0tawM_YjuKM0EwCOIdU.roa (hash: YkJt5/I0ermqnHQNrdy2/02bafN5wEDvzpqYuCqnw2s=)
                          3: ED4SThrzQXYcrC-AEArSen9tJXk.roa (hash: 7Cm2n+7edQ/TSDNLB06WjyawgEuLOZa4VST/mcq8bUM=)
                          4: c39N67bVxmJiemTHJXkT_8LO_Jc.roa (hash: aB4P6VURUO7PJEhrDe97gwqnhvifkhr4AJMJpATFX6E=)
                          5: xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa (hash: Pww3BJWwUmNPj1/iW/aWXYB7NNqY6jVB3VyHrlLqwhA=)
                          6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: LJMjRpF4vTbX/80xzK+ggg5JGNu0f13cWSTdlRlBllA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:11:f7:d8:6d:fc:c9:4f:0c:fe:a5:08:75:6d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Mar  1 23:00:51 2026 GMT
            Not After : Mar  2 23:00:51 2026 GMT
        Subject: CN=32d102759d78864fd16a1e2fdfc65b40ca41edab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:d4:7d:2c:73:42:64:c7:44:0c:e0:46:7d:
                    ba:7e:10:27:8b:06:0c:ff:f5:85:fb:30:8f:6e:31:
                    94:df:37:55:5e:71:82:ac:6b:71:05:70:a0:74:7f:
                    05:14:44:2c:2b:56:7c:c1:ea:c7:59:d7:2a:16:c4:
                    a9:36:33:d9:df:2f:62:34:21:0b:a9:f9:d0:9c:af:
                    1d:94:74:17:8f:20:d1:83:0d:3e:6b:1c:76:ec:bd:
                    54:5b:98:0e:75:6c:ad:0f:56:b3:76:38:e2:38:92:
                    fc:83:d6:e8:71:82:db:2b:25:f5:70:9a:28:47:cf:
                    6f:08:2f:b3:2e:e2:db:fe:60:68:cb:52:e7:e2:c6:
                    7b:dc:13:f9:83:d2:b1:63:21:7e:90:31:7c:54:ee:
                    5d:a2:42:16:cd:97:32:51:78:43:a8:02:af:8b:15:
                    c0:de:53:5e:a5:d8:74:a8:c2:d6:98:dc:36:c9:c7:
                    36:af:8c:dc:f3:ce:8c:2d:25:0f:80:f9:04:cc:ae:
                    ff:a7:74:04:41:7e:bc:90:1d:c8:ac:37:9c:ae:80:
                    d7:91:63:51:29:32:3e:6f:5e:70:0a:64:30:85:72:
                    47:c7:99:d6:cb:30:9a:7e:4e:a7:60:d7:b0:cc:3c:
                    36:e6:64:59:ad:30:5e:87:91:ae:d4:f6:2c:c3:42:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D1:02:75:9D:78:86:4F:D1:6A:1E:2F:DF:C6:5B:40:CA:41:ED:AB
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:de:ea:33:5e:b9:b7:c9:66:6d:ce:58:c5:c4:e1:4f:91:b7:
         8a:67:a3:53:0b:56:1c:30:49:2d:8d:5f:02:9f:85:56:b2:df:
         04:7d:6b:03:a1:f9:76:84:0e:8c:ce:06:43:de:7c:4f:29:35:
         d2:40:f2:fc:96:c4:32:a1:69:fa:0f:8a:f3:45:04:09:6b:a4:
         31:68:bf:85:b7:a7:dd:c3:67:60:a3:b4:f8:82:e7:69:41:16:
         ff:b2:ec:a1:fd:86:eb:22:90:bc:f2:ce:de:5d:30:77:9a:7f:
         6a:19:e8:87:69:47:aa:b2:46:75:fa:75:3b:59:41:8c:5b:2c:
         a8:e4:79:15:f2:eb:e0:81:8b:41:d6:b8:f8:49:30:b7:0e:7f:
         06:4b:ed:26:f3:9a:a1:ac:fb:fd:fd:0d:28:d9:4e:2a:ee:ff:
         ee:eb:6e:6e:a3:36:ab:12:a9:52:ed:dc:e3:39:98:51:d6:19:
         44:50:c2:ed:94:0e:31:3f:80:55:72:cd:be:a7:f0:9a:75:d0:
         2b:4e:1a:36:41:5c:48:fc:da:17:c0:bc:9f:b8:9a:01:39:2a:
         46:49:c7:34:06:e0:55:92:2f:ac:24:91:c5:91:d1:50:69:b0:
         12:b4:a1:55:ee:d5:04:88:58:2f:70:b0:d9:fb:ba:7b:e4:4b:
         49:ca:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:12 2026 by rpki-client