Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File:                     zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier:          C8t7y83/nOsDXhcrd2hNx/xg0mtBhXkeBtsnJi1zg6k=
Subject key identifier:   0A:22:0B:A0:07:35:09:83:CB:D0:E9:7F:4F:53:86:BD:F1:7B:8B:7C
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer:       /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial:       019CAF1108B76C1A7F2972CED1F3C6F5DC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 15:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 15:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 15:00:55 +0000
Files and hashes:         1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
                          2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: eWbkqQ8szQ37DOceHrJ6ZdN5SzHf1NyLhfDkc9xKLjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:11:08:b7:6c:1a:7f:29:72:ce:d1:f3:c6:f5:dc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
        Validity
            Not Before: Mar  2 15:00:55 2026 GMT
            Not After : Mar  3 15:00:55 2026 GMT
        Subject: CN=0a220ba007350983cbd0e97f4f5386bdf17b8b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:08:00:05:63:a7:5d:9c:e1:ff:fa:c5:b0:
                    85:99:0c:9d:b0:31:b6:8d:07:2d:59:6f:07:10:d3:
                    b6:9f:6d:b7:81:1f:ec:75:09:39:1c:a8:2e:2a:84:
                    aa:9c:43:2d:84:f5:c8:44:fa:1f:3b:58:33:62:87:
                    51:d3:6e:9a:98:15:1c:0e:1e:be:cf:84:52:97:91:
                    91:5f:0c:99:c8:32:a2:8b:b2:35:6d:24:1e:17:03:
                    33:fd:e8:7a:9a:39:cc:f2:1c:a3:4e:3e:71:98:82:
                    fb:0f:4e:d0:12:af:8a:37:78:ec:7c:54:43:25:10:
                    d1:5d:14:39:22:d3:30:4e:d2:c7:7e:fb:80:34:35:
                    a8:ff:74:0a:0f:cd:2f:0b:7a:58:3a:0e:ff:86:54:
                    54:42:a3:be:71:94:5e:a6:71:44:85:be:17:f6:fe:
                    96:2e:fc:79:28:ad:81:39:46:0d:84:70:65:d8:ec:
                    ac:3f:f8:3d:fa:ec:34:91:a2:14:bc:35:28:fc:d6:
                    37:98:8d:e8:9a:49:87:40:66:c9:20:3d:4a:6b:9b:
                    cc:f8:e6:b5:42:4c:cb:8f:c0:40:26:86:2d:9e:c9:
                    4d:9f:58:a6:9c:45:7f:e7:af:41:5e:60:de:e8:0a:
                    18:f5:73:1d:fa:b2:ff:c0:d5:0c:ae:44:9a:a3:10:
                    db:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:22:0B:A0:07:35:09:83:CB:D0:E9:7F:4F:53:86:BD:F1:7B:8B:7C
            X509v3 Authority Key Identifier:
                keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:21:10:5a:7c:11:8a:75:17:18:35:2c:06:51:65:8b:fe:6f:
         f0:32:80:09:c8:3c:39:29:1f:f4:f3:f3:88:b1:77:83:cd:eb:
         dd:b5:a5:98:ec:d2:5e:83:37:1b:14:b4:9f:03:9a:7f:b1:66:
         59:0c:21:8d:25:84:2d:5f:cb:db:68:ad:cb:22:57:e4:cf:81:
         4e:d5:b1:e3:6a:73:5c:49:ef:61:f6:b3:31:22:98:32:c8:cf:
         37:b1:fb:c2:2a:9c:c9:f1:37:32:44:67:f6:65:51:8f:c6:9c:
         92:5a:71:49:6c:10:c1:4f:a4:2f:60:ac:b4:c3:c8:4e:5d:51:
         7e:2c:46:52:71:4f:21:5a:b9:70:af:bf:46:da:d9:5d:e2:e7:
         bb:e5:9f:60:ee:e8:5b:4c:67:6b:9e:c3:54:5d:fe:7b:b2:8b:
         eb:d9:c3:6c:fb:a5:f5:4c:32:70:6d:a9:ae:81:e0:2c:b9:8d:
         94:d5:b0:45:99:9a:43:86:de:7b:cd:fb:3d:a2:8f:17:5b:b4:
         d8:49:47:cd:d1:4b:d3:32:38:94:c5:3b:e0:7a:40:70:9c:6e:
         da:23:ce:6b:08:2b:09:25:d2:69:28:6f:bd:f9:48:5a:96:23:
         80:0b:c8:b7:c7:ba:50:a9:78:6f:a2:d1:d8:9f:bf:8b:d7:53:
         09:23:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:59 2026 by rpki-client