Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File:                     ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier:          2oSjjNsAIP5sO7wAi+zPn9PFZY+6bHyrIVinrGo6rlE=
Subject key identifier:   89:E1:EA:42:AD:ED:2A:66:A5:D4:E6:D4:AB:3C:41:E3:B9:85:23:EF
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer:       /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial:       019CACEBB9467D13D3B1A864F8EF08A2B10C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number:          184D
Signing time:             Mon 02 Mar 2026 05:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:55 +0000
Files and hashes:         1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: 9EF5xwPwjFMLbI27Dxn24zg0eKOsGmOiMbG4GswFNZE=)
                          2: kcYFoWMu5QoSNf9ceG2n-kODfhI.roa (hash: gkTfw6NqMW7Am2gTmxLPtlhTW10NUd3lUtw+Ko4m44k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:b9:46:7d:13:d3:b1:a8:64:f8:ef:08:a2:b1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
        Validity
            Not Before: Mar  2 05:00:55 2026 GMT
            Not After : Mar  3 05:00:55 2026 GMT
        Subject: CN=89e1ea42aded2a66a5d4e6d4ab3c41e3b98523ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:10:8f:f6:f6:07:23:0e:76:61:9d:20:77:
                    81:02:27:33:12:d0:6b:31:f6:e4:3b:19:81:49:80:
                    71:29:fb:9d:1b:01:2f:ac:33:7f:5b:53:a9:07:5d:
                    ae:76:6e:15:6e:bd:0a:92:e3:ea:3c:46:89:a6:52:
                    71:f8:bd:7c:2f:b1:12:a6:0b:0b:3a:ea:8a:bf:ca:
                    dd:d0:87:d1:15:0c:19:5e:33:15:9d:49:d8:1c:ac:
                    22:35:0a:8a:11:62:76:01:bf:58:75:bb:dc:ed:27:
                    28:6d:56:64:82:69:b4:ca:ea:c2:d2:18:18:19:87:
                    c5:62:23:53:d9:36:f5:35:a4:66:8e:36:e5:3c:9b:
                    93:64:80:42:ab:d0:c5:5b:92:eb:d8:1c:fb:74:b6:
                    57:20:b7:fa:37:31:e5:fd:26:29:0c:3c:34:ed:51:
                    b3:ac:d2:d0:c6:99:a4:21:46:60:02:6b:7e:20:53:
                    65:29:5a:43:54:93:47:2c:15:9c:f9:21:62:ed:ed:
                    71:b2:3e:d3:5b:3e:a3:6c:bc:17:18:3a:cd:bf:15:
                    02:27:71:e7:2b:95:11:f3:5c:35:e8:66:37:7a:af:
                    df:10:24:ad:81:60:1d:61:93:e2:88:76:bf:e1:70:
                    f6:68:ed:1b:6a:6a:1f:47:e7:6e:b1:b2:e4:0e:d3:
                    8e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:EA:42:AD:ED:2A:66:A5:D4:E6:D4:AB:3C:41:E3:B9:85:23:EF
            X509v3 Authority Key Identifier:
                keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:c6:6c:c8:62:85:80:a4:56:68:5d:d2:f3:3c:bd:dd:3e:
         3b:16:2e:3f:60:34:7a:58:cc:07:68:39:71:cb:3e:24:f5:0b:
         a8:9c:51:99:c5:ae:d7:fa:2c:a3:02:08:96:25:52:fb:27:77:
         c7:b3:98:1b:b8:68:66:37:cc:1c:1d:72:19:60:cd:c7:2f:a7:
         08:27:bc:74:22:18:ba:14:20:30:e8:e4:6f:b5:8f:57:2c:59:
         86:ac:1b:9b:91:5a:83:42:f2:ee:6a:be:33:d8:56:d3:ca:cd:
         3d:2c:27:93:73:84:6d:e8:84:3c:38:37:e3:26:57:f7:e8:90:
         4f:e6:a7:8e:33:b5:71:f7:c1:03:ca:95:de:a7:5b:11:7b:90:
         ac:04:ee:2c:2b:0c:ad:1d:eb:a7:27:9f:53:eb:35:71:05:fd:
         24:9d:b5:08:0c:cd:1c:d0:ac:14:97:51:06:99:a5:65:99:95:
         27:e1:63:1e:2b:1c:63:5b:96:c6:9e:59:16:02:97:e1:85:6c:
         88:96:32:c4:bf:76:fa:22:3e:cb:ac:a8:2a:c2:56:38:73:45:
         69:29:2b:12:f9:23:a9:df:fb:8b:ef:ab:60:87:78:8b:44:a7:
         4b:dc:71:6f:b9:4e:9b:4c:e6:d0:a0:73:2e:39:d1:e7:6f:a4:
         8c:0e:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:29 2026 by rpki-client