Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          PBDgc6q0KXueLvnPHUR1OS/IhSNTmpvXWcIS8nYFoSk=
Subject key identifier:   5E:3C:24:4C:D4:54:D1:48:51:02:C6:55:C9:D0:2B:84:EA:2F:7A:10
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       019CAA8FE45C3905D65F00FF5D6E43FA2BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          1478
Signing time:             Sun 01 Mar 2026 18:01:22 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:22 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:22 +0000
Files and hashes:         1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: atlSVC387cUn3R4ZKeXF84K54QMYzipMUzFWU3c8txE=)
                          2: kkg4t3nZeUP55IPH0ja56ajh2uc.roa (hash: wQ4+D4YX0IA9lRd0FG5GHGoJjFI5hoVgBy4LMPM1TUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:e4:5c:39:05:d6:5f:00:ff:5d:6e:43:fa:2b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: Mar  1 18:01:22 2026 GMT
            Not After : Mar  2 18:01:22 2026 GMT
        Subject: CN=5e3c244cd454d1485102c655c9d02b84ea2f7a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:97:88:4b:d8:ae:1b:fd:94:70:96:82:d0:
                    be:eb:4d:4f:89:4e:d1:2b:1d:07:87:f2:57:7f:48:
                    70:d7:be:e1:bd:f0:6f:59:2b:ff:d7:a2:ec:1c:a3:
                    cb:17:09:9c:37:7b:1e:69:bd:d7:94:10:bd:62:1e:
                    15:e5:de:c6:b3:60:69:3c:39:0f:fd:bc:6c:76:05:
                    c2:b1:b9:b6:e3:0f:9a:b3:d1:bb:7d:8d:b6:62:1b:
                    4a:36:f1:14:30:d4:8d:c9:75:9f:97:81:c6:e4:1d:
                    24:8b:00:13:ae:8e:92:4a:82:ca:11:19:d9:d9:a6:
                    2e:c2:fc:4c:1c:56:c7:9e:8f:83:98:89:5e:c5:50:
                    e2:51:b3:41:ba:42:4c:03:6a:ae:30:10:00:cc:58:
                    f8:14:27:ef:51:46:9d:cd:13:75:ff:ef:f0:ff:93:
                    20:38:17:b2:04:91:8c:d9:53:f7:0e:85:fe:a7:83:
                    07:f1:77:b6:80:74:ff:db:b3:ea:66:f8:d7:b1:54:
                    b1:9e:2f:8c:68:a4:fe:a3:6a:d7:36:7d:5a:02:da:
                    3f:c1:de:91:b7:eb:fd:b9:ae:7c:94:f8:ea:34:09:
                    9c:c5:81:b1:9c:bf:b9:40:f6:8a:7f:78:10:28:4f:
                    ae:d2:f0:de:db:50:79:8f:10:dc:ab:f3:f0:e1:cf:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3C:24:4C:D4:54:D1:48:51:02:C6:55:C9:D0:2B:84:EA:2F:7A:10
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:68:d0:1d:bc:64:c5:bc:5f:50:4d:7f:0d:2a:f7:96:6f:7b:
         4d:51:61:f4:54:03:85:7c:fb:93:95:af:20:44:d9:42:0f:c4:
         6b:3f:07:5d:ca:1a:9a:4e:07:ee:a3:9e:03:fe:7f:1f:c1:75:
         c9:01:bb:54:b1:27:69:ab:5b:88:05:58:1a:59:d2:4a:21:e9:
         1d:4e:b4:e6:df:34:c7:63:70:74:04:b2:6b:01:2a:3a:12:77:
         19:49:6f:8b:3d:a8:13:31:24:85:cd:9e:69:8c:1a:86:b1:c5:
         49:0b:76:8b:65:98:11:8f:fc:7b:32:45:37:27:f2:24:08:79:
         a9:fe:c0:28:63:83:d6:ed:13:79:b8:bb:0c:dd:15:77:82:6c:
         e8:a2:94:43:99:d0:e4:2b:ac:53:b3:64:53:40:61:f5:b1:9a:
         49:d6:86:9c:00:b4:75:76:42:f5:63:b2:b3:5b:0e:d6:fa:c9:
         3f:d6:e4:0f:b1:39:41:18:70:c9:d3:1a:93:13:83:3e:db:7f:
         73:ca:e5:1e:fb:00:2e:71:f4:b6:72:b9:66:23:1b:d2:1d:b8:
         9f:6e:ec:80:6a:f3:8e:65:ac:71:c2:30:b1:55:c0:24:d7:20:
         86:85:08:b4:83:89:c7:d6:b5:f0:bf:0a:b7:02:8e:29:f7:f8:
         64:89:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:16 2026 by rpki-client