Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File:                     1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier:          K/mJPOOCvLOEZCD5HRfzCU4qpHxbUn0ROXuZJVPkmKI=
Subject key identifier:   80:8B:1A:90:18:94:EA:B9:DF:3B:EB:1A:C6:B9:B6:6C:B4:99:7C:9E
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer:       /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial:       019CABD9061A89DE3E34BE45C660B6543A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number:          07B2
Signing time:             Mon 02 Mar 2026 00:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:52 +0000
Files and hashes:         1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: MlI3eSmAvz8aHSds6CBrExwhxdKHvWjC9nf/qTU9TQQ=)
                          2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:06:1a:89:de:3e:34:be:45:c6:60:b6:54:3a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
        Validity
            Not Before: Mar  2 00:00:52 2026 GMT
            Not After : Mar  3 00:00:52 2026 GMT
        Subject: CN=808b1a901894eab9df3beb1ac6b9b66cb4997c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:93:30:d8:7c:b4:64:8a:12:7d:a4:a6:ce:
                    85:75:ba:7d:6e:7a:d2:da:ea:ab:5d:9b:f0:0f:22:
                    81:0b:49:81:d4:d4:07:3c:4c:07:08:36:6f:a6:77:
                    74:fa:d9:24:28:10:77:87:b0:9c:2c:9a:a5:19:49:
                    aa:c0:3a:5e:a9:6c:05:ab:8b:c6:a3:d4:51:19:43:
                    f5:c1:f9:f5:2b:89:d2:df:6f:a2:08:54:04:ff:cb:
                    d5:5e:46:bb:7e:ea:17:cf:61:99:cb:12:23:ee:85:
                    85:c5:1f:0b:56:60:d5:10:08:0b:75:1c:01:95:f6:
                    be:18:de:bb:82:55:57:61:e1:ba:cf:b1:8f:18:71:
                    93:e0:d7:70:8a:70:06:27:f6:10:3e:e3:93:82:09:
                    66:f3:22:6f:59:72:65:c8:bb:d6:29:9c:a0:a8:6d:
                    a7:df:54:26:6a:4a:ec:0e:53:f0:94:a5:ed:d7:62:
                    66:f8:da:68:31:3d:ac:16:6f:20:a3:e0:c9:2e:68:
                    78:1c:e6:5b:12:8b:ed:07:44:8d:95:d1:4d:8d:a1:
                    04:42:aa:67:75:5f:d3:40:fb:f7:a3:a3:3f:62:e7:
                    9d:99:f9:8c:69:83:40:13:81:bf:67:ae:5f:d1:08:
                    f0:94:85:03:76:53:7d:98:f4:16:0e:ad:e2:25:b9:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:1A:90:18:94:EA:B9:DF:3B:EB:1A:C6:B9:B6:6C:B4:99:7C:9E
            X509v3 Authority Key Identifier:
                keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:62:8a:60:9b:1d:57:c1:90:9c:36:4a:5a:d0:5b:b8:6d:e9:
         f4:cb:ee:b8:d8:d1:5c:e1:08:53:f7:ed:17:85:46:35:d1:9a:
         d6:03:0b:01:61:9a:da:94:79:6c:ba:c2:b6:90:6d:3d:2e:52:
         93:15:cb:5f:c0:4e:87:1f:4b:06:6d:70:c6:c9:f6:fd:19:60:
         6b:13:ab:05:6e:84:45:30:27:c5:dc:7c:df:ea:3f:f3:29:72:
         57:e4:14:92:12:2d:a7:fc:cf:00:ed:88:e6:8d:13:2e:28:11:
         64:ee:56:dd:12:eb:0a:4e:79:c5:19:50:4f:17:6c:a6:84:fc:
         aa:46:03:fe:b1:01:37:14:15:25:9c:12:82:07:fa:32:0c:2f:
         96:16:94:17:c1:10:5d:0b:96:e9:b9:05:4b:71:1d:5c:4a:16:
         92:46:fb:78:13:17:31:b0:6e:b0:a4:67:30:2e:62:50:ed:d1:
         c2:91:20:e0:52:8b:4c:3f:66:fa:35:6a:c9:39:05:c6:1d:2a:
         7f:e7:e1:73:8c:5a:1a:88:05:03:ed:ef:f1:3b:9b:8a:c5:5c:
         98:24:0d:5e:18:b9:f2:d9:3d:47:3e:1b:a2:62:26:ff:5c:f4:
         2b:ac:8c:47:52:12:44:08:d0:1b:ba:26:d9:8e:aa:0b:06:14:
         17:6d:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:01 2026 by rpki-client