Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File:                     NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier:          K9tq4bg6Bd5dFFW8H14RMYYZ7PpDfT6QZpCyYk2YF7g=
Subject key identifier:   00:DD:D6:28:CA:99:52:3F:AE:75:B0:70:16:65:2F:E3:74:25:45:65
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer:       /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial:       019CABA1CD62833AFB992CC3712493568C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 23:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:33 +0000
Files and hashes:         1: MRi2QUKiUYiuqZDbNN8AWi7khO4.roa (hash: NMGJJ7+SOJryUXuDS+WQnGKqDDO2i9Z6K8gWplB05UE=)
                          2: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: Wro81y9D9RW5eei4sNxfEJXNfJ87OeR4uvnbCfwFmyE=)
                          3: zDNouUxa3WBuZGVPOGveYWb3T6I.roa (hash: dlBZu5xfm6bRA2HTdrEgFNefU2JSuyk/ZA0x+VgcU8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:cd:62:83:3a:fb:99:2c:c3:71:24:93:56:8c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
        Validity
            Not Before: Mar  1 23:00:33 2026 GMT
            Not After : Mar  2 23:00:33 2026 GMT
        Subject: CN=00ddd628ca99523fae75b07016652fe374254565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:e0:ed:32:9a:ee:c9:a2:25:5d:13:bb:7c:d3:
                    2a:cc:a8:6f:af:a7:23:32:6a:b5:d7:3a:8f:d3:f5:
                    86:3b:26:11:fc:31:a1:0f:be:3a:12:e5:4a:f8:f5:
                    4e:33:16:06:f2:f4:42:71:24:5f:55:f1:ef:cc:11:
                    06:ef:d6:8a:4c:22:23:d8:bd:fe:d4:33:b5:76:b5:
                    fa:57:2f:ec:69:26:83:3d:e3:53:18:95:8f:66:ed:
                    3f:9b:9e:d7:fb:2e:43:44:62:1c:09:b7:37:64:0a:
                    77:8e:fa:b8:18:a8:f7:80:ff:3f:8f:6f:38:cf:36:
                    80:fc:6d:a9:48:83:6d:d2:fa:18:e3:39:f1:f6:1d:
                    33:bc:a3:f5:67:e1:c8:c9:95:5e:3c:41:76:1b:68:
                    ea:06:4a:91:36:f6:9a:dc:a1:f5:76:98:8a:3e:04:
                    29:2f:23:c1:51:54:89:f6:ed:69:61:44:03:a8:1b:
                    15:b8:18:ac:a7:9e:82:6c:b4:00:ff:27:8d:d0:ec:
                    5e:5a:f7:98:16:29:ce:73:33:df:3c:57:ae:da:dc:
                    cc:3c:59:1f:c9:58:14:78:be:ff:d1:78:e2:8b:9b:
                    a9:d7:3c:8c:0b:07:22:3f:84:2b:fc:69:67:4d:3a:
                    91:a4:ee:0c:79:70:c3:f5:2c:ee:37:ae:11:ce:6b:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DD:D6:28:CA:99:52:3F:AE:75:B0:70:16:65:2F:E3:74:25:45:65
            X509v3 Authority Key Identifier:
                keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:48:19:79:8e:42:af:35:86:a4:af:1d:11:f8:60:1a:0a:
         e4:07:d1:35:ea:8c:49:c6:ce:a8:2c:1b:2e:5c:9e:7c:91:94:
         3e:2e:11:47:24:3a:7b:01:8d:75:65:1f:5e:a2:0b:6a:40:a6:
         81:5c:8f:9e:58:ed:8f:74:23:e2:53:9b:0e:ce:73:33:7c:27:
         78:12:ca:4e:8a:0e:6e:14:50:bd:c7:4e:4f:1e:f2:d1:38:71:
         c4:c6:b6:4f:ac:07:3f:85:f7:ec:c2:e7:2e:c4:a5:8a:85:9e:
         42:dc:51:99:89:0f:e6:6a:a9:a4:b8:a8:02:49:15:a8:bc:8e:
         14:63:b4:a2:e9:92:da:df:79:79:89:65:eb:86:56:e7:fa:b4:
         80:55:3c:60:f9:62:fc:8e:66:2e:cb:3a:a7:a9:ad:e5:d4:f3:
         d3:27:56:5d:fd:1c:26:36:fa:d4:b5:70:a5:35:b7:b0:51:48:
         bf:f1:04:35:6b:48:a7:9c:a1:32:1a:34:4d:71:dc:90:3b:44:
         0f:9f:fe:9c:f8:ae:93:79:63:cd:3c:14:b5:bd:33:65:11:dd:
         34:78:ca:f3:07:ee:d1:69:ed:3e:60:72:31:17:87:35:8a:aa:
         c3:51:f6:9c:7e:55:64:7e:49:3e:50:e2:03:98:89:e5:45:b6:
         9e:40:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:42 2026 by rpki-client