Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
File:                     zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json)
Hash identifier:          uTSr3yMsXf1KtwXADBlecV9ywMRLCpHLzLlU57ZHEBQ=
Subject key identifier:   91:18:07:57:E8:52:D2:41:23:5F:91:9C:C8:1F:F0:09:95:3F:D5:82
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Certificate issuer:       /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial:       019CAAC6348EB4D2B83343EE576E2BF7FB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
Manifest number:          1855
Signing time:             Sun 01 Mar 2026 19:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:42 +0000
Files and hashes:         1: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=)
                          2: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=)
                          3: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=)
                          4: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=)
                          5: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=)
                          6: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=)
                          7: Lq44h0G4q1e-UoLFf16nF4HM2xg.roa (hash: 8njI491vVK+Ep2tlJdykehE2iLFit02Dsa4DLuRuC40=)
                          8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=)
                          9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=)
                          10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=)
                          11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=)
                          12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=)
                          13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=)
                          14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=)
                          15: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=)
                          16: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=)
                          17: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=)
                          18: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=)
                          19: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=)
                          20: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=)
                          21: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=)
                          22: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=)
                          23: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=)
                          24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: 0aRhqJyOW43BL2aMOt2xfj64+nWce8+FwezmYCwoBvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:34:8e:b4:d2:b8:33:43:ee:57:6e:2b:f7:fb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
        Validity
            Not Before: Mar  1 19:00:42 2026 GMT
            Not After : Mar  2 19:00:42 2026 GMT
        Subject: CN=91180757e852d241235f919cc81ff009953fd582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:1a:e1:e5:c2:a9:91:a4:3d:52:fa:ec:a3:
                    cc:e0:e0:36:26:22:91:05:61:35:3f:2a:ec:77:7d:
                    6e:a0:4a:28:02:4a:31:0b:09:64:c9:65:b0:98:f4:
                    34:46:26:02:6b:a1:39:04:9f:38:23:89:2f:7d:0c:
                    1c:e7:46:88:9a:09:64:9d:66:96:b4:bf:fb:f5:de:
                    c4:5a:99:c5:26:ed:2f:bb:13:19:15:43:06:7d:1b:
                    21:08:01:79:e1:18:5a:a7:02:b6:ec:85:9b:75:28:
                    bd:a2:52:b8:59:a8:21:70:0a:18:ad:e1:20:fa:48:
                    46:08:14:8b:36:59:bc:57:f7:46:81:a1:00:3a:40:
                    a6:78:7e:cc:35:24:b6:78:f6:af:4b:6e:7c:10:80:
                    f7:08:56:36:56:4a:68:2f:02:a7:1b:65:08:ba:56:
                    97:b6:af:4c:47:d5:0a:55:e6:49:cc:9f:75:f1:2f:
                    23:e7:85:a2:8c:43:b5:0f:a8:aa:3b:33:45:1b:93:
                    0f:f7:2f:c7:d9:2a:52:58:75:fa:11:fc:0e:0d:cc:
                    f6:34:8c:76:2b:7f:f2:c0:21:60:be:e5:b1:9d:16:
                    4e:81:bf:e5:8b:ff:02:08:f7:df:6c:60:0e:19:30:
                    b9:f9:12:8c:52:dd:1e:c6:5d:82:77:a1:8d:05:05:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:07:57:E8:52:D2:41:23:5F:91:9C:C8:1F:F0:09:95:3F:D5:82
            X509v3 Authority Key Identifier:
                keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:10:9c:7e:f0:14:42:be:f8:62:9b:1f:8b:4d:ad:d9:a4:
         12:0b:ba:53:7f:c2:1a:8f:81:56:69:12:bf:1b:67:20:7f:57:
         db:2c:79:b8:af:0d:8b:ae:63:cf:aa:00:30:07:df:db:b8:48:
         ae:40:7b:1a:19:09:f2:0f:56:ae:9b:f3:7d:20:fa:0b:69:6a:
         0c:92:c1:a4:e3:12:3c:bc:a1:da:0a:1f:b1:99:c7:8f:41:c6:
         a8:1c:ac:85:23:a2:54:aa:e5:02:45:22:b7:79:3a:82:a3:b8:
         19:94:49:88:b4:3e:de:31:8b:33:e2:0b:bf:6a:4c:3e:07:83:
         1c:a6:3b:b6:ba:0b:41:51:9b:f6:75:1e:99:79:53:26:90:b0:
         86:34:65:e6:b4:12:ac:e7:a7:6e:89:41:e8:e7:6f:0c:97:16:
         6b:bc:20:a7:90:5f:72:7a:32:e4:7a:54:94:0c:fd:b7:e6:4f:
         ac:7e:d4:87:df:d5:4c:16:48:0e:74:86:50:b0:26:d6:0d:6e:
         b9:c6:62:b2:c2:f2:da:59:fb:a2:08:d5:23:20:34:a9:b2:d0:
         78:5f:82:10:6e:a1:db:8a:89:b5:29:c2:44:f8:05:1f:e0:b7:
         60:b8:28:c3:c8:77:25:de:1f:9f:b5:0e:99:60:5b:12:8e:c3:
         8d:62:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:46 2026 by rpki-client