Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          K9Y6nLFv8a4OK2uwcXSIgpS/cUjmSk/QNbFKUl+QZnk=
Subject key identifier:   79:8B:B3:54:77:86:DA:62:C7:02:30:F2:3F:14:57:91:2D:77:83:33
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019CAC102A6242FE2CBA1A034F4B40B654A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          10D1
Signing time:             Mon 02 Mar 2026 01:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:06 +0000
Files and hashes:         1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
                          2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=)
                          3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: BlKh6VX6zmVA0hbSzwrpFJOCRQk49L+das7oX5SSXfg=)
                          5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
                          6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
                          7: vUUgJIohg5SQneif_sUKDZs-FYo.roa (hash: O9F4ICaD35Dayn0PCg4Uohxoxcc4CWJ4HvxFQPiHF6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:2a:62:42:fe:2c:ba:1a:03:4f:4b:40:b6:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Mar  2 01:01:06 2026 GMT
            Not After : Mar  3 01:01:06 2026 GMT
        Subject: CN=798bb3547786da62c70230f23f1457912d778333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:d1:b1:fd:1d:a5:35:47:e6:c9:9f:e1:5d:
                    bc:a1:20:a6:0e:e5:3c:7c:f3:9c:f4:ca:5b:ac:10:
                    25:31:f6:b5:bd:c7:7d:6f:e9:77:29:87:cf:37:42:
                    87:dc:a7:9e:f6:9d:8f:f1:e8:09:f4:fc:8a:a4:63:
                    26:6b:6a:3b:30:ae:c2:d2:ca:cf:17:73:81:ad:6f:
                    b3:fe:b3:96:df:a2:e6:2f:33:7c:f5:6b:f5:99:d4:
                    d7:67:41:d6:f8:e5:0f:5c:ca:71:9d:51:e9:dd:8f:
                    1e:b6:98:88:9b:9a:61:e0:ce:81:60:58:85:e7:d2:
                    f5:09:4c:30:65:fb:99:90:8a:31:50:4a:18:df:90:
                    89:82:e7:dc:e1:b9:37:07:37:79:6d:56:a7:9b:36:
                    cd:a8:08:63:67:ca:3c:4e:21:16:ca:27:90:6d:78:
                    ff:47:39:28:6b:15:3d:80:7b:b4:ec:63:e7:8d:f2:
                    b7:1d:90:f4:02:df:3f:82:5d:a0:84:f7:de:ab:7b:
                    87:15:ed:6d:f1:20:80:d4:0a:1b:ea:d3:c0:07:8c:
                    cd:c9:20:8d:bf:e6:96:0e:f7:14:60:a7:fa:cb:08:
                    6d:3c:3a:5d:bd:ea:dd:41:cf:ec:3a:20:2d:19:eb:
                    32:45:5c:c8:0c:b6:4b:11:ea:cb:b1:a0:51:09:d0:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:B3:54:77:86:DA:62:C7:02:30:F2:3F:14:57:91:2D:77:83:33
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:e5:8b:89:9b:be:8b:3e:ed:7d:71:8c:2d:32:7f:75:6b:
         8d:45:33:3f:63:cb:1a:c3:4e:11:58:71:f2:78:de:6d:cf:35:
         13:11:21:de:e7:4a:aa:ef:bb:13:39:9f:c4:78:b5:d0:6e:86:
         25:ec:48:c1:69:78:97:cf:1f:4c:ef:30:dc:2b:92:ee:46:58:
         99:32:6c:28:87:8f:be:52:82:59:c1:a5:34:ca:03:e8:82:90:
         2d:23:11:ac:aa:9b:94:33:22:2e:f0:26:3b:dc:90:c4:27:a8:
         31:14:6d:5e:64:6c:c7:11:58:64:4e:51:9a:50:e9:02:42:5e:
         39:3b:91:82:f7:90:6d:b5:9d:ad:21:d9:ef:e0:89:e6:5b:55:
         af:72:23:fa:9d:5a:36:27:73:8c:bd:76:7e:66:4f:f6:31:5c:
         fb:95:f8:a6:5e:b2:6e:16:b3:f7:6f:45:fd:48:46:d4:b4:d8:
         04:4c:1d:c2:49:8c:fd:f8:7c:70:a2:d3:6f:fa:ac:65:25:6f:
         36:46:2e:d9:7f:26:55:3b:f8:b6:08:03:12:07:c5:a2:b6:41:
         8a:2d:ef:3b:1c:3b:50:c8:ea:0a:41:e3:0b:1f:ea:9d:45:b4:
         d4:e2:0b:69:b7:66:42:57:2f:7c:5b:f6:e5:bd:7c:03:6f:53:
         84:16:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:31 2026 by rpki-client