Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
File:                     2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json)
Hash identifier:          zDbSIGxbEF8EiOx9A/+A/eLSSKS9y0zsE9kzdaOO+S8=
Subject key identifier:   62:DB:6B:A2:B9:E5:45:B3:93:39:D3:84:C5:F4:B7:AA:5C:E9:2D:2D
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Certificate issuer:       /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial:       019CAC46DCD2CFCBF168D99D0BA6FB20DE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
Manifest number:          0564
Signing time:             Mon 02 Mar 2026 02:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:51 +0000
Files and hashes:         1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: 6aWLrveU76rpYicGIdbI76JY3j28djiRxpTIzip7DOw=)
                          2: S6JRzdPpGObhz0VldQpk2KnV2uI.roa (hash: lJGmLlkU+7M1+xw3eyjs66v6c+81KsPPae1DO4AI0OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:dc:d2:cf:cb:f1:68:d9:9d:0b:a6:fb:20:de:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
        Validity
            Not Before: Mar  2 02:00:51 2026 GMT
            Not After : Mar  3 02:00:51 2026 GMT
        Subject: CN=62db6ba2b9e545b39339d384c5f4b7aa5ce92d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:0a:14:7d:aa:d6:cf:ec:bc:07:e0:e0:cf:
                    5b:cb:14:39:c0:49:ad:57:90:34:7e:65:d8:0d:79:
                    ec:e1:02:b3:0e:cd:e1:e7:23:c0:48:e3:82:9c:c2:
                    7a:b1:14:fe:73:2c:01:44:15:0f:2a:b1:5b:f6:ce:
                    c2:de:79:d8:25:e3:d4:04:0c:58:87:96:8c:cc:69:
                    38:16:ca:03:6f:f9:95:e9:85:19:70:5f:a4:83:6e:
                    6f:8a:c0:03:43:f5:ab:45:8d:2b:54:47:4d:74:8c:
                    a9:1a:31:31:96:5c:fd:06:34:a5:e2:c2:33:27:2f:
                    c4:c8:69:cf:eb:71:90:65:c5:38:12:de:2a:43:b3:
                    aa:93:32:ff:e5:3e:b1:41:a9:d0:bf:c6:fe:1c:18:
                    83:f8:ec:a8:98:a3:24:1f:f5:c2:ef:1c:e3:7e:2d:
                    d8:ad:43:7a:be:20:a9:c4:af:c0:1b:b7:97:a8:e3:
                    ba:08:24:9e:9e:56:bf:b2:6b:0d:f9:ba:f7:d7:d2:
                    1f:ac:08:c7:fd:7e:83:fc:00:55:36:ac:5a:80:40:
                    d1:de:b9:5a:00:3c:8c:2d:37:36:15:04:32:e3:de:
                    d9:32:0d:11:80:7a:4c:2c:f6:76:7f:f9:a2:a9:c0:
                    14:3d:f7:4d:79:31:1e:e3:de:4f:a0:45:97:00:13:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DB:6B:A2:B9:E5:45:B3:93:39:D3:84:C5:F4:B7:AA:5C:E9:2D:2D
            X509v3 Authority Key Identifier:
                keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:25:14:28:0e:43:19:10:4d:58:7c:ad:8e:cd:45:ad:f2:44:
         10:73:45:32:d1:52:2e:ad:6a:8f:29:ef:7a:3e:eb:ee:1f:98:
         98:6a:6f:96:1b:f2:fb:7d:50:09:ff:b3:9d:99:7d:00:8d:32:
         70:87:53:69:90:ab:74:9f:2d:fb:b3:9d:05:7f:88:8d:65:44:
         f5:56:54:ba:18:2c:4c:5f:09:d1:8b:51:b1:cf:fa:dc:43:06:
         00:58:4a:ae:3d:e3:eb:87:9c:0b:76:23:67:38:d0:83:6e:f5:
         84:d6:e7:f9:a3:8e:7a:82:57:18:a6:3b:e9:80:a0:a0:ad:81:
         e7:21:6c:e7:c0:ca:ea:c5:a5:78:d3:26:97:8e:fd:31:80:cb:
         46:1f:3a:3d:58:f7:61:39:07:92:cb:5d:b2:e6:7f:f9:3a:55:
         06:3a:c6:50:cf:c2:9a:35:67:88:87:25:cd:c9:4b:fe:f5:b1:
         11:41:20:3f:23:34:96:9d:6d:41:2a:d8:98:ed:dc:2a:73:58:
         7a:57:cb:00:7a:08:f4:7b:30:3f:2d:48:35:fb:0e:11:bc:4e:
         3d:45:00:50:8f:82:49:a1:cf:da:2e:01:30:d8:6d:55:a0:08:
         0a:0a:9b:92:eb:a2:b2:ac:68:ab:76:bc:96:0c:0a:af:c3:43:
         45:b2:ad:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:19 2026 by rpki-client