Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          /9K5wfqkFQSZ7V31m3azR8nj6Tq62IzBeto4Qih1xFk=
Subject key identifier:   95:23:8B:3C:04:87:58:C5:13:5A:77:A3:D8:0E:4D:37:24:0F:09:3D
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       019CAA8FE22FBE827F4186442E88A84AEFB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 18:01:22 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:22 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:22 +0000
Files and hashes:         1: hPzqOeQ_w-Ij5x0l3KIEfZQVozA.roa (hash: jYuJ5+ntA9C/HKFCoZV1/jGdO4Gs+ralXOW9/Jy4aww=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: iHiKkpCm4dFmpRxvRT8Mmq+hW/j3jUAEHpZ6VYccsx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:e2:2f:be:82:7f:41:86:44:2e:88:a8:4a:ef:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: Mar  1 18:01:22 2026 GMT
            Not After : Mar  2 18:01:22 2026 GMT
        Subject: CN=95238b3c048758c5135a77a3d80e4d37240f093d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:ab:00:db:e2:c6:e3:5f:4f:b7:a8:3f:71:
                    5c:ad:ff:81:96:79:a0:c6:80:f0:b1:97:34:70:7b:
                    39:36:14:93:be:e3:27:c7:27:b1:04:a7:b8:1b:f5:
                    07:39:e8:81:d3:37:f4:56:7a:99:22:88:c1:6b:84:
                    20:5c:17:6c:98:cd:e5:dc:10:db:fb:4e:74:3d:8e:
                    d9:6a:f9:b6:b6:a8:3d:9a:50:3f:84:94:9a:5e:00:
                    d7:51:7a:24:db:2b:6d:c0:24:81:0b:7e:61:ba:81:
                    a4:0d:6a:99:18:86:a6:2f:55:0a:83:96:82:c3:42:
                    21:f6:7b:f9:30:05:69:11:64:75:ea:0b:18:fa:1a:
                    57:02:a5:f1:d2:9b:74:cc:61:21:9d:9a:98:24:86:
                    4f:22:65:e7:0b:61:e5:84:ff:30:35:73:05:09:16:
                    9a:24:73:d8:ca:8d:af:0a:fa:c6:25:29:1b:23:b3:
                    11:27:e9:ee:37:12:7b:91:e9:6c:09:f1:dd:e6:f0:
                    9f:e7:1e:59:14:63:55:de:3d:26:cb:69:bb:d7:cb:
                    80:f7:77:38:1e:2d:f6:66:cb:93:f2:b7:f3:5c:54:
                    fb:ff:d6:94:97:c2:e3:c0:ec:f5:dd:04:14:df:a1:
                    3b:11:c3:f9:59:3b:39:77:c3:18:40:20:4c:51:4d:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:23:8B:3C:04:87:58:C5:13:5A:77:A3:D8:0E:4D:37:24:0F:09:3D
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a6:b7:99:4a:1a:cd:dc:12:29:eb:1e:70:33:ac:15:92:5a:
         61:47:d1:04:14:b8:d1:43:ff:b7:e6:79:42:20:e5:c6:d1:c9:
         e5:ef:18:00:3d:a2:e4:ef:eb:a9:c8:1f:ef:eb:ef:5d:c7:9b:
         49:2c:f6:2b:92:99:17:2b:74:c7:33:c3:62:6e:c6:3e:e4:2c:
         8c:94:3c:78:87:b4:5d:26:e9:8e:45:30:48:b0:d8:e5:78:a2:
         de:98:02:32:20:d8:80:2a:24:c4:7d:51:2c:1b:61:fe:1a:18:
         46:2f:11:22:18:a7:6b:a6:59:6a:dc:f4:9d:70:56:e6:1a:68:
         b6:49:b5:89:73:4d:d2:d9:d5:24:8e:d0:49:2e:38:77:94:7f:
         54:6f:46:8a:72:ef:5f:7a:99:75:10:da:aa:d0:cf:56:b3:9d:
         09:be:ad:b5:1c:5b:ed:a4:c0:fc:cd:9e:be:c8:e6:4a:8e:90:
         18:0f:e1:9e:14:b2:1c:bb:98:48:4a:cb:04:5d:5b:ec:9f:54:
         6a:45:35:2a:05:b8:dd:8b:d6:84:d2:81:ae:ef:24:0a:cb:5c:
         e4:16:75:24:59:e5:5a:2c:3a:11:55:78:dd:50:39:41:81:23:
         ca:de:b7:53:a5:77:88:fe:2b:70:11:77:9a:59:f1:85:4f:4c:
         20:1b:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:59 2026 by rpki-client