Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File:                     ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier:          Otx0lEgkpuuQVh2RZO4X0SUw8oe15cG/Z2Z32U4gl6Y=
Subject key identifier:   1B:34:8C:9F:29:D1:D3:F4:36:68:A5:24:F1:0C:8E:1F:BC:31:C0:A5
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer:       /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial:       019CAC0FFB5A51EDC147597ACB3322411A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number:          077E
Signing time:             Mon 02 Mar 2026 01:00:54 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:54 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:54 +0000
Files and hashes:         1: YDyC5kBhNI8thKV1LynCzapFE7Q.roa (hash: QeALQ6HX+21WYDZockRGHmyT4aXfggw6UzIeai2uvuw=)
                          2: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: Ss2TVH6hM+UoAkBjd9lbxBAjL9G8wmR7RirE8uQVFK0=)
                          3: uhkofDxDROlcHCvXKtjXZmbwMcM.roa (hash: VNaYu0cLAzaNZcXisiMMcDQwN9FyAi7e1kpMVNW8PJk=)
                          4: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (hash: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic=)
                          5: wOkpHSGw-U8KI9tK8aag-rxFIFI.roa (hash: eMuVT13Zj6Uew2bZcSNq7VO8ffPMy9zKzbd96LA2Eac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:fb:5a:51:ed:c1:47:59:7a:cb:33:22:41:1a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
        Validity
            Not Before: Mar  2 01:00:54 2026 GMT
            Not After : Mar  3 01:00:54 2026 GMT
        Subject: CN=1b348c9f29d1d3f43668a524f10c8e1fbc31c0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:00:d0:39:94:36:54:90:69:db:25:94:d6:
                    df:bb:10:31:5d:df:f8:83:35:fe:cd:ab:11:b8:74:
                    4f:75:95:45:2c:7a:54:4e:f2:0e:03:5d:be:1c:ff:
                    b4:e1:77:69:eb:70:4c:47:9c:83:88:50:8f:16:1e:
                    31:e1:4c:a5:15:94:b9:85:81:5c:93:7a:0e:03:e9:
                    a3:78:a1:9f:57:b7:9d:38:64:22:79:cf:95:15:9a:
                    dc:63:a9:23:00:05:6a:de:87:fd:23:22:7c:23:98:
                    12:84:76:50:f9:33:06:c6:e8:dd:cd:ae:5e:b1:32:
                    98:8e:ee:7f:b7:c4:16:c8:8c:a0:7e:ac:f4:e7:48:
                    21:30:14:a9:d4:9a:f0:ce:82:e9:5f:69:22:d5:ac:
                    af:2a:fa:2b:bd:e5:2f:0c:dd:14:6d:e0:24:59:ef:
                    33:97:19:c7:53:3c:19:c2:19:f7:72:02:be:3a:96:
                    5f:2a:dc:56:9d:dc:74:d1:e7:5c:78:1c:67:e8:fa:
                    bb:64:f5:84:17:4e:a2:21:cd:05:6b:62:1b:1f:60:
                    c6:15:a3:79:d0:93:88:02:5e:c8:48:04:3c:e1:79:
                    16:9c:7c:13:1d:23:af:4d:ca:cb:3f:c8:91:d3:1d:
                    e7:e6:8f:e1:68:38:5c:f0:b3:c6:b8:21:88:a7:d9:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:8C:9F:29:D1:D3:F4:36:68:A5:24:F1:0C:8E:1F:BC:31:C0:A5
            X509v3 Authority Key Identifier:
                keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b7:38:16:b7:fa:5d:60:26:62:7d:cc:54:db:b1:ce:c6:b0:
         22:2c:cb:6f:2c:04:7f:d8:3a:77:59:19:39:d3:70:0d:66:e0:
         9b:c3:42:57:23:b4:ee:84:24:71:1f:98:70:8c:13:08:18:29:
         47:98:e8:3d:71:23:c3:ed:fc:15:77:90:83:1f:5d:78:b3:57:
         91:3e:a8:cb:94:73:2a:13:ac:5f:05:22:8e:44:0b:7c:3d:76:
         1a:6f:4e:ae:57:16:de:95:58:3f:5d:2e:19:07:5f:2f:9f:4b:
         42:7e:57:e5:58:1f:da:1a:a2:3a:47:ae:7a:05:0d:d6:07:d2:
         38:b8:00:5f:6b:67:66:6e:3b:e0:ce:94:d2:af:d8:7e:83:a7:
         2e:0d:16:3d:35:b1:c7:ba:83:2f:8a:60:c8:c3:b8:52:68:12:
         b8:65:c1:9e:b2:af:9f:1c:1f:90:e3:81:bb:29:62:6a:96:b8:
         92:61:b5:32:83:7d:bf:97:1f:3a:f4:27:d6:2f:25:70:42:ed:
         0b:76:ec:6e:9c:1f:49:eb:9c:25:0b:6b:39:17:0a:73:2e:36:
         e8:7d:f9:0e:b1:63:a9:41:74:a6:7f:05:a2:92:71:94:7e:c3:
         1e:31:b4:80:6d:bf:05:a5:f6:71:39:4a:26:f8:dd:91:79:d8:
         54:b8:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:38 2026 by rpki-client