Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          1dyfR+9f00zjyNmXyO8HbwEMDzC/E9L58XaOxMN/9N8=
Subject key identifier:   10:F9:4C:55:85:25:75:40:96:2A:BF:D6:C4:81:3E:9D:02:DB:D4:82
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       019CAED9FE7CFDD54CE4B6332A864443A332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          184D
Signing time:             Mon 02 Mar 2026 14:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:47 +0000
Files and hashes:         1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=)
                          2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: h7gZX4nxVA49eQ7w2b+HMzxYg9oBgvaROORdVlqcEWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:d9:fe:7c:fd:d5:4c:e4:b6:33:2a:86:44:43:a3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Mar  2 14:00:47 2026 GMT
            Not After : Mar  3 14:00:47 2026 GMT
        Subject: CN=10f94c5585257540962abfd6c4813e9d02dbd482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:ff:78:01:da:54:bd:39:1f:df:e4:10:6a:
                    2e:fc:dc:45:1b:d3:af:f1:57:1d:03:ba:41:32:a2:
                    e0:10:47:6f:d3:d6:4a:dc:8a:4f:9b:a6:f3:0c:89:
                    aa:e9:10:d2:b7:a2:4a:a1:82:a0:f2:31:7b:48:db:
                    17:2b:46:bf:f0:12:1f:58:21:cf:97:fb:a8:03:35:
                    8d:cd:a7:d3:a8:19:14:38:14:11:c6:02:c5:13:18:
                    b9:34:72:f1:f2:ac:1f:4f:90:9e:0c:24:a0:35:67:
                    ad:5e:82:d8:f2:87:14:1f:44:e0:9f:2a:e3:23:57:
                    49:15:a2:53:84:3d:df:ac:40:08:11:ee:89:95:3b:
                    83:7e:e1:2a:e0:d7:2c:61:dc:96:49:e8:4e:0b:f8:
                    b6:cb:c9:78:19:bd:dc:e5:90:03:3c:80:fe:00:8b:
                    73:60:23:06:44:4a:18:1f:90:73:5f:9a:b5:2e:f8:
                    30:d4:65:38:85:76:9e:ea:c9:97:f6:be:8f:ea:94:
                    da:4b:fe:9e:8d:d7:96:4e:be:3e:fe:23:b1:de:12:
                    07:27:44:ea:39:ee:7f:7a:42:e3:5d:f7:90:14:59:
                    ba:dc:4b:e6:de:aa:c8:d3:34:84:2e:b2:e3:87:85:
                    8a:90:4c:f3:49:5d:13:0e:dc:d3:84:9e:5c:f5:56:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:4C:55:85:25:75:40:96:2A:BF:D6:C4:81:3E:9D:02:DB:D4:82
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:10:38:32:c0:5c:80:b6:d4:40:cb:8f:be:b4:e3:2f:0b:
         8d:69:17:0f:a6:44:22:14:93:69:00:d9:36:29:61:e7:7d:a0:
         95:73:43:22:8a:8e:c8:2e:0a:6d:2e:5b:fe:ca:f5:3a:2d:b5:
         e1:83:7b:68:2b:b0:a1:ad:d1:89:18:97:68:bc:7b:9d:68:47:
         91:94:c2:ec:d1:e4:33:f0:72:62:b2:eb:0c:63:63:f9:0f:e0:
         bc:7e:df:a2:f9:8b:d3:9d:5c:d4:88:0c:55:cd:db:7c:80:c2:
         2f:df:84:d8:da:4c:38:14:72:71:6c:74:f1:5b:ba:bb:13:62:
         98:9c:1c:cf:d2:cc:68:ec:ff:c4:a2:85:b9:95:f9:4c:32:5a:
         8d:b0:bf:4e:7b:cb:bf:9d:8d:ca:7e:1c:e4:1b:27:fe:79:b4:
         5e:0e:c1:1b:f7:4f:a6:b7:df:b0:96:16:20:b2:2e:41:18:d5:
         a5:0e:8f:08:7e:0f:0a:6d:ed:3d:e5:92:61:9f:4a:4b:bc:ac:
         34:90:94:84:d5:96:88:6f:01:2d:85:b3:35:a0:f3:ea:c7:21:
         c0:32:e3:23:fc:a5:e4:ba:77:fb:76:ed:ca:9d:72:4e:1d:1f:
         d0:31:78:f4:c7:50:19:54:60:3b:e4:27:de:1a:99:76:3b:45:
         20:03:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:37 2026 by rpki-client