Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          DyGej3mINgTYiretV1eY2p6/mG/TujGEbz/YplQSilw=
Subject key identifier:   9A:04:C0:13:69:1F:8D:50:75:9B:0E:09:90:B1:74:61:C8:83:76:CB
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019CAE35C747C67952D1430360EB8FFA6EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          08E4
Signing time:             Mon 02 Mar 2026 11:01:25 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:25 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:25 +0000
Files and hashes:         1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
                          2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
                          3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
                          4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
                          5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: fhW8qnALfKHwGFYq8y8/wkwoQLZSKtbT8TGr3y3OqHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:c7:47:c6:79:52:d1:43:03:60:eb:8f:fa:6e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Mar  2 11:01:25 2026 GMT
            Not After : Mar  3 11:01:25 2026 GMT
        Subject: CN=9a04c013691f8d50759b0e0990b17461c88376cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:2e:cd:b9:38:e0:92:6e:29:40:b8:3b:d6:
                    27:09:53:34:19:81:03:a4:07:d4:37:b5:39:17:5b:
                    6e:30:8b:f9:e4:3b:d4:4e:b9:f4:e8:c3:46:51:a6:
                    d4:5d:93:8b:8d:02:63:67:47:e2:97:a4:55:3d:d5:
                    c5:eb:2c:00:48:27:a8:43:f9:bf:be:c4:91:8e:9d:
                    e5:67:f5:ec:c0:92:5e:77:3c:a7:1e:6a:f0:2b:db:
                    ca:80:da:a2:aa:6e:d0:0a:c6:c2:29:05:32:be:15:
                    bd:75:ce:26:6a:c0:e5:13:94:b0:d3:2c:a3:9b:fc:
                    80:89:9b:6c:72:d2:d3:63:4a:6f:c1:79:dd:5f:a5:
                    b0:09:48:bf:5b:0b:10:c8:f0:c6:6d:70:c7:00:32:
                    20:46:1f:8a:12:56:c2:3c:46:9d:0e:2c:63:61:9a:
                    04:66:01:4b:ff:a8:15:37:55:ac:92:55:f4:02:a8:
                    c9:3a:36:49:7d:fa:c2:a3:d3:4f:f2:99:f5:01:21:
                    e1:03:9b:2a:53:ca:fa:03:0b:9e:a6:e3:8f:15:17:
                    25:fa:77:7e:93:9e:bb:b8:18:72:ea:4b:be:2a:1e:
                    c0:a3:0a:77:0e:7f:27:0e:81:7f:79:33:9d:8d:50:
                    e9:ff:7a:f2:f2:6c:b9:e0:a5:82:0a:60:17:5f:46:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:C0:13:69:1F:8D:50:75:9B:0E:09:90:B1:74:61:C8:83:76:CB
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:5f:e5:5d:bc:87:e3:75:67:be:6e:17:64:9d:de:e8:db:
         ea:47:21:79:b6:16:b5:72:f2:fa:3e:8a:78:99:56:9e:5c:42:
         97:58:b7:51:19:04:af:a8:4a:c1:5b:c7:4e:13:55:cc:e0:49:
         de:6b:7c:d1:ee:2c:ab:05:5c:7a:e1:eb:f9:f8:e4:7e:8c:16:
         a6:a7:ac:a0:4a:c2:e5:44:38:7b:eb:aa:59:1b:69:70:79:f9:
         8d:9d:b1:e5:a2:d6:e9:b3:7f:86:3d:a8:93:7a:d3:d9:6f:20:
         04:62:e1:20:b7:53:1c:fe:65:a1:9e:1e:6e:4a:e2:50:1c:b7:
         bc:88:30:04:9f:cc:1a:c2:06:b9:63:de:89:22:3e:11:ce:ba:
         78:c4:ae:32:b2:5c:71:90:df:e1:50:02:fb:13:4f:6f:97:ee:
         d6:3c:03:ec:df:8f:84:5e:cf:ee:e5:3d:cb:6a:46:e1:dd:69:
         b4:d1:be:c9:62:d4:dd:ef:66:0c:06:e2:0d:74:dc:09:7f:8a:
         f8:1e:9b:4b:95:6c:2f:c7:81:7e:a7:9d:6e:b4:f2:96:4f:5a:
         06:31:3e:93:44:c1:87:59:13:fe:a0:15:94:c8:c9:07:3c:ac:
         fd:08:86:25:39:4f:a5:37:61:2d:17:89:39:e0:32:cf:4e:0e:
         fb:56:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:02 2026 by rpki-client