Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File:                     ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier:          k4/EMQ8VsSWysCsBOBQrxR352rYIj4ZXeS+uH54aAnQ=
Subject key identifier:   79:F1:21:41:A4:2E:E5:4C:89:B2:39:3F:8F:9D:E4:ED:3E:89:2E:57
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer:       /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial:       019CAAC6636647E32EA01922DBAB5FA942B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 19:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:54 +0000
Files and hashes:         1: LT7SpeHVHrImIlmvmDypryVJsMA.roa (hash: UY3Bc5Ii8P52rm9NhIsYSUCYO4P4gv1+uleYch2vT5A=)
                          2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: a2MM2AbF3I0ecah9KfDJlL1WWPbBhZT19yxZvLpb7eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:63:66:47:e3:2e:a0:19:22:db:ab:5f:a9:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
        Validity
            Not Before: Mar  1 19:00:54 2026 GMT
            Not After : Mar  2 19:00:54 2026 GMT
        Subject: CN=79f12141a42ee54c89b2393f8f9de4ed3e892e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:77:18:4c:df:2b:75:9a:18:5f:64:85:af:
                    00:18:f7:57:09:bd:d6:01:f9:b8:7e:00:f7:80:21:
                    1b:6e:06:da:49:73:7a:18:1c:f8:72:a1:40:82:67:
                    87:af:ab:5b:18:af:a2:f8:8b:4c:21:00:7b:81:68:
                    ae:6d:7d:c6:7d:02:38:19:42:49:3c:24:fd:df:79:
                    7f:db:00:34:84:d5:76:2e:93:2b:ce:e9:d2:4e:91:
                    1b:80:e5:e6:ab:76:1f:a2:8b:bd:d4:51:32:de:af:
                    0c:08:9c:90:2c:a0:6a:ca:1a:6b:ef:00:8b:2f:4b:
                    91:61:f5:c6:70:06:72:af:a2:7f:4a:b8:7d:f6:78:
                    85:ec:60:15:58:67:d2:3c:ca:88:03:38:6f:4c:e2:
                    1a:18:3d:b3:6a:21:88:b2:60:97:9f:c8:53:7e:17:
                    9b:5a:d4:8e:7b:36:2c:d2:a3:6a:12:a4:06:25:44:
                    2a:ae:d5:a3:68:84:c9:0d:fa:5e:d5:1a:f1:cd:b6:
                    cb:10:c7:fc:5d:d4:2d:6c:c1:5f:7e:54:28:ad:e6:
                    8f:f4:41:83:e6:2e:df:17:9b:d8:1c:ef:97:ac:02:
                    db:86:9e:84:5f:1b:5d:de:78:1c:8a:4f:a6:12:30:
                    9c:a6:42:24:74:e8:19:b3:77:08:30:ef:83:83:a2:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:21:41:A4:2E:E5:4C:89:B2:39:3F:8F:9D:E4:ED:3E:89:2E:57
            X509v3 Authority Key Identifier:
                keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a8:3d:ca:73:0f:47:0f:14:62:86:10:8d:1c:4d:e5:88:c7:
         ab:44:75:a2:94:20:57:ba:f6:7e:5b:87:1b:65:0a:b5:46:44:
         ae:31:aa:16:78:01:88:ba:61:d0:89:7b:93:f8:53:5e:87:bb:
         69:26:28:c3:c7:8a:c0:df:28:bc:6f:60:9c:0c:e6:3d:03:e1:
         db:7b:69:bd:54:44:68:44:cf:ff:b4:9e:71:f7:cf:d4:7b:af:
         b5:f2:b6:c6:37:32:ec:c7:6e:77:cd:4b:de:d4:47:4d:23:a8:
         c2:25:97:1b:ba:0b:61:2f:6c:7c:81:dd:1e:87:f7:c8:f1:6d:
         d7:4f:8b:fc:7b:6d:99:c0:cc:36:72:d6:44:66:ef:5b:61:fc:
         cf:dd:62:8a:ad:67:a3:4d:87:94:54:f4:b0:3b:a4:a8:9a:68:
         6d:fd:cb:bb:59:b7:5f:2e:5d:59:e1:d5:76:b4:8e:d0:1c:20:
         48:ad:79:b7:d2:32:b7:c4:be:8f:88:29:62:05:a2:b7:2b:c6:
         9c:84:53:21:7c:a7:1a:47:6d:16:9b:f1:02:ff:b7:4b:b6:05:
         62:b9:d5:59:12:fe:60:db:8d:35:13:73:8f:65:c6:b2:4b:9a:
         47:b4:7b:45:43:fc:75:d6:89:40:db:3f:20:d6:74:20:56:b1:
         af:9b:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:41 2026 by rpki-client