Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          Yo5r1BDBxczCd+FkywRZl6bvp9xBEy6xwcRKpi0gz2s=
Subject key identifier:   E8:B2:F1:06:DF:67:75:F7:4C:83:8B:6F:DD:65:9D:12:69:E8:6F:7A
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       019D058A6DF67FB827F2B21A9E7428F9F7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          1876
Signing time:             Thu 19 Mar 2026 10:00:51 +0000
Manifest this update:     Thu 19 Mar 2026 10:00:51 +0000
Manifest next update:     Fri 20 Mar 2026 10:00:51 +0000
Files and hashes:         1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
                          2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
                          3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: i3kMy3jP2wNrgobFSmp0XxHOJvd4cYEdR4Ffxjj24ZU=)
                          4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:8a:6d:f6:7f:b8:27:f2:b2:1a:9e:74:28:f9:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Mar 19 10:00:51 2026 GMT
            Not After : Mar 20 10:00:51 2026 GMT
        Subject: CN=e8b2f106df6775f74c838b6fdd659d1269e86f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:af:6f:60:73:a6:db:75:de:35:14:4b:16:c9:
                    5f:de:87:fa:bf:eb:a3:a4:c2:df:96:0a:27:b8:c6:
                    22:06:36:24:ea:4a:f2:12:a5:d0:93:46:28:4a:42:
                    81:f4:fb:43:fa:f8:77:18:19:a5:a9:c4:dc:c5:e2:
                    8d:05:fe:5f:f9:27:0e:f8:1d:e2:92:e9:61:54:39:
                    8e:4c:e5:18:08:31:3f:82:8c:c5:1d:05:cb:92:96:
                    d6:44:47:07:e0:13:6d:96:8c:77:47:f9:00:d4:d1:
                    6b:69:97:7f:a2:52:ba:80:36:67:df:76:39:4f:10:
                    09:b9:7a:18:7e:13:1f:02:95:04:72:ae:8c:c1:8e:
                    ef:2d:e2:c4:4a:d7:3b:7b:5f:59:77:a0:7b:fe:58:
                    57:07:b3:26:8a:31:fe:7f:a7:06:d5:53:41:de:51:
                    4d:af:c0:37:89:58:80:57:6a:56:99:8d:e5:9c:6f:
                    eb:98:b1:da:a7:0e:d0:51:44:e4:1d:c3:48:c4:13:
                    d9:1b:a5:42:01:c2:31:a7:46:c9:24:00:74:5f:dc:
                    93:a6:46:10:30:17:f0:5d:33:95:88:cd:d9:65:2a:
                    83:d4:1b:a9:55:8e:8d:9a:b2:23:5f:cd:f1:77:44:
                    06:38:5b:05:e4:bc:18:72:3c:90:6b:71:9b:be:98:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B2:F1:06:DF:67:75:F7:4C:83:8B:6F:DD:65:9D:12:69:E8:6F:7A
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:85:78:8b:ae:7c:14:db:bf:77:51:47:6b:f9:bc:b3:65:8c:
         ac:f4:07:43:09:b2:8d:e5:a2:ed:a3:33:87:77:a2:9f:80:f1:
         a5:49:70:22:6b:b3:bf:29:56:a7:ea:f0:8e:b0:3d:90:ac:f1:
         bc:2d:80:32:7d:79:95:aa:c9:5a:62:bc:f5:0d:ae:49:5a:eb:
         b7:93:3c:64:48:cb:28:d6:46:bb:fc:6b:af:22:66:2d:e9:40:
         e7:44:4d:72:77:4e:74:7f:75:37:6e:1d:48:82:98:34:5d:7e:
         4e:61:c4:07:5b:c8:a0:29:3a:29:29:7d:3d:7d:a0:3f:bc:6d:
         ee:f6:f4:44:e3:c4:e1:2e:b0:03:d5:36:61:b0:55:28:eb:32:
         0f:17:d1:09:7b:27:e2:a0:fd:04:9d:4b:bd:fb:99:bc:06:bf:
         14:51:57:ac:b3:26:08:04:ce:e2:49:9f:d8:df:e5:db:60:3f:
         21:4f:d2:1c:c5:4d:fc:42:39:99:fe:5f:e7:67:a4:7a:f1:dc:
         01:6d:7b:18:e9:ad:6c:51:2f:33:d2:d8:ec:3a:60:e4:cd:ca:
         6c:44:65:50:19:bb:da:97:23:c0:1b:f8:f2:d5:58:09:2f:6d:
         07:df:d2:cd:0d:6d:3d:62:14:76:e6:fb:01:f0:95:8c:17:33:
         ec:73:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:05:09 2026 by rpki-client