Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File:                     ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier:          Kpb7fN/3ni74T13Mh96rPt+JDWZS7Yfhkbt8tvOgerk=
Subject key identifier:   51:87:C0:57:C4:92:C8:3D:34:90:2C:5B:CF:D3:B8:0B:B3:64:1F:2C
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       019CBE4D6A63AE7347FF9C81AEFF9DE880CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number:          18BE
Signing time:             Thu 05 Mar 2026 14:01:10 +0000
Manifest this update:     Thu 05 Mar 2026 14:01:10 +0000
Manifest next update:     Fri 06 Mar 2026 14:01:10 +0000
Files and hashes:         1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
                          2: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
                          3: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
                          4: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: uBjW55pU6bLnygEGi1M3dzYLt4G7DLVrJJM5wrh3p5I=)
                          5: axyqBQ48rrA_J1z5ycbZeCJx_Cc.roa (hash: 22q6iAZfHHtYuEjMCMpLAY7a5Lmv2Y859n6zpVXqo14=)
                          6: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
                          7: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:4d:6a:63:ae:73:47:ff:9c:81:ae:ff:9d:e8:80:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: Mar  5 14:01:10 2026 GMT
            Not After : Mar  6 14:01:10 2026 GMT
        Subject: CN=5187c057c492c83d34902c5bcfd3b80bb3641f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:2d:0d:67:cb:1b:de:23:6a:f5:8f:77:bc:
                    2a:76:d5:06:1f:4f:a8:7c:61:e3:4e:9b:a9:2b:50:
                    3a:06:3b:61:5e:85:d6:3a:2f:fd:81:72:bd:27:0d:
                    80:4b:36:12:df:21:01:54:76:6c:88:a1:fb:5c:55:
                    4a:d4:64:6a:1d:28:30:76:0f:b5:e1:03:1b:1d:27:
                    de:f1:eb:f0:ff:4e:e5:34:3e:b8:75:14:2d:e7:3f:
                    39:a9:e8:0c:76:cc:ce:51:e5:ca:c5:04:27:b1:15:
                    61:4c:b7:b3:9b:1d:0a:92:20:06:bc:2a:e8:b5:bc:
                    85:85:42:5a:0c:97:ea:c8:ec:c2:c2:6a:8e:f9:4b:
                    55:dd:5a:d3:11:92:8f:76:c2:a7:48:56:4e:5c:78:
                    11:58:dc:38:37:ba:c2:64:0e:f8:56:82:90:69:d3:
                    e2:6a:d9:47:29:a8:32:57:0a:2e:96:e1:9d:7f:a4:
                    48:82:05:e6:5e:9b:67:da:b5:4c:11:e1:5e:76:09:
                    e5:ec:6e:46:8b:07:bd:cd:71:92:c8:cf:3f:73:ff:
                    fa:de:4d:ef:4f:52:21:1d:ff:29:7c:3f:0b:3c:6e:
                    eb:11:b1:d7:7c:5d:31:e6:f1:ec:72:08:93:7f:7b:
                    e6:01:6e:8d:a2:58:bb:1b:09:5d:25:8f:86:f9:8e:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:87:C0:57:C4:92:C8:3D:34:90:2C:5B:CF:D3:B8:0B:B3:64:1F:2C
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:48:47:e1:3d:dc:41:48:e3:b6:ca:93:43:ff:2a:25:83:
         4c:09:c5:b1:e4:94:7f:1b:dc:e3:fe:b6:95:c5:4e:eb:80:5c:
         d3:94:36:63:cc:cf:d6:79:0a:0d:a1:ce:b9:a7:be:ea:48:83:
         35:2f:3f:74:97:5e:1e:44:1c:d8:74:58:ac:fb:8b:24:74:4e:
         f0:97:04:ba:27:38:1b:08:33:5a:fc:bb:fc:c4:b6:ac:86:34:
         4a:74:fc:4b:d6:44:6c:32:d9:19:8a:f5:be:f8:61:f2:98:46:
         02:06:81:f6:10:2a:98:da:25:13:cc:18:19:82:26:43:e2:b4:
         40:bf:56:79:30:36:30:4a:bd:93:89:6b:95:d6:4b:30:ce:55:
         70:49:7f:6f:f0:29:79:7b:b3:83:87:ec:9c:de:06:00:ad:c4:
         48:88:0c:7a:42:64:56:3e:0c:ce:6c:bd:3c:f9:1d:08:90:23:
         69:b9:be:a0:3b:fc:66:f2:dd:55:4e:f0:e8:65:c4:fb:c6:9f:
         de:b4:59:25:42:26:1b:58:06:ba:98:d0:72:c3:49:69:97:70:
         21:76:e4:8b:f2:e1:50:7d:5a:05:de:f5:ee:54:1f:9d:ad:2c:
         6c:db:01:e1:64:fe:3f:05:29:1c:c1:48:1d:fc:f2:f2:ab:d3:
         08:27:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 15:52:33 2026 by rpki-client