Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          7mvRE8TeYv8iXx0BGpbvwXAYBfAp6pFvJtztzTFsULw=
Subject key identifier:   64:64:28:43:3F:22:D2:2D:0F:94:DF:7A:03:CE:EF:7B:91:0F:67:DE
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019CE5C8A5D73021C823D38986AE38915B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          1885
Signing time:             Fri 13 Mar 2026 06:00:57 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:57 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:57 +0000
Files and hashes:         1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
                          2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
                          3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
                          4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
                          5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
                          6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: bu0j7NsVHoCz3TA5EQWm3X4bCCSLl9AN/Z96SW/EBTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:a5:d7:30:21:c8:23:d3:89:86:ae:38:91:5b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Mar 13 06:00:57 2026 GMT
            Not After : Mar 14 06:00:57 2026 GMT
        Subject: CN=646428433f22d22d0f94df7a03ceef7b910f67de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:a6:48:ab:41:34:aa:d0:26:a6:d5:f2:48:
                    e9:42:04:3b:e1:bb:9e:f8:a0:c4:db:14:8e:d4:50:
                    39:7f:fa:9a:4e:c7:e2:f2:81:09:63:c5:16:c8:78:
                    69:bc:72:d7:c3:d1:5f:b5:b0:80:08:72:36:d6:d8:
                    1c:1b:fb:0d:e3:0f:12:0c:b8:50:c8:16:67:58:a7:
                    36:20:63:b1:2a:29:e1:0e:2d:82:f7:97:88:d7:a4:
                    e6:7e:e7:52:ce:54:f8:87:62:05:c0:8c:61:b2:2a:
                    8e:36:cf:34:46:bb:22:0d:a1:a7:14:91:f9:47:0c:
                    26:26:b5:48:c1:49:a2:97:2a:7a:d0:77:6a:62:06:
                    99:d8:31:d8:b7:4c:2d:90:cd:45:e4:39:0f:1b:44:
                    09:a7:d9:80:84:91:d3:f3:b7:bb:94:11:84:91:f5:
                    c1:5f:99:8c:f0:70:3b:dd:21:dd:2c:c6:e8:d6:7b:
                    04:71:a9:ee:d9:2d:ba:14:dc:10:d8:d8:c1:d4:4d:
                    3f:fb:6d:c5:c2:81:a4:dc:af:c3:19:7f:36:d7:60:
                    28:29:ea:a4:f2:05:ab:6f:21:ef:7b:bc:a0:ca:78:
                    46:9e:bb:a5:37:b2:f4:a1:fe:46:5f:9c:f4:98:e9:
                    56:10:35:2b:ae:97:62:c7:1c:51:f3:7f:eb:2c:3f:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:28:43:3F:22:D2:2D:0F:94:DF:7A:03:CE:EF:7B:91:0F:67:DE
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:fb:4e:65:d5:26:70:e8:ae:fe:51:cf:44:86:66:eb:d1:
         d0:cf:70:96:aa:8e:4a:d1:94:f5:db:c7:d3:bc:f8:5d:df:3b:
         9a:f7:ce:e0:68:33:83:d8:d9:b8:1e:d4:7d:b7:84:ad:fb:b2:
         90:2f:8a:86:93:ac:69:6c:9a:57:7f:cc:ed:2e:3c:9b:0b:f6:
         02:8a:5f:f6:d1:99:74:7a:b3:f8:4d:83:ec:1c:1d:fa:fb:e9:
         11:1e:27:95:fc:b7:05:f9:4a:24:e2:81:c7:62:87:31:8d:ce:
         21:d5:27:f8:b7:24:ce:b2:cf:ab:c6:37:9f:e3:ae:ba:82:71:
         cc:f6:2d:d6:c5:52:16:e5:99:44:eb:33:b4:74:97:f7:55:92:
         fa:e4:6a:16:3b:cb:18:2c:9a:a5:32:4d:24:93:c0:a0:61:28:
         c5:01:f2:86:2b:ef:92:b2:dd:69:d5:9f:7d:36:ef:a7:47:8d:
         ea:ea:fc:5b:0f:02:d4:b3:41:34:8b:5b:50:d7:24:12:59:c6:
         4b:3d:12:4c:b2:0c:99:a8:95:c6:9e:6a:1c:ad:b4:41:a7:e6:
         bd:4c:67:07:38:97:ab:d8:70:09:36:97:55:62:8f:28:f5:94:
         11:6e:04:17:9d:98:e7:e2:b8:81:f3:14:4e:74:b8:4f:76:48:
         30:73:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:52:42 2026 by rpki-client