Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File:                     ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier:          JjuI9U/uqZRPRfWtB6xQr0gKNaE/8G/YTFpgi+WvYgA=
Subject key identifier:   9E:DB:5E:AD:6A:31:7F:E5:F8:F2:F5:1B:91:70:73:1D:FB:4C:9B:6F
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer:       /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial:       019CEB9395F542234D53E98587DDBB79D48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number:          1871
Signing time:             Sat 14 Mar 2026 09:00:43 +0000
Manifest this update:     Sat 14 Mar 2026 09:00:43 +0000
Manifest next update:     Sun 15 Mar 2026 09:00:43 +0000
Files and hashes:         1: 1pSJC06N2KwFbuJcYdGA9i6Uz70.roa (hash: 1Wkw53r6H28/yvkp4A/xsBcJ3W3ggfnnl0PpFBIprJY=)
                          2: 6ypYvWruLHwnduCjwA1yDgUF7iQ.roa (hash: vim8165CflcUEUPI7LyT6xVnJSwwiA/ZIHCcO7/ZyYY=)
                          3: WXEMaOaFXRYu5I1vij7KWtGaWy4.roa (hash: Bmbg+nTd8Sk24eSeeR56bOusRM0ye1c9iznMWMYGi8o=)
                          4: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: j1j2oFmzI0UqfPBJ2iOBPD252Rdd0yL/5kX48gMKRw4=)
                          5: eXtz9qlxcUXDY9qv_cOL7OrM1mg.roa (hash: mPvwGs5vghXg97JZBpfO6Y5/bAb5kwiLFDsCj8CY49c=)
                          6: olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa (hash: DvzOagp2lGIceeK3FkMPLVn9xoT8VD4iuom7PdIZAFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:eb:93:95:f5:42:23:4d:53:e9:85:87:dd:bb:79:d4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
        Validity
            Not Before: Mar 14 09:00:43 2026 GMT
            Not After : Mar 15 09:00:43 2026 GMT
        Subject: CN=9edb5ead6a317fe5f8f2f51b9170731dfb4c9b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:39:6c:dc:70:71:e9:26:84:ad:b0:5f:82:
                    a6:ac:db:34:e1:33:a5:2d:9d:31:86:cf:aa:e3:18:
                    c4:fa:d3:ce:d0:8c:48:a3:14:fa:b1:24:3d:6e:8e:
                    be:2c:13:23:f9:fb:67:fc:e0:10:a7:b1:ae:70:20:
                    21:48:20:ac:22:ad:fb:cb:f9:f8:6c:d5:17:b5:36:
                    54:21:58:41:4c:15:f4:fc:d8:d9:a8:40:c8:c7:c9:
                    71:06:be:3f:26:1d:a2:73:16:bc:7c:d5:71:13:20:
                    a4:17:35:dd:33:c2:a6:d2:06:aa:a6:4f:0c:fa:30:
                    cf:13:2e:c5:94:8a:e6:3f:54:92:87:39:11:32:9a:
                    72:05:2f:b7:51:06:62:fa:29:8c:5d:09:1a:38:2c:
                    5d:49:c3:35:59:f8:08:33:74:f6:d7:c9:64:d9:e0:
                    05:82:bc:77:87:ec:75:ef:fe:b1:11:fd:5b:85:85:
                    91:9e:77:cc:cf:85:16:64:ae:3a:db:7a:ff:07:c4:
                    d4:01:46:41:24:d9:c5:a1:64:93:72:17:7e:53:33:
                    eb:27:7b:f5:ce:51:a6:4a:e5:e8:6d:4d:dd:00:e5:
                    80:81:72:8b:60:d8:b2:6a:62:99:46:88:e9:f3:f9:
                    9f:8e:6d:1f:6b:eb:7b:e3:3d:ff:58:43:29:ff:48:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:5E:AD:6A:31:7F:E5:F8:F2:F5:1B:91:70:73:1D:FB:4C:9B:6F
            X509v3 Authority Key Identifier:
                keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:04:0a:5c:94:1b:86:99:2c:68:e0:d6:16:d4:ba:e3:eb:
         1c:30:da:9e:b6:1a:63:18:4d:20:6d:1b:a1:a8:eb:ca:02:49:
         2b:60:55:30:6c:d2:60:31:f1:34:52:92:27:c6:d1:b8:51:69:
         07:c9:28:6c:f3:a1:d9:33:11:9e:88:86:2c:d6:04:e0:0c:ff:
         f3:57:44:39:ea:a8:48:97:0a:c1:26:02:75:dd:67:00:6c:ad:
         ce:d9:df:7c:cc:9c:76:d0:64:16:d8:2d:02:86:09:ad:cd:b8:
         2b:61:b4:04:e7:e9:50:7c:52:ba:69:7e:bb:9f:61:88:e7:d5:
         aa:81:73:5c:8e:b5:76:15:1f:69:3f:43:5a:05:46:91:ae:a2:
         09:95:e4:f0:4f:4a:d8:fe:22:89:13:32:3f:db:a1:e9:48:4c:
         e7:01:d3:fb:a4:ed:7e:d7:62:fb:78:f2:09:c2:b0:a5:09:e6:
         5d:9c:a4:64:b5:97:47:be:03:d8:86:c2:c7:8e:79:46:86:b8:
         6a:39:47:f2:f2:34:48:6d:44:f1:df:42:1b:4d:b0:69:1c:b7:
         c2:c0:70:f5:c8:83:92:2a:fc:02:f8:d5:6d:8d:14:2b:b8:c3:
         4b:c9:23:0c:1f:6a:be:54:92:fa:49:d4:33:d2:82:26:67:ab:
         a7:e7:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:18:22 2026 by rpki-client