Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          nN0kfFQOSAufklBKtGouVG4l8rddY7LuAenKswQuOZE=
Subject key identifier:   44:F9:7B:92:91:B3:83:4F:D3:2B:E5:A6:05:23:F3:20:38:59:D3:FB
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019C9BF8B1920F2460481FF541333AFC747E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          0678
Signing time:             Thu 26 Feb 2026 22:01:32 +0000
Manifest this update:     Thu 26 Feb 2026 22:01:32 +0000
Manifest next update:     Fri 27 Feb 2026 22:01:32 +0000
Files and hashes:         1: GOVhumxEPoL4neQZjjckJeN-KNI.roa (hash: z0Kl7cRQ4EqgIEyAr3hQ9onG9NvsLkz7qIrC+ywOwnQ=)
                          2: JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa (hash: mtH7HEjcUoSWBPqGTrN+mDrgbsMUT6MnlsAyD0vzcjQ=)
                          3: MvgVDAqPSE3okj5m3PcFfzXBk1w.roa (hash: WTJgxLOGGaH3LR8ATwMwf+dORKDlRpVth28vAu1Woxg=)
                          4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: TuTSJ4jDU1QWTkQIecFblD7e/g/S9c0kSW6JOTlsX/Y=)
                          5: qtFDXfqFUBLJDQBHvKu-Ftisy3I.roa (hash: qvGoNoCRQntmYEg+0c4U7acM5ZfQZI3DoYIhNNGSNp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 22:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9b:f8:b1:92:0f:24:60:48:1f:f5:41:33:3a:fc:74:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Feb 26 22:01:32 2026 GMT
            Not After : Feb 27 22:01:32 2026 GMT
        Subject: CN=44f97b9291b3834fd32be5a60523f3203859d3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:45:b0:d6:ab:9a:c4:a3:95:89:f7:8a:83:
                    1c:cf:0c:30:ea:ff:89:c7:40:83:03:cd:99:99:ca:
                    fd:c9:d1:64:f5:21:e9:eb:98:84:9d:06:7c:96:25:
                    33:50:70:fe:43:f9:5c:da:21:2d:99:6c:95:81:a6:
                    f0:1e:6d:7b:59:7e:2c:37:fc:de:b3:81:d0:4e:7b:
                    f2:8e:95:33:9c:85:1b:26:70:54:6b:4a:10:4c:2a:
                    f8:21:4a:97:bf:cb:90:1f:47:0e:72:ac:02:f4:6d:
                    c2:e0:06:20:07:a0:3a:17:f3:62:a3:e0:e3:99:dd:
                    7a:fa:d7:25:dc:16:f4:9c:d0:b1:21:5d:7b:12:51:
                    5d:6f:f5:6d:b1:db:a9:d7:16:3f:fc:33:5c:85:76:
                    af:1e:ed:95:46:7b:cf:8b:65:c3:37:2b:68:59:46:
                    54:66:ea:55:ef:15:8a:fa:9c:41:61:d5:37:75:6a:
                    f7:b1:c1:ca:a1:6c:3b:7b:61:e4:b6:be:8f:7e:35:
                    1e:ad:86:36:4f:5a:4c:f9:4c:77:77:2c:a1:bb:ed:
                    be:d0:17:66:e4:35:cc:79:ad:70:69:52:58:89:47:
                    f6:9e:55:64:4a:31:50:a8:22:42:0e:ba:36:e8:b8:
                    54:3f:e1:19:5b:cb:68:b9:92:2d:2b:89:ed:8c:28:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:7B:92:91:B3:83:4F:D3:2B:E5:A6:05:23:F3:20:38:59:D3:FB
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:14:e3:84:ef:80:0a:03:45:93:26:04:8b:0d:72:22:64:b3:
         d2:36:6d:5d:f6:40:a2:44:95:3d:a2:bb:25:80:26:ea:a4:ca:
         4f:ed:e7:4c:73:6f:ab:53:fc:08:74:bb:9d:8e:8b:ae:f8:44:
         35:fc:a3:6e:aa:d8:5c:2a:b3:5d:9e:c5:5b:5d:66:0d:4f:f6:
         6b:5a:d8:6c:5c:cc:c5:00:04:3e:6e:18:f7:e6:de:4f:09:b8:
         67:ec:81:f9:8f:f2:c7:16:77:f3:06:16:bd:74:75:70:d2:08:
         f2:13:ba:f2:67:3a:af:d4:bd:c0:a7:bd:88:b3:6a:cb:6a:f4:
         72:af:17:f2:c8:c2:da:35:fd:1c:ea:6a:24:66:8e:9a:b1:52:
         7e:b0:ef:6e:a4:fd:99:97:bd:eb:f1:5c:6f:3b:03:a4:aa:75:
         06:2d:e1:89:0a:c5:16:5f:f7:b5:5c:ab:67:22:2d:eb:9b:52:
         29:e3:d5:a2:28:87:ff:14:59:fe:54:67:1b:2c:0e:c0:46:ed:
         99:7c:e4:d1:ca:d0:0c:8b:50:c7:d0:39:90:12:0c:ad:4f:d5:
         c6:50:13:52:52:1f:6f:68:7d:4c:60:88:85:1c:3d:5f:e0:3b:
         18:e6:87:a7:bc:cb:d5:26:f2:9c:e4:1b:f1:72:77:fd:4d:e3:
         eb:6a:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 03:26:39 2026 by rpki-client