Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          cUBYK5pPWKjlZH71ltsoCwgZjG3ZGVP73Dw93W7x1+Q=
Subject key identifier:   93:24:39:32:C0:CE:12:33:37:C2:D8:3F:63:D0:DB:0E:99:9A:74:D1
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       019D2703C3991F9CFEEF9E5826C45FB3AB5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          107B
Signing time:             Wed 25 Mar 2026 22:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:51 +0000
Files and hashes:         1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=)
                          2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=)
                          3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=)
                          4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: vXAVLdnjIlf4x0YyxYIxpa5upBWLrPmeDY3vGaEtQTA=)
                          5: wK1thNBNOi3cJ4C_cLUUCpyCeDg.roa (hash: SYmUDWSPEMPAWWeOzzPct/i4L2oBAFG5xQ9Zk5i1914=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c3:99:1f:9c:fe:ef:9e:58:26:c4:5f:b3:ab:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Mar 25 22:00:51 2026 GMT
            Not After : Mar 26 22:00:51 2026 GMT
        Subject: CN=93243932c0ce123337c2d83f63d0db0e999a74d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:ea:cd:c9:7b:70:fa:e1:39:40:32:26:ea:
                    3b:0c:03:96:a2:3e:fe:ed:e4:cf:6f:49:1b:c2:fe:
                    19:3a:89:e3:31:1b:7e:29:17:7f:4e:7e:b1:bc:f6:
                    ce:98:f6:eb:99:9e:e6:6f:c9:74:0b:b5:ae:f8:d0:
                    eb:e2:47:65:71:10:76:16:b9:a9:3e:8c:60:a9:e3:
                    85:3d:90:9a:42:00:3f:cb:b6:ff:e2:f6:00:5e:55:
                    b9:4c:da:56:1e:00:6e:44:65:74:bb:2e:ce:b9:32:
                    ce:e7:a0:ae:cf:dd:30:4c:92:8f:2f:14:76:d4:49:
                    ac:9a:dc:b2:fc:05:18:b3:63:02:a6:67:d4:7c:46:
                    68:21:79:39:fd:7d:9d:18:23:4f:e5:86:78:08:69:
                    12:ac:20:07:6c:ec:8d:60:dc:e3:94:02:e3:00:12:
                    04:9c:57:4b:d3:27:02:e0:14:7b:dd:01:02:fd:49:
                    b9:46:cd:fd:69:26:c2:5a:24:1b:c0:2d:42:d8:96:
                    e3:65:27:ea:3f:c7:81:cd:c6:52:30:aa:01:8a:a1:
                    b8:98:f5:df:6d:8c:04:9c:e9:58:2f:d6:20:74:85:
                    df:b8:6f:e0:16:b2:ff:e1:c6:10:ed:f0:19:cd:6b:
                    bb:4d:25:7e:8e:49:42:7f:e6:be:52:67:46:b0:4a:
                    ba:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:24:39:32:C0:CE:12:33:37:C2:D8:3F:63:D0:DB:0E:99:9A:74:D1
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:15:a6:af:7c:ed:54:c6:82:09:df:00:ae:c8:e5:84:36:
         44:63:8c:4c:a6:05:18:e4:37:ea:1b:43:dc:3d:b8:c8:fc:ec:
         96:ac:56:7f:88:05:59:86:9e:af:fd:34:4d:1f:5e:13:09:a9:
         df:3c:f8:3d:1a:5e:f1:f6:38:3c:30:5d:aa:86:29:49:90:53:
         d8:0e:83:31:cc:b8:e1:d6:94:a6:47:91:b4:76:10:4d:8a:9d:
         e5:90:68:24:f4:22:9e:7f:d6:d9:c5:0c:e7:56:ad:ee:6b:d3:
         22:21:a2:f1:9b:34:9f:70:e7:57:ac:ab:bf:b5:bb:42:89:7b:
         89:ae:9a:e3:15:0c:8b:33:5c:cd:43:da:2d:6c:60:f4:7e:77:
         4d:e8:ee:c8:42:5d:4c:f8:6c:47:51:74:90:8a:a4:27:99:04:
         be:ec:67:e3:73:54:d9:e5:64:d8:9f:38:aa:08:c3:b8:4f:e1:
         29:85:94:2a:25:98:94:92:36:ff:5a:ec:ff:df:b1:45:63:55:
         8a:58:0c:28:9f:37:fc:b4:a2:66:3e:21:38:24:fb:d7:b0:ee:
         c9:de:06:87:e7:91:b7:18:fb:c3:13:0d:d9:40:cb:f2:82:33:
         23:40:48:2a:df:e9:48:93:1d:12:b2:6a:a7:b5:e7:e1:06:35:
         8f:fc:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:16 2026 by rpki-client