Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File:                     Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier:          hMIVBeIK04V63K2xrWtxpklyHMv29l0knwSTvv37WGY=
Subject key identifier:   FB:54:D6:34:21:61:AF:6E:94:E8:80:CC:EE:72:EC:FD:92:FB:78:EC
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer:       /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial:       019D2771C9CBA9067159198E156CBA7D6241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 00:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:01 +0000
Files and hashes:         1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: JS1dhOTt2bHcC3ICRA33GU9M2AhHj5Epjz1Cu/iFOb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:c9:cb:a9:06:71:59:19:8e:15:6c:ba:7d:62:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
        Validity
            Not Before: Mar 26 00:01:01 2026 GMT
            Not After : Mar 27 00:01:01 2026 GMT
        Subject: CN=fb54d6342161af6e94e880ccee72ecfd92fb78ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:bb:0d:5d:b6:f3:ed:2a:74:97:04:34:4f:
                    9f:d2:d3:c4:e8:4c:66:99:89:c4:fb:79:d2:ed:5d:
                    a4:a0:4f:90:a6:6c:a4:5d:ad:eb:0c:f9:f9:f5:a0:
                    7d:00:67:3e:29:41:a1:8f:fd:e8:34:aa:c0:cd:ea:
                    d9:a6:f3:7e:80:93:8b:b0:7f:ac:7b:2d:29:0f:50:
                    8b:10:80:cc:8a:29:54:71:f9:09:2d:9d:0b:34:4f:
                    f9:5d:32:c2:65:5e:56:32:22:66:7f:79:66:63:d1:
                    11:63:f0:4d:aa:38:9f:f0:f6:1c:27:68:32:ba:3a:
                    f8:4e:a3:98:91:ba:b8:1e:a8:f4:29:cb:7d:ba:67:
                    7c:2c:2e:12:37:c0:14:6d:e1:2c:f5:d2:bc:67:0b:
                    71:46:8d:39:a4:3b:e0:06:70:a3:c9:83:85:1b:e9:
                    8e:24:b0:53:55:31:04:0e:1c:d3:2a:20:96:3a:92:
                    69:23:b8:26:44:b6:8c:86:27:4e:0d:dd:d6:44:3e:
                    38:c0:69:c9:9b:ce:ed:36:c6:45:83:76:0c:d3:33:
                    09:6f:a5:53:95:ff:e4:40:eb:d7:62:40:b4:d5:36:
                    ed:eb:e6:78:a0:4a:6e:d7:d1:10:34:d3:7d:4f:16:
                    2e:29:0c:2f:eb:cf:87:e2:0f:6e:51:8d:8c:7f:02:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:54:D6:34:21:61:AF:6E:94:E8:80:CC:EE:72:EC:FD:92:FB:78:EC
            X509v3 Authority Key Identifier:
                keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:89:84:93:63:bc:6f:70:81:7f:e9:0a:d5:e3:7d:fd:9f:bf:
         5e:9b:1f:15:7d:ab:c8:2a:b9:34:16:06:f2:69:f9:38:d8:29:
         1d:a1:58:91:69:8a:2c:90:eb:14:c4:80:c0:1e:07:5f:76:d0:
         8e:5e:71:8e:ba:9e:30:cb:12:16:e9:04:4e:33:ac:8b:aa:11:
         8f:6b:5f:6f:95:80:99:17:c1:e7:0a:5c:16:95:ec:c6:c1:a2:
         3e:c0:02:86:b4:a9:12:76:48:89:f7:18:31:93:05:f2:6e:1f:
         27:11:2b:71:90:7a:a1:25:ed:85:37:ae:5a:24:4b:5c:43:7d:
         09:bf:e8:ce:c0:b6:6e:fe:03:ec:07:9f:98:94:4c:50:46:e1:
         8e:08:dd:60:f6:97:ee:5c:c4:2c:9a:86:de:f7:01:e6:49:4b:
         2f:89:bf:f8:c3:49:fd:62:ca:8f:8a:31:94:51:b7:b0:7c:43:
         c4:2d:18:da:6a:80:0f:32:06:c8:1b:10:2c:48:5a:8b:f6:59:
         01:ed:35:91:2c:45:8b:0c:ee:e8:5e:45:e5:7a:c6:bf:eb:b1:
         97:9e:33:a8:bb:85:e2:8e:9d:e7:fe:e0:05:0e:e9:6f:08:b7:
         81:6e:1a:8d:05:48:d2:0f:e0:73:4d:b4:a8:cc:1f:c0:07:43:
         19:9c:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:57 2026 by rpki-client