Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File:                     ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier:          bTAeIG5M/ITxYAPK3QRE+8F4l/yHPZlj9UY35G0nT/I=
Subject key identifier:   69:0F:16:4F:EE:B0:CF:6B:92:00:96:22:FE:58:01:25:44:84:C2:F4
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer:       /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial:       019D28163B333B9C3EB5AF144A44640ED4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number:          156D
Signing time:             Thu 26 Mar 2026 03:00:38 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:38 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:38 +0000
Files and hashes:         1: IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa (hash: K/zCH1QmxaSRuaMT9yqorVTWzzo7aNiaeZwocJbG5QI=)
                          2: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: Mueg6oCWwh0dmEOQ02s20Y9po85j+ookcUI78Wey7z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:3b:33:3b:9c:3e:b5:af:14:4a:44:64:0e:d4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
        Validity
            Not Before: Mar 26 03:00:38 2026 GMT
            Not After : Mar 27 03:00:38 2026 GMT
        Subject: CN=690f164feeb0cf6b92009622fe5801254484c2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:aa:f4:7d:20:49:0c:b1:8b:50:dc:7a:1b:
                    17:03:ec:64:b8:2a:14:14:a1:0e:db:48:31:60:3c:
                    92:f2:39:ba:7a:a1:eb:ab:0a:bf:50:cf:fa:5a:37:
                    6f:2f:ed:5d:9c:f4:d2:75:29:c0:dc:e1:fe:f9:9e:
                    cc:ad:3e:a8:5e:63:10:9b:74:15:a4:69:28:78:4d:
                    8c:a2:c8:76:c9:2e:be:0d:f5:f7:c4:74:cd:05:56:
                    44:02:82:57:50:ab:eb:f7:bb:3a:27:60:1d:80:b1:
                    3f:48:7e:45:35:0a:64:eb:ee:c7:41:0c:f1:4f:fd:
                    c3:a1:54:67:eb:fa:ec:0d:74:0e:93:9c:c9:24:82:
                    5b:0a:56:29:88:4d:b2:09:46:9a:4e:ef:0e:ac:35:
                    7c:ba:96:ed:4a:3f:a7:d4:98:5e:c6:ef:0f:dc:68:
                    55:ee:ad:0a:ad:41:46:a2:38:fc:55:7d:4e:e5:d3:
                    46:6f:f3:4d:5f:fb:88:aa:ce:cb:66:36:0c:18:da:
                    10:4b:31:5d:28:70:bb:d4:f1:24:4f:a5:b8:32:53:
                    dd:80:0d:71:d8:da:e3:b6:3e:18:05:9b:d1:cc:9d:
                    19:ee:bc:24:c7:d6:d5:27:54:ce:e2:ea:b3:cf:75:
                    66:2d:c2:6f:4c:a7:d4:83:2c:52:25:b0:db:dd:16:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0F:16:4F:EE:B0:CF:6B:92:00:96:22:FE:58:01:25:44:84:C2:F4
            X509v3 Authority Key Identifier:
                keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:22:2c:6b:38:fb:8e:a1:82:87:d4:e0:01:ee:ec:47:9b:99:
         82:1a:a5:4a:09:c8:0c:b2:38:b7:fe:60:13:39:9f:ce:45:a0:
         22:aa:05:fc:ae:52:43:62:f8:54:99:4e:40:dc:ed:70:9a:80:
         54:ff:b9:f8:9f:e5:88:5b:07:de:27:e5:4e:d6:3c:c1:65:f4:
         2b:f8:e3:44:0c:4b:89:90:8c:8a:38:ed:78:ee:c4:10:0f:74:
         3b:ec:ba:37:bd:ed:9c:cc:e6:0d:7b:a4:c7:a7:98:ec:08:e4:
         31:b2:06:ec:74:52:ef:ca:15:01:9b:3b:0f:75:c9:90:7c:c2:
         17:2d:46:77:b1:bd:1b:51:d1:8e:f0:b9:aa:c0:a7:c6:04:8b:
         b0:b6:d5:aa:b2:e7:0a:d8:99:15:c7:6f:56:cb:fa:1e:77:ec:
         96:2d:6d:93:d8:39:b2:0f:67:21:c1:ca:52:0f:d9:b6:a5:ce:
         3b:0b:ec:f0:cd:7b:d7:77:16:af:48:6c:f2:88:73:3c:28:fa:
         23:e0:35:28:0c:a0:c5:45:18:bb:5d:ad:8a:e1:a7:13:ff:f3:
         a5:20:f7:1d:98:67:64:93:4e:00:60:49:4c:f6:be:e5:4d:c3:
         d1:ec:b9:00:d6:c3:1b:4c:bb:f5:95:64:93:01:1f:eb:f3:45:
         1e:2e:3d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:08 2026 by rpki-client