Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          Y8nj2kmndt3ajAp8AaHFh8tzTJZTBVxeQuKsdI37Oi8=
Subject key identifier:   E0:7A:C9:04:80:97:8D:BB:04:2E:18:51:54:88:6E:FA:E0:E4:B2:27
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019CABD98F97F8F32D2DCF920905DDD18235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0FA2
Signing time:             Mon 02 Mar 2026 00:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:27 +0000
Files and hashes:         1: iBJ31yh-XKNto6qwkr_lk9nm8Ik.roa (hash: YPdFv2hCP/PkOD/9i/Bu7OVfZju2bdOQgcBdgpKIrw0=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: N/lpBXzFBw1qGru+G1n89zsDBexdhNWLqlUO797mofE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:8f:97:f8:f3:2d:2d:cf:92:09:05:dd:d1:82:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Mar  2 00:01:27 2026 GMT
            Not After : Mar  3 00:01:27 2026 GMT
        Subject: CN=e07ac90480978dbb042e185154886efae0e4b227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:f1:41:cd:00:2e:e2:ca:19:64:e5:cf:20:
                    03:01:cc:3c:44:b1:29:40:14:9f:45:f1:cf:31:f2:
                    62:77:4d:7b:d7:b7:b2:da:ca:41:89:c8:38:9a:aa:
                    e5:42:41:0c:a2:b5:1a:e7:0e:eb:06:bb:32:49:c1:
                    30:86:7a:95:40:17:11:e1:6e:81:9d:d1:72:24:90:
                    05:53:19:00:df:7c:c6:67:a0:b3:47:70:86:bd:13:
                    00:80:09:46:32:ef:c0:4e:3d:55:ca:78:9e:4b:6b:
                    d5:70:75:53:32:d4:dc:2c:45:e1:70:c5:2d:82:d7:
                    06:d9:4e:c1:e4:3e:bc:ae:b9:e1:d6:8d:37:bd:e2:
                    0c:12:03:40:d8:98:5e:6e:4d:45:c2:45:13:13:82:
                    72:3c:f7:29:55:81:01:b6:94:66:54:18:76:9b:51:
                    b2:05:16:56:f1:00:aa:b9:ed:38:37:8e:b8:66:27:
                    57:91:f6:19:da:a1:27:f6:60:96:8e:d3:da:ae:f6:
                    51:a9:ac:f8:2d:b4:3d:3b:24:a1:4c:38:02:22:d2:
                    9f:20:4f:27:04:89:94:90:10:83:4b:cc:9e:59:50:
                    db:fa:2c:70:fb:f8:d7:47:04:b5:75:fc:60:c1:e6:
                    89:be:c5:98:55:2f:1b:05:51:c9:f2:79:81:e2:22:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7A:C9:04:80:97:8D:BB:04:2E:18:51:54:88:6E:FA:E0:E4:B2:27
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:c6:06:db:15:44:d0:2b:20:1f:2b:ec:01:db:1c:80:90:
         24:47:60:f9:0b:6f:d8:c9:95:e1:5f:b4:cd:d3:3e:88:11:f9:
         4b:57:9a:60:1a:d7:fd:bd:9a:33:77:ef:08:df:1d:2e:60:e7:
         56:0b:ce:ff:9a:ad:83:5d:08:1b:a2:b0:d7:ff:2b:93:2a:8c:
         4b:87:be:c6:51:49:32:3b:b8:40:b0:ea:e2:c5:88:87:33:e1:
         9e:da:0f:77:ed:01:aa:6b:ca:aa:0a:ac:c8:66:e6:0c:fc:e2:
         d0:ab:1c:d8:27:1a:f1:53:30:1d:dc:04:32:2a:cd:6b:e1:1a:
         b1:86:23:ae:83:0e:71:24:ce:54:70:bb:8e:1a:bc:50:9c:c7:
         cf:51:f0:f9:84:ff:b4:86:52:74:9b:f7:7f:4a:ac:10:71:1f:
         04:56:7d:0c:c1:f8:de:1f:1f:41:11:db:55:9c:cd:2e:1c:3f:
         cc:83:bf:ed:53:b5:23:84:88:f9:39:79:e5:9a:b4:b8:03:4f:
         d1:24:d7:55:4b:45:8c:26:0c:69:e4:4a:c9:90:c3:ed:1b:3a:
         ac:c1:aa:ae:fe:f5:91:4c:72:e6:84:b7:18:fe:a8:a8:14:40:
         c0:ff:66:71:6e:0e:d6:7b:9d:67:89:c6:79:24:57:fa:2d:57:
         bd:c9:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:43 2026 by rpki-client