Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          SE6wYGzZJxkJERxEOEo/mJCC4Bkf3AkREMRI894l40s=
Subject key identifier:   2B:98:7D:AB:FB:DC:AB:3D:46:56:6E:C5:AB:51:15:88:91:3B:54:92
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       019CAE6C504D16B6D09B14D5E51B48F6E962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          1065
Signing time:             Mon 02 Mar 2026 12:00:59 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:59 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:59 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: ATu9gOOqV58u372xa4sOYx0OzoUqM/mQ+QyzjQcnf+Q=)
                          2: 9NC9VZWVXCDGXS-Gbz2sbEpud3w.roa (hash: ENTPA3eKA+o83CbO6DLdaT2bnskiGmTmI748T5YuAPs=)
                          3: E-bHCsYrW7SrEgoszTkYjWaBUl0.roa (hash: SQvcR4616bSFv3T1JdnviQPzodPyTLJ2qwgGIvoGyQQ=)
                          4: dx_EmdaCtCk3lPgY9GHpXyywHN4.roa (hash: A9UJpCPfL7hO2rNlUxE5iQopLk2eq6WPtVOcMxT85dU=)
                          5: jlFVDqu5eEvY4hcppuGoxG329Xk.roa (hash: sg7bhA6MrODM/82hHvHec0CZxFeKMYnKwUZdeRQd/VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:50:4d:16:b6:d0:9b:14:d5:e5:1b:48:f6:e9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Mar  2 12:00:59 2026 GMT
            Not After : Mar  3 12:00:59 2026 GMT
        Subject: CN=2b987dabfbdcab3d46566ec5ab511588913b5492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:94:a4:ef:0a:f8:2b:00:56:39:bb:fd:7e:
                    d8:4d:bd:09:26:5e:07:4d:5f:1b:b5:7f:15:5d:20:
                    f8:49:6b:28:f8:98:b4:80:e7:64:8a:c2:7d:07:82:
                    15:2a:d2:27:c9:bf:a1:2e:05:80:76:73:fb:94:e4:
                    b6:cf:87:2f:0d:4f:3a:4b:70:ea:47:71:b0:1d:23:
                    24:ab:92:9a:4d:91:1a:ff:b1:97:a8:8f:a6:8b:21:
                    8b:9d:6d:2e:87:e6:bb:2c:91:fa:a3:53:3f:6c:95:
                    30:3f:c5:b8:56:66:55:61:d0:e3:c5:e0:a2:f1:00:
                    bc:42:55:c2:ff:ee:07:7f:ad:e4:c4:ef:de:8b:f5:
                    e1:c9:22:ce:c9:5d:fd:5c:ae:54:07:e3:e7:86:bd:
                    3a:70:03:ef:77:ca:00:29:43:18:a9:31:7a:7b:77:
                    81:33:8b:7f:db:d9:a7:5f:4d:78:8b:42:e6:86:a3:
                    6f:a7:66:9e:49:11:09:6e:2f:73:fb:b0:be:6d:67:
                    00:88:5f:9c:14:66:cf:6a:6b:eb:11:d8:dc:92:d6:
                    06:3a:54:c6:e2:7c:d5:47:a7:da:58:ef:8c:69:b5:
                    d6:ee:87:7d:57:50:ba:8e:89:5d:f6:e6:20:8a:ac:
                    f9:f2:34:cc:09:f6:b0:ca:4f:bd:2f:b6:e4:06:ea:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:98:7D:AB:FB:DC:AB:3D:46:56:6E:C5:AB:51:15:88:91:3B:54:92
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:05:89:6f:68:e7:5f:ec:2d:45:5d:d8:5c:0b:b9:05:a4:73:
         16:6e:28:8a:f1:b8:c9:75:4e:72:f7:e6:91:eb:db:3a:77:29:
         4c:09:5f:19:8a:5a:11:d4:71:c0:65:c8:2f:e9:49:13:29:43:
         77:38:19:a5:b1:1d:b9:d0:8d:af:d2:e4:fe:91:0b:5e:c2:4f:
         67:a6:a7:f3:d8:a0:2d:df:90:6d:41:1e:24:2d:22:e8:14:6e:
         dc:2a:2b:c9:de:f8:43:5d:c1:63:b6:78:10:78:f0:e6:50:a7:
         71:f6:fb:ff:71:cc:1b:b4:f4:71:e9:24:84:55:22:71:8b:cc:
         5a:53:32:15:2e:68:41:92:2e:1a:a7:3f:bf:e7:ce:98:23:67:
         9d:0b:09:a1:e1:b2:ef:d2:ec:cd:f7:b8:b8:36:dd:71:58:38:
         e2:5f:ad:0b:9d:02:37:bc:66:38:ad:f2:d3:d6:9d:4e:3f:d2:
         9a:c7:55:64:1f:1a:cf:b7:e3:b0:ff:99:aa:05:a1:35:b3:a9:
         53:69:82:2e:3b:78:9d:f9:a3:07:64:4b:1c:91:19:7b:49:fb:
         b1:93:b1:5e:8f:20:0e:4c:e1:90:a3:7a:4f:9a:08:96:67:3a:
         20:e9:b2:e0:04:36:5e:6a:0d:30:03:03:09:98:42:02:5f:5e:
         e1:22:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:14 2026 by rpki-client