Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          90SSepg13/R0StKdJz3K3/p6Ay+bmTenhGLFXrY2uLU=
Subject key identifier:   F5:4C:B4:C4:EB:4D:F8:98:68:94:E9:7F:16:66:E0:C6:96:DD:74:FE
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       019CABD8FA626C23CB3E8B702740EE82A7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          1456
Signing time:             Mon 02 Mar 2026 00:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:49 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: EEV/qcMtrv6YWjHxsilN/aFLkVOzhNSoN14a/C/oiWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:fa:62:6c:23:cb:3e:8b:70:27:40:ee:82:a7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Mar  2 00:00:49 2026 GMT
            Not After : Mar  3 00:00:49 2026 GMT
        Subject: CN=f54cb4c4eb4df8986894e97f1666e0c696dd74fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:f2:d0:7f:fe:93:5f:95:7a:8b:4d:48:93:
                    a9:58:41:36:2a:ca:d1:35:ef:be:aa:1d:eb:1e:7d:
                    30:60:a9:af:1d:d1:6e:88:02:26:5e:79:d0:cd:9d:
                    0d:19:9d:5d:b2:ce:8e:e1:d6:fb:7b:eb:d4:a1:4f:
                    b8:85:8a:d3:47:89:1f:e7:93:e2:ab:5b:fb:08:fc:
                    cf:11:8b:dc:d4:55:96:51:e7:3a:52:4c:46:e6:df:
                    46:81:5c:08:53:30:bc:f6:26:a7:3f:61:b0:08:39:
                    70:49:87:bb:80:e5:72:e8:41:9b:63:3f:ab:5d:89:
                    2f:b9:35:75:26:37:13:50:8b:43:74:80:67:63:0d:
                    2d:2f:00:3a:26:a9:55:56:da:fe:40:a2:50:e3:e6:
                    15:52:ca:2f:d7:fa:cf:2d:87:6c:80:8f:e5:6c:df:
                    d7:0c:84:5d:5b:50:a0:cd:96:6b:87:d9:71:99:a0:
                    b4:86:99:be:a5:70:d2:50:cf:f5:78:fc:89:f8:9a:
                    7d:e4:4c:90:43:fd:1a:81:42:1e:01:d0:db:97:a9:
                    fe:50:f7:d8:78:06:a0:39:a6:c4:85:75:12:bb:25:
                    07:27:65:73:a7:7d:ff:ce:44:0c:3a:39:93:f6:26:
                    ba:53:a4:94:41:6a:17:ca:35:6b:71:4b:17:78:3d:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:B4:C4:EB:4D:F8:98:68:94:E9:7F:16:66:E0:C6:96:DD:74:FE
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:ee:62:f4:96:5c:e0:c1:18:37:75:b7:bf:14:a1:0a:61:
         7a:12:f5:53:0a:23:55:53:8f:9a:ad:11:c4:7c:19:b6:5a:ae:
         4c:c0:7d:b9:27:63:c1:27:75:e2:96:d6:62:8f:8a:9c:58:50:
         17:c9:46:92:38:7d:99:c7:8d:1b:53:2f:1a:46:aa:0f:39:ba:
         78:ce:60:5e:c2:c9:3e:dd:43:09:ef:da:3f:e4:6d:d2:f4:e1:
         20:9d:6b:16:a1:60:1d:96:2d:e2:e8:8f:55:51:36:91:39:95:
         4b:8c:17:f4:a7:7a:c0:56:7c:fe:0f:f6:7a:e8:d8:98:5c:43:
         2e:54:16:c6:c0:13:07:6e:89:5b:3d:28:0e:7f:dc:ed:eb:40:
         ea:f5:c7:ff:e4:80:28:55:2b:e0:22:ad:c3:28:32:e3:82:22:
         1c:39:ec:9f:de:83:db:39:c0:59:c3:17:3f:1e:d0:fc:5f:13:
         34:3e:e9:5d:c9:ac:d2:ac:87:80:a1:ca:5c:35:b1:f9:b2:af:
         f4:d7:b2:c7:3b:62:21:e9:e9:f3:19:df:89:17:fa:eb:77:15:
         d0:a9:70:6e:ec:d0:9c:f9:1b:b0:8b:b1:de:5d:66:49:46:3f:
         2d:ff:f5:cf:a2:d5:18:b5:8a:2f:af:8d:75:35:1e:e9:33:32:
         6c:1c:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:33 2026 by rpki-client