Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File:                     m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier:          vqd1/3YPwakMoF6X6uvZ/ETfwvPyfVxJ9l0/t8GBy6Q=
Subject key identifier:   68:47:96:C9:DF:19:89:5E:E5:A4:6A:B8:C0:AB:ED:88:59:B2:F9:82
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       019CAAC65A364D5A7FA52F4729396E8215BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number:          1481
Signing time:             Sun 01 Mar 2026 19:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:51 +0000
Files and hashes:         1: 61nXLWiLNthRTvWX64Fv7Aiwf_E.roa (hash: C6Ewv4dAXXufstpmAXr9+tKYxI6LwFVuw358jAoTr6Q=)
                          2: H0bioT9sTUbmhbBMCEJa7Y2xXtE.roa (hash: r97ApaF6RiLlIffqieVuHrnbD6MO9Ow6tAs1USkQaqw=)
                          3: QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa (hash: CRz3lsPjoW3JZTtpME0HEZ/likjgfqyzP+ZOWT4Oi2k=)
                          4: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: DeC9NhFe/LnvZFnzo8py64JtAZn6oK+sRpEBXiy6+Pk=)
                          5: z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa (hash: HhotdTCLEhBn/XmQ52b2JJFeeMZwYQqW5x7lcVcO9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:5a:36:4d:5a:7f:a5:2f:47:29:39:6e:82:15:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Mar  1 19:00:51 2026 GMT
            Not After : Mar  2 19:00:51 2026 GMT
        Subject: CN=684796c9df19895ee5a46ab8c0abed8859b2f982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:4c:a0:69:97:b7:83:37:56:26:45:09:30:
                    5a:8a:74:54:40:89:64:a2:a1:c5:13:2d:16:71:0d:
                    e9:05:33:8d:fc:19:4f:5f:82:ee:ea:62:99:0c:8c:
                    e6:fc:9f:09:69:b6:f6:e2:d6:5a:02:ad:62:bb:20:
                    ee:61:84:2c:9d:e1:4b:50:fc:64:be:81:f9:6f:d1:
                    31:75:0c:b3:04:f3:ee:4b:52:0b:24:ff:d3:78:34:
                    f2:cc:4e:c5:1b:5e:c4:3f:ea:e1:00:f2:40:87:02:
                    76:0c:f7:48:1b:6b:34:15:fb:a4:fe:51:0a:5a:53:
                    66:92:14:f7:02:ac:da:b7:45:56:0f:4a:af:82:78:
                    2a:cb:1c:20:ad:f6:c5:a2:55:c1:0a:48:9d:6d:23:
                    1c:b8:cd:21:a2:ca:2d:23:c3:b4:4f:0c:4a:72:b5:
                    5b:b1:25:31:4f:3c:eb:7e:87:aa:e3:78:66:e7:9b:
                    00:b7:da:76:05:45:f4:b0:55:1d:d0:52:a8:45:dc:
                    90:a7:a9:86:32:b9:39:84:64:70:7a:2a:aa:83:fd:
                    22:aa:0a:e2:76:fb:ed:e7:0e:e4:3a:80:27:05:2d:
                    07:23:7f:84:24:0f:d9:b1:4f:6d:32:78:b4:2a:5c:
                    3e:8e:f1:33:e4:3c:6d:61:88:15:9e:ca:53:11:81:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:47:96:C9:DF:19:89:5E:E5:A4:6A:B8:C0:AB:ED:88:59:B2:F9:82
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b2:94:be:55:16:f8:e9:50:03:b9:95:fd:bd:21:24:ef:77:
         e1:08:44:91:f1:ec:88:1a:9c:c4:c8:10:33:fb:42:4f:3c:a6:
         67:e4:15:ef:17:17:69:74:e2:f4:c5:35:0d:4e:38:46:cf:80:
         c0:af:e8:84:2e:13:07:ad:bc:91:a3:69:78:b4:e7:15:6d:72:
         f5:f7:38:6f:f0:72:43:ca:4b:22:b1:cc:54:57:ed:b5:c2:40:
         6a:b1:fd:25:0e:60:fe:4d:df:6f:a5:40:2f:41:4e:fc:53:f8:
         75:a1:d9:be:0f:1a:f5:77:00:c8:a1:92:ed:75:0a:e1:5c:58:
         88:09:e6:13:f2:ef:48:97:92:a8:7d:30:94:65:42:f4:ff:51:
         7f:cc:7c:9e:f1:8b:66:60:db:db:52:cb:08:5f:d6:ab:d8:42:
         be:30:c8:64:e1:c3:a6:b5:22:0d:ae:1c:89:04:87:c6:fe:88:
         38:ec:54:11:1b:70:96:e9:49:9f:49:22:48:82:cd:2e:19:c2:
         5b:e3:7a:72:3d:93:0a:6e:42:b6:56:da:15:a6:a7:23:60:07:
         73:da:3f:63:1f:13:b0:ee:7c:ea:3c:d2:a1:d0:fe:74:0d:ca:
         2d:01:f3:ca:19:d2:66:cf:b6:33:83:8b:f9:5c:6a:2a:d6:9e:
         b5:41:17:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxlo2TVp/pS9HKTlughW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5
NzMzOTAwHhcNMjYwMzAxMTkwMDUxWhcNMjYwMzAyMTkwMDUxWjAzMTEwLwYDVQQD
Eyg2ODQ3OTZjOWRmMTk4OTVlZTVhNDZhYjhjMGFiZWQ4ODU5YjJmOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/FMoGmXt4M3ViZFCTBainRUQIlk
oqHFEy0WcQ3pBTON/BlPX4Lu6mKZDIzm/J8Jabb24tZaAq1iuyDuYYQsneFLUPxk
voH5b9ExdQyzBPPuS1ILJP/TeDTyzE7FG17EP+rhAPJAhwJ2DPdIG2s0Ffuk/lEK
WlNmkhT3Aqzat0VWD0qvgngqyxwgrfbFolXBCkidbSMcuM0hosotI8O0TwxKcrVb
sSUxTzzrfoeq43hm55sAt9p2BUX0sFUd0FKoRdyQp6mGMrk5hGRweiqqg/0iqgri
dvvt5w7kOoAnBS0HI3+EJA/ZsU9tMni0Klw+jvEz5DxtYYgVnspTEYH2eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhHlsnfGYle5aRquMCr7YhZsvmCMB8GA1UdIwQY
MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt
YWU5OTllZDdjNWQ0LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0
LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7KUvlUW
+OlQA7mV/b0hJO934QhEkfHsiBqcxMgQM/tCTzymZ+QV7xcXaXTi9MU1DU44Rs+A
wK/ohC4TB628kaNpeLTnFW1y9fc4b/ByQ8pLIrHMVFfttcJAarH9JQ5g/k3fb6VA
L0FO/FP4daHZvg8a9XcAyKGS7XUK4VxYiAnmE/LvSJeSqH0wlGVC9P9Rf8x8nvGL
ZmDb21LLCF/Wq9hCvjDIZOHDprUiDa4ciQSHxv6IOOxUERtwlulJn0kiSILNLhnC
W+N6cj2TCm5CtlbaFaanI2AHc9o/Yx8TsO586jzSodD+dA3KLQHzyhnSZs+2M4OL
+VxqKtaetUEXow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:34 2026 by rpki-client