Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File:                     n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier:          2xSTrvSTIL4XcsHBSwP5PjvLd5jLXKvYPmRbD3gd4nY=
Subject key identifier:   83:D4:2E:F9:F8:0E:D5:F6:4C:55:96:09:21:46:C2:D5:87:CA:58:D5
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer:       /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial:       019CAE6C6E9FAF625BDB072605812FF5F98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number:          07D0
Signing time:             Mon 02 Mar 2026 12:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 12:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 12:01:07 +0000
Files and hashes:         1: IVyr9TDbDX_pP70HeSId022KL1g.roa (hash: fpC1adTUWc8ZZMx++n/r65zHb13GStL3YQc2TtjYHOc=)
                          2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: 3GVxT0w+59sl+1xLDCs5933jpaJ8YfgVq+mS2pfmtKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:6e:9f:af:62:5b:db:07:26:05:81:2f:f5:f9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
        Validity
            Not Before: Mar  2 12:01:07 2026 GMT
            Not After : Mar  3 12:01:07 2026 GMT
        Subject: CN=83d42ef9f80ed5f64c5596092146c2d587ca58d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:73:90:fd:12:ce:e9:e3:93:ba:3d:48:d0:
                    db:23:e1:ec:c7:aa:88:e4:11:e8:8f:db:09:19:2a:
                    0d:aa:80:36:74:16:44:fe:99:d6:1f:d5:37:3b:22:
                    35:7d:b0:ee:90:71:f2:8e:d2:66:15:73:5a:c7:76:
                    6d:ba:70:40:d8:e6:63:b9:32:32:b1:a0:c5:a5:83:
                    c1:cc:3e:f3:c1:69:9c:4d:8c:df:9f:60:db:c5:60:
                    39:96:97:76:88:8b:6e:b9:4a:36:1a:da:37:76:dc:
                    44:0d:30:68:ae:b3:57:85:d6:aa:ee:a6:a9:44:d6:
                    56:b2:3b:bf:a7:a8:0f:47:1d:46:58:f2:1a:ba:e3:
                    ca:74:d9:ca:e6:e5:5e:2e:ce:6e:36:06:99:a7:86:
                    b0:8c:d5:b3:79:6a:2b:cb:00:74:dd:5b:06:ab:bd:
                    c4:12:e7:63:80:93:96:eb:e7:3a:ba:41:4f:dc:70:
                    96:82:b2:1e:d9:37:52:3b:64:14:13:f0:53:8c:9d:
                    62:bc:3b:31:8f:2d:5d:09:8b:47:d5:9b:c5:a2:dc:
                    6c:00:64:92:fe:85:ae:bf:5d:3b:9b:bf:d6:51:77:
                    65:2c:1e:1a:3e:3c:d6:6c:47:a3:03:5e:0b:44:3c:
                    23:99:51:cf:7c:a9:91:e3:e3:34:7e:2d:44:78:8d:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D4:2E:F9:F8:0E:D5:F6:4C:55:96:09:21:46:C2:D5:87:CA:58:D5
            X509v3 Authority Key Identifier:
                keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7f:c7:58:c0:18:f0:06:85:5e:38:54:7d:ea:63:fd:c6:b6:
         3e:c6:61:74:f4:fb:f8:7e:ce:56:99:3d:07:66:0e:2a:f2:c5:
         7c:ef:f5:f9:a2:1a:0a:fc:f3:e1:56:d7:8c:36:43:2c:3f:88:
         83:71:ed:2a:1c:de:b0:41:27:20:a1:1c:93:3c:6f:3f:dd:51:
         62:c6:35:88:ed:d0:34:b4:45:cb:72:2b:c0:f7:3a:49:d1:18:
         ca:8f:42:e5:8d:c9:f3:cf:d6:3e:e4:87:fd:0f:b8:3f:b3:72:
         99:4a:18:64:bc:b1:96:9e:fa:ae:7f:4e:ec:b7:35:2f:65:63:
         bd:4c:6f:3a:bd:22:45:c7:13:02:cb:0f:f8:29:cf:c4:1e:04:
         51:04:9d:37:7e:24:9b:0a:a0:eb:7e:84:f6:de:18:89:72:77:
         b1:4a:9e:1c:eb:83:bb:d5:df:8c:c2:2e:c7:44:b5:30:0c:7d:
         e9:8f:02:dd:6a:62:09:06:4e:69:43:30:03:57:36:ab:88:0b:
         ac:5b:94:63:c4:b9:8f:67:9d:53:d9:0d:2e:62:48:b9:e3:29:
         05:64:3a:f7:7b:8b:6f:1e:9a:d5:8f:68:ae:63:96:11:ce:3a:
         ba:f2:b3:b5:e9:8a:61:06:ac:ae:ca:27:91:33:af:61:8d:fe:
         75:0d:54:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubG6fr2Jb2wcmBYEv9fmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3
YzNlM2QwHhcNMjYwMzAyMTIwMTA3WhcNMjYwMzAzMTIwMTA3WjAzMTEwLwYDVQQD
Eyg4M2Q0MmVmOWY4MGVkNWY2NGM1NTk2MDkyMTQ2YzJkNTg3Y2E1OGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGBzkP0Szunjk7o9SNDbI+Hsx6qI
5BHoj9sJGSoNqoA2dBZE/pnWH9U3OyI1fbDukHHyjtJmFXNax3ZtunBA2OZjuTIy
saDFpYPBzD7zwWmcTYzfn2DbxWA5lpd2iItuuUo2Gto3dtxEDTBorrNXhdaq7qap
RNZWsju/p6gPRx1GWPIauuPKdNnK5uVeLs5uNgaZp4awjNWzeWorywB03VsGq73E
EudjgJOW6+c6ukFP3HCWgrIe2TdSO2QUE/BTjJ1ivDsxjy1dCYtH1ZvFotxsAGSS
/oWuv107m7/WUXdlLB4aPjzWbEejA14LRDwjmVHPfKmR4+M0fi1EeI0vfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPULvn4DtX2TFWWCSFGwtWHyljVMB8GA1UdIwQY
MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt
MWYyNDUwMDJkNjQwLzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw
LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJH/HWMAY
8AaFXjhUfepj/ca2PsZhdPT7+H7OVpk9B2YOKvLFfO/1+aIaCvzz4VbXjDZDLD+I
g3HtKhzesEEnIKEckzxvP91RYsY1iO3QNLRFy3IrwPc6SdEYyo9C5Y3J88/WPuSH
/Q+4P7NymUoYZLyxlp76rn9O7Lc1L2VjvUxvOr0iRccTAssP+CnPxB4EUQSdN34k
mwqg636E9t4YiXJ3sUqeHOuDu9XfjMIux0S1MAx96Y8C3WpiCQZOaUMwA1c2q4gL
rFuUY8S5j2edU9kNLmJIueMpBWQ693uLbx6a1Y9ormOWEc46uvKztemKYQasrson
kTOvYY3+dQ1U4Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:20 2026 by rpki-client