Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File:                     S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier:          tp6xwjju9lieeBMiurqKXIXYYeueTbdP7SgJrFfufek=
Subject key identifier:   A7:50:B8:C2:28:4E:99:2A:51:73:0A:1A:CD:ED:57:FC:A6:FD:FA:CB
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer:       /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial:       019CABD9AFCD72FEFBE44B05B6A10976FCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number:          06AD
Signing time:             Mon 02 Mar 2026 00:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:36 +0000
Files and hashes:         1: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: t2clp7MRKKi8fDNBsF0k1vcF/n1FXmpp0+vZKXRrFjU=)
                          2: SnZyrIF6RABx6JSbJPFXyEaoM4o.roa (hash: 5p3rhTPu7aykKsYkOURaS1avQK2tbYJAoNaTXCxX5Rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:af:cd:72:fe:fb:e4:4b:05:b6:a1:09:76:fc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
        Validity
            Not Before: Mar  2 00:01:36 2026 GMT
            Not After : Mar  3 00:01:36 2026 GMT
        Subject: CN=a750b8c2284e992a51730a1acded57fca6fdfacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:b0:4e:05:04:7c:2a:9d:0a:a2:93:a9:c7:
                    48:c0:c0:2a:6e:11:80:2e:21:f0:bd:b2:1e:fc:73:
                    7f:16:61:55:f4:15:28:0d:e6:36:a3:a8:0b:c2:9d:
                    fa:81:ed:79:c8:23:ca:10:d7:9c:a1:67:d3:6a:e6:
                    c1:45:a7:ef:56:c8:e7:c4:ab:a7:ce:06:84:58:5e:
                    95:57:4f:bc:3e:a2:91:de:8a:a2:cf:a7:6a:81:99:
                    e4:c8:f4:a4:b0:39:e7:18:a1:3e:08:82:24:26:4b:
                    41:9a:dc:9b:ae:41:31:80:5a:3f:71:c7:6e:7b:7b:
                    bf:aa:ea:a0:96:79:67:84:d7:d1:e3:4e:0b:11:7c:
                    08:4a:21:57:30:86:89:57:86:96:b7:44:4e:34:3d:
                    1b:1c:0b:4c:04:86:27:a4:b2:40:3d:a3:25:b3:6f:
                    44:2e:0b:73:04:33:55:01:06:0b:09:2d:df:93:be:
                    63:bb:f4:a0:82:13:09:10:59:45:4d:35:40:eb:77:
                    76:20:ea:c4:35:85:cc:16:6c:39:47:ed:99:6f:29:
                    d3:10:98:7b:3b:59:61:2d:65:e8:0c:01:45:46:10:
                    b5:b7:ba:fc:bd:0f:2a:ab:cb:42:1f:d6:79:53:fb:
                    4c:f0:a1:1b:cb:2d:12:7c:4d:a3:25:7c:0b:a5:13:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:B8:C2:28:4E:99:2A:51:73:0A:1A:CD:ED:57:FC:A6:FD:FA:CB
            X509v3 Authority Key Identifier:
                keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:df:75:52:18:26:92:be:93:1e:31:df:32:e6:f6:ef:96:
         bc:41:88:0b:a0:03:1b:3f:17:58:0b:ce:49:10:b1:de:0d:0d:
         06:74:37:a6:84:84:45:0a:98:33:d9:6d:99:0b:9e:60:df:16:
         c7:7f:2d:60:49:49:20:c5:87:2b:52:29:2f:ea:e1:13:97:9f:
         4e:32:87:bb:d2:16:df:fe:23:87:79:ea:39:15:1e:9f:06:81:
         49:90:5f:10:ec:49:20:21:60:fa:9e:54:ea:14:8a:f3:6c:4f:
         86:a4:75:8b:21:9b:59:31:38:83:47:b4:62:f0:bf:0e:ab:b5:
         fc:49:82:c9:2c:79:5a:75:4b:1e:0a:88:ba:86:78:47:b4:c3:
         cc:a2:de:9a:3c:0e:92:19:cf:bb:17:ee:e5:ee:7b:08:d1:21:
         57:29:35:ab:af:36:83:40:6e:5f:ea:89:7b:71:96:4a:95:c3:
         98:15:78:4d:b4:54:4c:a1:f2:57:4c:4b:f1:1b:4c:a6:67:bf:
         4e:be:57:50:cd:69:03:bf:e5:4c:d4:42:5f:aa:2a:27:41:34:
         d4:9d:2f:6b:e7:16:b3:70:a8:99:f2:6c:08:b9:6f:f3:b2:ca:
         fa:3e:bc:65:b9:c0:c1:44:84:e3:24:b4:60:00:0f:e5:32:b4:
         5e:27:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:08 2026 by rpki-client