Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File:                     pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier:          GFmeQYgtfTqRPRs8sAF/pNzMkDtykzkbPtDX358PMMI=
Subject key identifier:   6F:57:4E:20:B3:2C:8D:3D:00:89:BB:47:56:10:1D:89:E7:E5:CC:86
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer:       /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial:       019CAEA3E76F6AD423A3B76AEF4355A7F9C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number:          161F
Signing time:             Mon 02 Mar 2026 13:01:42 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:42 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:42 +0000
Files and hashes:         1: KDQ-cFcPwQDy3bGFF_WSaIsvNNQ.roa (hash: nE15hquAwl/5m54NEuxKdixrl7Q9eNfNpFSjwL6hasY=)
                          2: ekbIvq4xoQE_G2aZ6OBWbjCke00.roa (hash: CDCAAwMBxMHZc9k/9U2grgMxj6swO3W7TTk/XqEYqRY=)
                          3: m7QfGcH9ehj8zUctNJKORHfF7YQ.roa (hash: jEz2eC4AxW2xJSso0f7640cBfazPEGudZTNrPpOM8vo=)
                          4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: 3jxihbOW4y81iHKwgTPQAhk7AiPzUPExTFW30YrPMNA=)
                          5: xXThYeFskZa8CsEFNdXzq9WOPuU.roa (hash: cncRVt5HZa39EbyA1UHTjl7763HCDtgzdQM7tatOGC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:e7:6f:6a:d4:23:a3:b7:6a:ef:43:55:a7:f9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
        Validity
            Not Before: Mar  2 13:01:42 2026 GMT
            Not After : Mar  3 13:01:42 2026 GMT
        Subject: CN=6f574e20b32c8d3d0089bb4756101d89e7e5cc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:a7:a2:7c:19:cf:e1:4b:eb:a4:f9:6c:a4:
                    d7:81:8a:5e:9c:49:8e:01:a2:d1:cf:bc:0f:d7:99:
                    fc:3c:b6:39:a3:37:09:63:6d:e2:70:31:57:ab:b1:
                    b5:0b:29:99:60:74:95:62:b7:72:9c:9c:48:22:f6:
                    91:6d:b2:e2:84:45:86:44:3d:0d:f2:e5:8a:09:81:
                    a8:c3:9a:4d:cf:c0:e3:c8:c5:7b:f8:4c:cc:20:ea:
                    e6:9e:3a:07:23:1a:96:1f:44:f7:62:f8:0c:ed:47:
                    cf:39:33:df:f5:03:7a:ab:18:b5:e9:c4:0e:d1:31:
                    85:02:71:95:b9:97:ef:77:5a:ca:e7:12:40:1a:d0:
                    30:ae:de:7f:05:76:79:81:16:2a:63:cc:14:6b:8a:
                    79:19:fa:4e:34:a0:66:7e:c5:62:e0:b7:29:e8:0b:
                    c5:e3:d9:7e:c6:54:bc:ad:16:95:50:d1:b6:c2:fb:
                    5a:00:27:fa:d6:60:b7:aa:a4:dd:44:4c:33:dc:4f:
                    89:7b:07:50:f1:57:b7:02:64:42:8a:18:43:f6:1c:
                    4a:7a:b5:65:21:2c:eb:9e:ff:1e:92:34:84:89:e4:
                    51:4d:a3:e9:46:e9:71:fa:bf:46:93:15:77:c8:5e:
                    37:66:93:a5:a6:35:20:18:0e:72:f3:d9:3d:43:46:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:4E:20:B3:2C:8D:3D:00:89:BB:47:56:10:1D:89:E7:E5:CC:86
            X509v3 Authority Key Identifier:
                keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:79:1f:75:aa:9d:dc:c0:02:3b:36:f7:b9:c9:7f:76:77:
         65:de:6d:2f:2a:5d:d7:90:37:49:f1:02:40:9a:af:4c:7d:96:
         d9:bd:eb:06:91:31:81:b7:22:53:11:8d:2f:8c:2d:3e:f6:97:
         a6:39:80:fc:e1:5c:fd:bd:03:15:93:7f:d5:40:c1:c1:e3:db:
         db:31:7f:25:f6:1c:3e:3b:99:53:03:51:10:c9:04:e6:82:9a:
         41:c9:29:56:66:fc:a7:4c:6c:fd:db:cf:a4:b0:53:9a:c0:18:
         1d:2c:b9:4b:41:78:5e:fe:d7:56:85:57:58:98:e7:d9:63:42:
         41:b5:ee:27:79:fe:2c:d4:bf:ce:b4:78:0a:20:36:9e:c0:d7:
         f4:01:30:d1:46:41:69:c7:fa:00:90:aa:d5:8f:9a:38:26:f6:
         dc:56:29:e9:24:b2:f7:59:75:3c:6a:b3:f2:2e:15:4b:8d:04:
         6c:76:1f:c3:6d:c8:06:f1:d7:63:bf:fb:1a:f7:04:a9:a7:b4:
         41:20:e0:c1:79:94:6b:6c:3a:3f:6a:56:85:c2:ed:16:fc:eb:
         d7:e3:25:7d:5a:2b:2a:17:b2:34:1f:31:e4:9f:31:90:f3:b0:
         b1:21:67:71:c8:fa:58:e5:f1:7b:0f:7d:29:66:74:37:61:25:
         07:51:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:32:24 2026 by rpki-client