Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          zHUgBSK4NeVGP5zh/4ozAd2P2ZqDO4+PYz/qLbufo+k=
Subject key identifier:   94:17:6B:BA:68:5A:17:58:B6:15:EC:AE:FC:BE:92:E4:38:73:B4:D0
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       019CAA21EBA04E192EAC55909405653B7BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          043D
Signing time:             Sun 01 Mar 2026 16:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:15 +0000
Files and hashes:         1: 12ZQ62nPJwBHdDipttw3dUMZnqY.roa (hash: mj44+gLUBC8dy/BsSB97lGlEqLGL0epooCBx2VlfKb0=)
                          2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: 0iy5oK4x0+K8XcGljGIob0SMrMsdNf7BugGIPMbJ9yc=)
                          3: Jv0u9cMD564Ime5yTEWdumsR3O0.roa (hash: y04ea8/vqCOfvH/IiN/FLgzOzYxMmv/5aeY5o3QGFD0=)
                          4: MGt5BnBc1caHCVlOZifA8hYKUFM.asa (hash: Z3wsIN7VXFqQgyEQhPtCMDIavrFmtm5IXKY4ICw229o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:eb:a0:4e:19:2e:ac:55:90:94:05:65:3b:7b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Mar  1 16:01:15 2026 GMT
            Not After : Mar  2 16:01:15 2026 GMT
        Subject: CN=94176bba685a1758b615ecaefcbe92e43873b4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:1c:f6:71:6b:47:9b:d9:cb:20:66:01:f3:
                    f5:95:fb:2a:b1:6e:9c:c8:74:28:f8:1f:ec:07:56:
                    a6:de:b7:76:02:2b:c8:61:90:af:52:96:5f:e4:29:
                    d8:dc:9d:d7:21:1b:a0:4c:68:42:74:ba:65:a4:fd:
                    65:31:08:e4:17:15:1f:5b:2a:bc:63:2f:61:3a:5b:
                    64:4a:4d:c9:2d:75:cc:06:7d:c7:8f:f6:08:af:55:
                    c4:fa:eb:cd:0b:59:a6:c8:48:67:d2:75:81:8e:58:
                    54:5a:ed:af:bb:fd:00:6d:7c:6e:61:de:e2:ec:29:
                    7b:d5:e7:99:38:09:53:e2:37:f1:52:30:ca:60:14:
                    87:51:ad:b2:cb:e1:c8:c1:e7:4e:c8:4c:36:0b:4b:
                    21:6e:f7:04:81:e7:1d:1e:0a:ad:39:3e:74:fd:0c:
                    d8:18:20:02:d1:c2:79:cd:42:c4:52:92:0d:69:8b:
                    28:17:6a:69:d7:62:95:15:c4:c0:5e:b1:ec:9f:50:
                    d2:5d:1b:e9:b4:da:7a:df:77:c2:d2:25:49:4d:c8:
                    c9:9c:fd:0f:6d:8c:f5:d6:35:18:db:e0:5b:eb:f9:
                    43:c0:68:d6:ac:33:10:6f:fe:d2:e4:08:8f:c8:dd:
                    be:e4:62:63:9a:73:a8:66:ae:a7:20:df:3a:23:86:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:6B:BA:68:5A:17:58:B6:15:EC:AE:FC:BE:92:E4:38:73:B4:D0
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:08:fb:83:c6:92:ea:a7:56:eb:e1:a6:25:15:94:35:de:
         8f:07:17:89:68:7a:f4:49:dd:57:1e:ef:9c:e9:38:93:eb:59:
         ff:3a:84:87:7b:bf:d1:a6:19:ee:de:f7:bd:2d:6c:cc:15:95:
         2d:ac:cc:b3:99:fc:b9:f1:43:20:a1:75:6d:f2:e0:47:d7:f2:
         aa:1e:96:76:0c:19:8b:6b:35:6d:29:f1:a5:47:36:21:1e:30:
         8b:77:b2:ed:cf:8d:90:d5:5b:8d:3e:cc:9e:05:14:31:58:15:
         25:32:5b:81:68:da:82:f7:c7:0f:c0:a9:5f:19:ef:c5:06:6a:
         6e:55:c9:2e:dd:81:f3:91:1c:c6:3c:1c:77:2d:0f:a6:7a:52:
         47:78:94:c8:08:25:ac:ab:c3:f1:a5:f2:30:6b:7e:24:63:3d:
         33:73:c4:b7:0d:3f:98:42:c9:6f:52:31:3a:3d:9d:a5:e9:fc:
         52:e5:cd:83:f9:fd:40:55:fa:5c:be:1a:7b:a2:0a:9d:7a:66:
         82:6c:d9:8f:55:6c:1f:e7:5d:12:ff:0f:14:2b:b5:b0:c5:f5:
         22:aa:a9:6f:73:a5:9e:6a:cc:cf:65:c7:b4:1d:c7:7e:1b:48:
         03:5b:ac:8f:5b:5e:66:4a:76:3c:b6:24:29:a5:8d:21:1a:d1:
         1c:a4:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:21 2026 by rpki-client