Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File:                     u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier:          od1D+TaX/MASkEmm5pnXwqjufru9Tj57vNCEbuGCKkk=
Subject key identifier:   79:79:BE:11:7C:3F:1D:DC:9A:CA:E6:22:4B:F1:40:39:AC:36:BF:D1
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer:       /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial:       019CAC103D10DF4269D9977C85305A16FB60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number:          115D
Signing time:             Mon 02 Mar 2026 01:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:11 +0000
Files and hashes:         1: qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa (hash: xm3mTURCaqDC11Ly2xfoF8pGLGSgKdJlsYcgaLK7YyQ=)
                          2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: VIK0rW1txf32AN8Hw2s95ERdE0cH5QZl3XcYIiUG83o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:3d:10:df:42:69:d9:97:7c:85:30:5a:16:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
        Validity
            Not Before: Mar  2 01:01:11 2026 GMT
            Not After : Mar  3 01:01:11 2026 GMT
        Subject: CN=7979be117c3f1ddc9acae6224bf14039ac36bfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:90:e2:f3:e9:9d:66:e9:d3:92:19:9b:14:
                    9a:13:4e:0a:f7:ce:c4:51:97:28:cf:fb:61:5b:e7:
                    9a:5e:29:61:a3:46:73:d5:66:75:74:75:5a:1c:ae:
                    ba:1f:a7:2b:51:ad:89:55:f8:44:f2:19:4e:3c:18:
                    45:a7:d0:a0:30:62:a4:b1:cb:31:a9:96:51:be:a4:
                    d3:7b:da:17:f8:25:8d:2a:86:91:3d:40:f6:2e:b3:
                    11:64:05:bd:57:16:65:e0:30:fe:ac:96:9b:0b:d3:
                    09:48:d3:e2:92:4c:fb:e9:c6:ff:af:95:df:d3:96:
                    bf:3d:33:e5:69:cc:36:54:7f:2d:a3:47:be:ed:87:
                    97:78:62:26:88:7b:d5:74:e6:ea:1b:6c:25:e6:a9:
                    9e:a7:4b:cb:62:52:74:a4:3d:74:30:f2:fd:05:54:
                    df:8c:8a:e0:25:6b:40:7f:be:6f:58:01:35:d1:98:
                    68:b4:85:a4:65:b0:cf:a3:81:b7:83:79:56:ba:b6:
                    9f:e3:55:4b:2e:33:91:17:2f:a9:13:a4:4c:bc:d5:
                    e4:1f:48:a7:0a:c7:9b:41:9b:da:e9:e7:b1:4a:c7:
                    cd:2c:1c:4e:b0:45:6c:4e:0c:a4:b4:22:b1:a4:dd:
                    3c:b0:0c:3c:cb:c6:6e:78:1f:03:36:2a:fc:cd:c8:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:BE:11:7C:3F:1D:DC:9A:CA:E6:22:4B:F1:40:39:AC:36:BF:D1
            X509v3 Authority Key Identifier:
                keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:ed:68:a4:a6:85:62:6e:b6:f5:f2:81:fd:3c:ad:0d:48:
         6e:c6:ea:69:24:af:38:6d:b2:dc:e6:79:72:0a:8c:90:93:92:
         37:34:f1:54:a0:2a:8e:d2:bb:cd:8a:52:39:e4:61:c8:ca:d0:
         77:8a:f6:eb:be:ea:1a:b4:36:09:fb:1c:37:b1:1e:2c:91:29:
         5f:20:d9:64:f8:66:94:f2:f2:8c:55:88:d1:ff:53:8b:1d:ac:
         81:80:ea:8e:0a:de:b6:3d:c4:90:17:85:07:81:4e:af:ba:36:
         2f:2b:97:02:ec:dc:10:0c:1d:5e:3e:56:3a:de:4e:92:3d:8d:
         71:10:08:e5:9b:ab:db:f1:0a:f6:d2:7b:f2:b3:d0:52:67:56:
         f1:63:10:83:31:fd:7e:1f:30:86:34:7d:29:76:16:be:85:01:
         88:13:c4:0b:29:b1:43:46:e8:0b:79:ea:d2:ce:69:81:86:20:
         90:1d:82:16:4a:0a:f2:6d:8c:03:4a:9d:7a:fe:b1:aa:d7:fb:
         f7:32:d3:16:5c:09:9c:f2:58:90:f0:26:d8:5f:93:5f:77:5e:
         fb:dd:29:2b:af:8e:64:99:45:f9:5b:a9:80:1d:9a:47:54:a4:
         8f:6a:66:05:1f:e9:fd:28:e7:c2:be:c9:cb:23:32:b4:6e:d5:
         bb:36:97:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysED0Q30Jp2Zd8hTBaFvtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4
NTZhMTUwHhcNMjYwMzAyMDEwMTExWhcNMjYwMzAzMDEwMTExWjAzMTEwLwYDVQQD
Eyg3OTc5YmUxMTdjM2YxZGRjOWFjYWU2MjI0YmYxNDAzOWFjMzZiZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlqQ4vPpnWbp05IZmxSaE04K987E
UZcoz/thW+eaXilho0Zz1WZ1dHVaHK66H6crUa2JVfhE8hlOPBhFp9CgMGKkscsx
qZZRvqTTe9oX+CWNKoaRPUD2LrMRZAW9VxZl4DD+rJabC9MJSNPikkz76cb/r5Xf
05a/PTPlacw2VH8to0e+7YeXeGImiHvVdObqG2wl5qmep0vLYlJ0pD10MPL9BVTf
jIrgJWtAf75vWAE10ZhotIWkZbDPo4G3g3lWuraf41VLLjORFy+pE6RMvNXkH0in
CsebQZva6eexSsfNLBxOsEVsTgyktCKxpN08sAw8y8ZueB8DNir8zcixowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl5vhF8Px3cmsrmIkvxQDmsNr/RMB8GA1UdIwQY
MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It
MjE1OWVmZWU2YTA3LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3
LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2TtaKSm
hWJutvXygf08rQ1IbsbqaSSvOG2y3OZ5cgqMkJOSNzTxVKAqjtK7zYpSOeRhyMrQ
d4r2677qGrQ2CfscN7EeLJEpXyDZZPhmlPLyjFWI0f9Tix2sgYDqjgretj3EkBeF
B4FOr7o2LyuXAuzcEAwdXj5WOt5Okj2NcRAI5Zur2/EK9tJ78rPQUmdW8WMQgzH9
fh8whjR9KXYWvoUBiBPECymxQ0boC3nq0s5pgYYgkB2CFkoK8m2MA0qdev6xqtf7
9zLTFlwJnPJYkPAm2F+TX3de+90pK6+OZJlF+VupgB2aR1Skj2pmBR/p/Sjnwr7J
yyMytG7VuzaX3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:48 2026 by rpki-client