Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          mJy81safT3kXKwWNlAbM0HJizfqyYzwf7KBLnCMbEeE=
Subject key identifier:   6A:24:F4:91:C5:F6:7D:89:93:7B:A3:02:ED:03:15:1B:B5:78:4F:5F
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019CACB5186CB3AC15D6FF900396814693B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          1854
Signing time:             Mon 02 Mar 2026 04:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:15 +0000
Files and hashes:         1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
                          2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: 7emb+INnkbNHrZWQOwFQoyGR073Rc5FTulnyPUkodIQ=)
                          4: YAGdK9NgvIyiz7MwVPSphsKwcHE.roa (hash: YoeO10+z7W0nmsVjlcs0IP7RbonSryjBMwi0I/lLnms=)
                          5: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:18:6c:b3:ac:15:d6:ff:90:03:96:81:46:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Mar  2 04:01:15 2026 GMT
            Not After : Mar  3 04:01:15 2026 GMT
        Subject: CN=6a24f491c5f67d89937ba302ed03151bb5784f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:f6:42:d6:25:8d:8b:a5:12:d0:19:9f:c0:
                    e2:0c:60:13:e7:fc:a0:45:01:46:2b:2d:69:4e:1f:
                    62:88:f5:3d:29:75:d9:95:1d:45:74:12:97:4c:03:
                    f3:a5:41:3a:f1:8f:82:bd:88:c0:e0:7b:b3:b7:af:
                    8d:4c:b0:29:61:4e:85:1b:1f:d9:ae:78:43:3e:90:
                    ca:18:94:95:6b:f3:28:71:7e:db:4e:17:c4:da:ca:
                    29:9a:14:92:52:05:c6:c8:61:80:eb:b2:e4:48:0a:
                    3a:ba:95:08:b1:ff:4e:72:03:a3:ee:7b:26:4e:f5:
                    a5:0e:95:00:d3:13:7c:7f:1c:02:c4:d8:3a:d6:75:
                    b7:b3:2c:30:39:04:1a:c5:b4:43:7e:ea:52:ac:66:
                    6b:19:b7:bd:ab:0a:e1:65:34:a1:8c:8f:46:ba:eb:
                    3d:90:b3:d2:63:25:b8:39:0e:aa:82:cf:d4:c7:8b:
                    47:93:22:2f:e3:09:f7:5a:ce:e9:1f:26:2e:a6:24:
                    c4:c7:f6:d0:41:45:27:db:20:96:b9:13:00:fd:4c:
                    ee:41:18:a5:84:fa:5d:69:0f:21:3b:71:34:2a:f4:
                    41:6d:a0:1e:22:13:41:50:48:25:0c:dd:91:ce:18:
                    c9:1e:20:1b:ca:ab:d6:e5:72:22:76:3a:29:0c:1b:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:F4:91:C5:F6:7D:89:93:7B:A3:02:ED:03:15:1B:B5:78:4F:5F
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:9b:0f:ce:39:6b:78:ad:c6:e8:8d:13:45:c6:41:04:aa:
         6a:c6:28:6e:00:a8:67:c5:4a:ed:bc:d6:54:8d:14:a6:ed:ba:
         69:ff:a0:50:7f:d4:aa:46:fb:26:48:cd:60:7b:20:f6:27:59:
         bb:04:8e:a7:28:97:5c:a4:3f:85:4d:06:56:78:fa:3a:fb:d0:
         dc:a1:57:85:dd:29:8b:a1:b4:92:9c:37:23:3d:1f:f9:7d:c0:
         d8:85:8c:00:e8:01:a1:c8:6d:e6:aa:77:49:12:45:5c:e7:ba:
         c6:df:77:d8:84:31:4c:16:63:c8:64:8e:10:1f:6a:8a:ee:bb:
         d5:eb:14:18:9e:1a:3c:96:71:3c:21:38:65:dc:d7:58:56:b3:
         1e:8c:07:35:79:09:af:d2:20:23:9d:06:1f:41:c0:43:06:89:
         26:9e:fb:e8:83:29:66:94:ef:5f:8b:45:6c:e8:dd:da:19:9e:
         b4:7f:7b:af:7f:32:34:02:81:08:b1:5f:41:cd:ae:1b:93:d9:
         cb:44:9e:e1:fd:46:51:05:e0:a4:22:18:51:da:18:41:58:4b:
         fc:09:e0:34:2d:40:65:c4:98:d3:c4:88:ee:c4:1f:53:d2:4d:
         1f:59:e6:87:8f:51:1a:e0:a3:63:ae:f1:dc:43:e0:04:ac:6e:
         99:c6:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:52 2026 by rpki-client