Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File:                     95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier:          VdUqasWls/1n/byWH2pBg/Wu6S7/3cxqLkm/2cfn8Dg=
Subject key identifier:   D8:CA:6B:06:5C:05:F8:5F:35:04:11:13:45:AF:D0:6B:AF:4D:F0:DB
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer:       /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial:       019CAC7E4F3222C7016AE07738C7081A79D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number:          09F3
Signing time:             Mon 02 Mar 2026 03:01:24 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:24 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:24 +0000
Files and hashes:         1: 4KIKtiZx4olfKJeL5OUtDWjAXy0.roa (hash: xFv84inMCI3OI1weiiDL5A+3hBK6NXECfuHlJb+lAgU=)
                          2: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: gtm+yvoXVkM4eGv0wYOo1Cp0v7n7ErFzrTiD4lY0FPs=)
                          3: RilQppJ-QAFui29gvm8Unef54Nk.asa (hash: 6bf1/nszX0Ysb+tZitkkOVu85I1KDpz8FO8uA+3f2nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:4f:32:22:c7:01:6a:e0:77:38:c7:08:1a:79:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
        Validity
            Not Before: Mar  2 03:01:24 2026 GMT
            Not After : Mar  3 03:01:24 2026 GMT
        Subject: CN=d8ca6b065c05f85f3504111345afd06baf4df0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e4:7e:e3:fe:72:d0:5c:b8:09:e0:bd:40:14:
                    02:cf:2c:3c:02:6f:8c:4c:6e:79:86:61:2a:21:3f:
                    ad:b3:c3:70:7c:85:24:78:f6:ea:b7:1a:de:e1:71:
                    5e:e5:d0:9f:bf:fc:d3:08:89:a6:92:29:d2:93:c8:
                    ca:9e:7d:23:a8:ee:cb:8e:7d:64:60:1f:86:1f:7d:
                    a3:21:08:93:f3:84:7a:80:32:22:b8:03:21:5f:13:
                    00:24:9f:51:4f:d2:bd:3b:cb:aa:ad:5e:c7:f6:8d:
                    c0:9e:11:80:76:1d:5e:5d:b0:5f:08:cc:6a:32:b1:
                    88:a0:39:69:2a:99:2e:1a:e9:30:aa:0e:4b:f0:9c:
                    60:26:88:14:28:60:1c:81:19:df:bb:51:f5:80:ca:
                    65:d3:b8:32:21:f7:39:07:be:9c:d6:90:33:db:6e:
                    de:dd:e3:43:2f:c2:af:30:cb:7d:e2:72:83:05:cc:
                    3d:46:d2:f7:e9:c9:0c:e6:27:30:61:45:d9:32:ef:
                    9f:65:5c:e5:26:de:fc:0c:12:de:14:9f:e1:b2:45:
                    70:2a:f0:d1:89:ea:2f:9e:04:44:54:a9:cc:b2:10:
                    61:7b:a0:d1:32:c9:4d:5c:e2:e1:32:16:e3:3f:95:
                    97:22:e0:fe:09:6d:2c:be:77:f7:ee:f0:25:b2:b2:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CA:6B:06:5C:05:F8:5F:35:04:11:13:45:AF:D0:6B:AF:4D:F0:DB
            X509v3 Authority Key Identifier:
                keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:81:93:75:87:85:50:cf:a8:1e:3f:c9:04:0f:aa:c2:3a:5b:
         01:e9:1a:9c:f0:0e:5f:21:df:48:8b:55:ce:a0:80:7e:d9:2a:
         d4:27:e6:8d:21:38:64:ab:d9:f4:7a:5a:43:47:c8:fe:a6:a0:
         86:88:df:ba:66:c9:61:fb:05:69:12:7d:64:05:51:e7:c2:06:
         b9:f3:2e:4b:71:8b:0a:0e:1a:62:2e:e2:c1:fb:67:7e:4c:1e:
         02:cf:32:ad:17:8f:23:81:f1:36:bd:98:65:9a:d1:ad:11:11:
         b2:77:07:70:ec:a5:ad:a7:ec:6f:1c:1b:2f:a5:0a:57:54:f9:
         fc:5e:87:b1:ef:bb:7e:d7:cd:37:6e:bb:e9:d2:2c:04:58:4c:
         57:39:04:77:21:e6:39:bc:4b:a3:84:a0:f5:d9:66:34:d9:39:
         ed:cd:5d:85:88:a5:75:30:44:14:8e:31:3c:73:4d:34:9a:16:
         7a:69:44:be:50:58:6c:3d:a1:7d:76:66:d9:4b:56:38:eb:1b:
         10:19:f7:e2:7d:04:af:be:43:6b:8c:a8:c5:e4:53:e4:44:b3:
         77:86:a2:06:63:5b:87:f8:29:61:a0:92:dd:13:ce:ef:e3:df:
         e3:16:ad:b0:ab:b8:e9:8d:4c:82:bc:d0:b7:a2:84:b4:43:36:
         48:52:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:32 2026 by rpki-client