Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          e7VP96zD5UeiYRoNcjixG8XavRCJ0aadXhFOgZ79pi4=
Subject key identifier:   5C:A7:7C:B7:80:B0:D0:E4:AD:E5:58:E1:20:B3:16:65:4D:BA:F8:0F
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       019CADFEA6C085ABD56F8BDF97C8665812AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          184F
Signing time:             Mon 02 Mar 2026 10:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 10:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 10:01:13 +0000
Files and hashes:         1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
                          2: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
                          3: Oh5NfZAAYPNWepq-IUky8lhGK3Q.roa (hash: G68B7K3ln08i2iRP9Hn3HZxsrH3w3zUOZ6LC+Oev1Yo=)
                          4: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
                          5: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=)
                          6: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: UBwuc0h6ey1Ttk+flLKoIX6HVZNwBzgWIk1LEWCRGoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:a6:c0:85:ab:d5:6f:8b:df:97:c8:66:58:12:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Mar  2 10:01:13 2026 GMT
            Not After : Mar  3 10:01:13 2026 GMT
        Subject: CN=5ca77cb780b0d0e4ade558e120b316654dbaf80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:9b:95:be:c1:2c:d6:11:d5:a6:74:b6:f8:
                    7b:f2:fc:28:67:3b:b6:9a:5b:48:32:89:48:76:b6:
                    60:d7:30:06:a0:c9:6d:1d:7f:b2:04:24:3a:bc:80:
                    12:ed:c6:a5:d4:62:e3:7c:8b:ff:d3:7b:69:30:fd:
                    5f:61:3e:e6:98:47:19:48:65:63:7c:d1:ab:da:6a:
                    df:3a:ee:9e:40:88:28:83:83:4d:4e:ea:6c:42:3b:
                    71:61:a6:28:d2:1c:3e:7e:1b:dc:4b:eb:4e:ca:b3:
                    6d:5c:f4:25:11:5f:ee:06:8f:45:90:58:a0:32:98:
                    9e:f8:08:75:b1:33:9f:ef:94:07:e2:31:66:f0:c2:
                    a6:a2:d8:ea:d9:e3:8d:63:75:12:d2:55:7c:8f:5e:
                    52:8d:b9:ad:0a:6b:b3:62:87:e6:0b:14:c0:92:78:
                    e6:94:51:99:17:a7:a1:7f:4c:91:f0:b3:76:28:ad:
                    6d:ef:8f:9b:09:5f:51:da:c3:c2:1e:e4:d1:73:78:
                    57:69:c5:22:b9:e5:ac:ba:2b:dc:13:a4:22:a1:17:
                    76:9f:c9:36:22:95:0f:31:2c:a9:75:75:52:de:98:
                    0d:13:e8:45:14:4a:83:af:67:49:6e:99:60:e3:44:
                    5f:98:e9:02:b5:d4:34:b6:1a:9d:47:24:24:50:17:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:7C:B7:80:B0:D0:E4:AD:E5:58:E1:20:B3:16:65:4D:BA:F8:0F
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:cb:e0:e9:4c:77:84:55:44:c6:94:8f:63:85:aa:5b:cf:56:
         00:50:8c:a3:f2:63:d1:d2:6c:8f:b7:e5:11:9b:7b:c2:11:77:
         24:fc:63:9d:09:fd:fc:aa:01:e3:dc:38:c8:03:36:e8:2a:8f:
         74:33:4d:27:c3:f4:1b:47:9f:ef:ee:03:61:a5:12:93:15:04:
         65:7a:e3:d5:6e:c5:66:b7:4b:cf:d9:09:22:5c:66:0f:b9:35:
         9c:53:35:c1:cc:84:8a:1f:1b:05:51:1e:d9:2a:14:75:b5:91:
         93:13:26:13:97:32:95:06:97:71:4d:73:82:8e:61:b8:44:4a:
         6c:7b:34:d1:a3:c7:7b:d2:68:aa:ff:66:2a:28:d2:43:cc:c7:
         4b:b2:aa:75:b5:a1:71:b1:46:f3:3b:ec:01:74:a0:c4:f9:7f:
         4e:c0:1e:f4:dc:65:31:fb:cf:c0:b9:ff:e7:4d:e6:91:8c:a8:
         0b:61:6b:84:5a:26:b4:b4:ae:ff:a1:6d:e8:33:6a:47:e2:3a:
         38:3a:1d:69:af:4b:30:81:93:9b:8e:da:4a:5c:10:a3:20:26:
         67:0f:80:f7:6e:3e:8e:3e:9f:b0:a2:e9:fd:23:c7:32:91:43:
         c2:fd:8c:7f:7c:2a:df:a6:ef:c6:de:59:f8:80:b9:73:86:0d:
         0c:45:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:47 2026 by rpki-client