Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          tEaUkzV2to0rW4OJYBONwj8Y6tqjry2UopiTCtLv7sQ=
Subject key identifier:   FF:75:F1:47:D8:DF:54:B5:48:91:5B:C9:7A:DB:F6:52:25:FC:CB:26
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       019CA9B380DAE105CE5B244863B0243CEE7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0AB9
Signing time:             Sun 01 Mar 2026 14:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:39 +0000
Files and hashes:         1: 1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa (hash: bNfrVNzH2BXnE1dQKvpq85yCYPmZuhWsqc5IpPdYyzo=)
                          2: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=)
                          3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=)
                          4: Ly8SorW7w_Dg6fAIrTVOdpaVPT8.roa (hash: HGTHpvo69BEECWSdkFYK6o3wp1FqLkLH4LXf5TzKib4=)
                          5: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: 4cV7e+5rStVT+EuWqyM66QcoGnNP1YU+IO4hWHzWln8=)
                          6: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=)
                          7: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=)
                          8: ghjgpQCXu2keg81nWlTEtZo7k4E.roa (hash: iE1H5q2bGSfCm5jtVmORl4h7Daec5vdTAeKEQr0iK/I=)
                          9: iZcZ_-KRFzETMXfXgFqcCVyHHWw.roa (hash: rbsN5PPkcbMSn4E12T9YbjsvzB+VtJOV1oya4fK1cDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:80:da:e1:05:ce:5b:24:48:63:b0:24:3c:ee:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Mar  1 14:00:39 2026 GMT
            Not After : Mar  2 14:00:39 2026 GMT
        Subject: CN=ff75f147d8df54b548915bc97adbf65225fccb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:df:17:4d:fd:cf:27:2b:55:b6:67:39:41:
                    1a:4d:4a:50:f2:07:fe:84:24:e3:d2:0a:0d:62:ee:
                    54:fc:88:e5:86:88:37:ef:d8:fc:bc:3e:12:ca:73:
                    fe:7d:5a:a0:6b:32:54:27:c9:0f:cf:13:0b:5c:7f:
                    d3:ba:8c:3c:80:76:82:a6:91:38:fb:68:b1:24:eb:
                    4a:d0:42:d3:61:1b:53:98:50:5e:05:5d:d1:ec:3e:
                    c0:46:25:a2:e8:09:e4:14:71:0f:93:79:6b:6c:5d:
                    86:c6:c2:c1:37:84:c0:2e:a4:14:07:14:ee:d9:73:
                    3e:4e:60:96:d2:37:02:c2:25:37:6c:53:88:b0:1a:
                    cc:57:8e:40:be:9a:03:18:6b:2a:9e:28:5e:60:e0:
                    bf:7b:75:a2:d9:53:3a:ba:ed:57:ab:1b:d5:1d:9a:
                    c9:07:0c:9d:30:d2:29:6f:be:d8:be:9f:53:ac:67:
                    cc:ab:20:00:39:c5:70:65:dd:cb:4a:89:2f:de:55:
                    3c:35:4d:ea:a7:ee:69:36:c9:6c:22:09:ec:ec:8f:
                    4b:18:15:db:60:68:ad:dc:fe:25:1d:5c:e2:ed:2e:
                    c8:9f:49:f8:aa:00:57:0b:eb:9a:79:79:a1:11:33:
                    fd:16:58:35:e7:3b:55:8b:f8:5a:e2:5a:9a:4c:1c:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:F1:47:D8:DF:54:B5:48:91:5B:C9:7A:DB:F6:52:25:FC:CB:26
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:8c:8b:78:6f:28:7b:9a:b4:ce:af:5e:7c:bd:4e:6b:75:
         9f:75:a7:c5:bb:0b:7e:2c:f0:9a:28:91:cd:06:95:29:da:d5:
         61:8f:6a:5e:2a:fe:7d:c4:e8:bf:d0:b7:32:2b:12:dd:cc:d5:
         29:e3:d3:c6:eb:c1:55:94:cd:8c:89:63:c9:39:e5:ee:9f:64:
         f7:40:91:99:cb:ad:e9:c0:92:09:6c:31:e2:38:19:c1:b7:85:
         26:e1:a4:00:b0:ea:67:37:cd:dc:57:68:95:21:05:94:62:25:
         2c:e7:1b:b6:d6:e6:a6:15:b6:c3:94:38:e8:43:68:f4:2c:da:
         6d:2b:61:49:57:ef:82:d8:30:e7:ee:d6:2f:a6:8f:de:9a:53:
         d2:33:d4:03:55:df:4f:f9:2b:5a:ed:bc:f6:f0:32:b2:61:83:
         88:8e:59:97:cd:bc:2b:8f:13:a0:ac:a1:11:89:3e:5c:d7:46:
         83:06:09:cd:a0:da:1d:a7:16:7c:5c:1d:68:02:68:19:20:8f:
         be:16:55:32:31:e4:1c:ea:3d:10:88:16:75:13:11:04:28:a8:
         eb:42:87:54:6f:c1:40:4f:78:50:69:20:9d:22:98:13:9d:2f:
         92:a1:9f:d9:f9:24:c2:30:42:24:db:7f:7c:b6:80:21:67:de:
         7a:27:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:43 2026 by rpki-client