Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File:                     7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier:          pvbqchBexEryqnkR2e9eoJCNjoxSLiB9nUqi+WC4gxI=
Subject key identifier:   D2:56:14:A6:F6:14:5B:42:BD:F6:56:DE:57:BB:54:58:E8:64:E8:95
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer:       /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial:       019CAC469AEC9B80E9C843B4F3C1722B9EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number:          0CBF
Signing time:             Mon 02 Mar 2026 02:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:34 +0000
Files and hashes:         1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: JKtVvm+nDwjM/QTXz4/tRx/Sfgt4qC3yg5JDvtxVjQ8=)
                          2: FPqdZZMf-fAPrlSDgNZhOHhHZxU.roa (hash: 3JadQ2sVOsTDIpy9yP5IPOoHewm11RGCjoRS/5qYd6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:9a:ec:9b:80:e9:c8:43:b4:f3:c1:72:2b:9e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
        Validity
            Not Before: Mar  2 02:00:34 2026 GMT
            Not After : Mar  3 02:00:34 2026 GMT
        Subject: CN=d25614a6f6145b42bdf656de57bb5458e864e895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:65:0b:29:f6:bf:c2:7e:49:34:57:6a:75:
                    ed:7f:46:34:94:a6:22:e2:4c:ba:87:36:62:90:b8:
                    c0:33:57:b5:ca:12:45:08:bd:48:84:0e:74:2e:4b:
                    3b:36:9d:83:9e:90:4e:c2:98:23:8b:d8:24:15:75:
                    9d:b3:7c:e6:e7:74:49:95:21:2d:d8:3c:3f:28:b9:
                    f7:19:b3:6a:ef:2e:93:30:89:0f:58:6f:13:43:be:
                    be:bc:1e:d3:e5:6f:0a:76:fc:85:53:0c:d3:54:e6:
                    a3:f2:47:a8:39:ce:8c:f2:9f:75:9e:33:ae:88:3d:
                    1d:db:21:97:37:f4:5a:e5:52:5b:ea:98:f0:88:6e:
                    fd:ec:55:f9:1c:c6:bd:01:f6:8c:f9:1d:1e:76:66:
                    9f:18:79:3f:9f:ea:38:58:c5:aa:55:77:e2:b7:1e:
                    37:c0:62:72:40:19:d0:38:56:8f:94:51:1d:6d:76:
                    d3:c6:0d:5e:9d:f1:87:93:05:c8:f1:29:43:b8:da:
                    f2:43:c6:0f:1b:3a:20:c1:86:35:c1:fc:4d:c7:9b:
                    37:8d:57:4d:52:93:57:43:5a:d4:30:9e:52:50:fe:
                    66:3e:80:60:76:18:03:8e:6a:f8:0b:36:a9:bf:d9:
                    2c:db:97:c8:03:95:f1:28:2e:a7:2c:e9:2e:19:d7:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:56:14:A6:F6:14:5B:42:BD:F6:56:DE:57:BB:54:58:E8:64:E8:95
            X509v3 Authority Key Identifier:
                keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:96:83:40:08:68:83:a6:1e:7c:0c:24:30:23:90:9b:ea:77:
         9c:c9:17:55:4e:21:46:ee:a2:1b:06:3b:6a:fe:3c:5c:6f:ca:
         c7:8f:ed:80:a0:86:89:c9:42:10:de:7d:b7:93:99:13:59:d2:
         f6:83:7d:70:85:40:a1:97:49:93:d5:00:46:3b:80:b9:ba:9e:
         25:33:10:00:b4:d4:3f:b7:f0:02:08:3d:17:d9:7c:22:74:de:
         52:8f:56:48:dc:73:ca:bb:14:7d:53:9f:2b:a6:c5:63:0c:9a:
         36:2d:b0:1b:ee:f3:3e:00:18:34:c5:fc:38:c6:f2:33:fb:7a:
         e2:bb:1a:4e:da:6b:bf:d7:7e:63:61:48:85:87:6c:41:77:ba:
         bc:39:bf:27:8f:87:b8:d8:3e:14:69:f7:3a:73:d0:f1:7c:d0:
         69:4b:f3:fd:8f:08:b3:b5:bc:49:2d:c5:31:a2:ad:94:6d:e9:
         43:9e:b0:ad:2d:3c:e2:91:ca:7b:ad:c9:8b:f9:42:7c:77:4b:
         a0:8c:99:57:65:0f:3f:e9:8b:84:4e:a4:a7:db:95:51:f4:b1:
         88:d3:58:71:79:3c:2b:db:b1:46:ed:b2:ec:68:7e:a0:f7:1d:
         98:fc:e1:02:b6:5b:9e:e7:f9:7d:d9:37:df:86:71:33:90:c1:
         5a:e1:40:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:16 2026 by rpki-client