Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          6uwAuzZJaIsL9OX8uojHEm3WiaXrbvo5wVMaDiunvtw=
Subject key identifier:   7A:8F:B2:A1:09:60:C1:9D:C7:0F:F0:CE:54:4A:BB:61:E8:91:8E:30
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       019CAC46EC39B67E32492BE4742A69646969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          120B
Signing time:             Mon 02 Mar 2026 02:00:54 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:54 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:54 +0000
Files and hashes:         1: 1-s2FwRU1cILMfQySWQfwcbHn_7o.roa (hash: UgSoVXkhi39b02jH0/DTm5YU1hz+Ulacw53OQOOrWw0=)
                          2: 2IHxfDPgXpqFUuW2HHMtTesRlVk.roa (hash: 6i0KTZ22dHSsBD0sAIXWyUQ8dif7FeqnVvrlTF59RFs=)
                          3: 4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa (hash: XPr5OKAgKFKe1eZm26Sq5h71zoMCowi3Bq7tv1xOx7I=)
                          4: IxunR-Pdcuvk1jm6CIfNmD9FR0A.roa (hash: /ZeIN8hMhU2WBWfg67KgPG/YjL9Vb0bRB9lW2bQsIk8=)
                          5: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: fswg5wMgmxPiD+RQT3BmI5COlu56LOnj6a/I4lfg21M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:ec:39:b6:7e:32:49:2b:e4:74:2a:69:64:69:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Mar  2 02:00:54 2026 GMT
            Not After : Mar  3 02:00:54 2026 GMT
        Subject: CN=7a8fb2a10960c19dc70ff0ce544abb61e8918e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c5:f1:c8:cf:ed:25:f7:5c:67:9a:f9:ef:fb:
                    4c:41:72:85:a8:9e:2e:11:41:e5:58:da:c6:b7:a8:
                    3f:17:f4:08:b6:52:91:75:10:3c:62:4b:05:44:6c:
                    10:1c:60:20:5e:98:d2:3c:cc:6f:b0:e9:e4:6b:8d:
                    2b:c2:7d:80:7a:6c:67:27:fe:b7:34:6f:75:5a:1a:
                    ff:57:49:40:df:3e:0f:39:58:a4:82:40:08:e4:dd:
                    7a:d3:d8:2b:c4:fe:9e:65:57:f9:bf:8f:f7:6d:dc:
                    ca:93:48:fe:8c:13:7c:7a:03:21:63:f2:74:59:67:
                    9c:fc:de:c7:0d:24:f7:d2:68:e2:3c:fa:6a:9a:f2:
                    92:a4:b5:31:3c:da:a4:33:09:ad:85:c7:da:92:fd:
                    cf:64:17:6e:ca:85:7e:be:75:63:1a:de:25:d4:25:
                    7e:61:08:22:ab:e6:77:65:30:d7:f4:59:34:2b:ff:
                    f1:16:b9:66:e0:4f:1a:16:7f:94:73:62:bb:66:a6:
                    5f:69:6a:0b:bd:85:71:ba:25:c7:d9:93:1f:14:de:
                    9d:e7:93:9e:68:5a:12:1a:de:68:fd:ef:d0:41:9c:
                    19:09:bd:c7:04:b6:10:42:7f:73:13:e6:5b:a9:09:
                    52:2b:3a:fa:51:9f:06:8f:bd:db:22:db:e0:9d:4e:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:B2:A1:09:60:C1:9D:C7:0F:F0:CE:54:4A:BB:61:E8:91:8E:30
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:08:23:0f:54:c0:31:ab:3e:4c:51:28:6d:27:70:29:46:fc:
         ba:84:01:b6:1e:5a:46:9d:cb:81:4a:57:8d:39:f4:d2:9e:2e:
         02:21:ce:ed:15:21:0f:21:d2:7b:b8:3f:c4:0d:90:2f:e9:7a:
         a0:86:86:85:5e:8a:79:fa:e1:a2:b9:cb:3f:7d:36:6d:32:ce:
         f6:2c:22:b0:28:44:dd:73:53:b2:4a:21:3a:01:4a:52:3b:97:
         57:60:31:be:a3:d4:16:37:02:2c:d9:8b:4a:3c:eb:67:0e:11:
         cc:08:10:d7:75:ae:54:50:e6:cc:5b:5d:db:3a:01:1d:da:b6:
         b0:b0:90:ff:b1:3f:79:8a:7a:f0:7f:f3:47:36:bf:29:37:e0:
         29:4b:84:dd:d4:31:ee:34:3b:f2:41:dc:56:67:68:4d:43:c9:
         74:4d:f6:e3:49:a1:69:58:e3:ce:90:de:21:56:b6:60:bd:97:
         f1:22:8b:09:8e:38:ad:5c:94:13:b2:a5:dc:5a:0e:42:f4:19:
         1d:28:45:02:13:f1:38:83:b6:d2:71:05:78:1c:8d:b4:9d:f5:
         e6:4b:23:a9:84:28:bc:46:53:b3:eb:cd:68:b2:88:9c:05:41:
         bb:2e:80:3c:f3:27:b5:65:a6:19:8c:40:b3:78:1e:c3:7e:d2:
         81:aa:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:55 2026 by rpki-client