Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
File:                     FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json)
Hash identifier:          ywI2dLk5OrQzXifJGEMEO94HZ+8ctl5vGwIl3//PLtM=
Subject key identifier:   85:4D:0F:83:26:D1:BE:68:BB:6A:20:6B:71:32:CF:77:60:01:27:A4
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Certificate issuer:       /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial:       019CA97CD0ED1C1533EC7E3C8B42AC872A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
Manifest number:          13F7
Signing time:             Sun 01 Mar 2026 13:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:55 +0000
Files and hashes:         1: 0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa (hash: 3Aof+qdhL+cCGNe+hdtvcBXfSgz4KVlL9GS8+nK3Uo0=)
                          2: 1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa (hash: wO9W+0kJ3rqdKQX4KDV5BoK4htjNlrERtnZ8OUi4AyI=)
                          3: 36fFRH4YUOLzCfa4FpCOqwCaGnY.roa (hash: w2yC99pJq/G0WFmIu7IRCBEE47mJ+HQkIbalFcg4HKA=)
                          4: 3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa (hash: 2zWvHVgpKzwH8CHKZuYT/C7gjaJxfSRA4wNx6aFsjNQ=)
                          5: 6WfI7AreDwm37Fgy62Hm_HjVPIM.roa (hash: G4TpNMLm1OunCQZoJ8h7rE+E9esfv1Zs5yi2Rv7QUx0=)
                          6: B4wYxFww_X_iDCxVsYXjZhIjnK4.roa (hash: zX0gMbFt42KJdtED5J978ZIE/4qbULnV//fheUtafIs=)
                          7: E4moO9CLoHXgoV6vrJXJQ_jxi14.roa (hash: FEDRVix5XZV3UfT/XzbBUvsMscccpO5HTNPW06itXAo=)
                          8: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: RXnj5GDuKzvX1JZGoZFtiJt0yecGVnCuhKSkT+MqY1Y=)
                          9: Gyy1MCCByROZBRXIY7QoJ1Lfx2Y.roa (hash: AjP6dUUnXVUHe2mbkVU2A0GKTeThVmR/SN82MGw/Wog=)
                          10: IazmGoMrfFtTUWHrMtD4VT_a5xM.roa (hash: mmhAv5nf447caUzE6DBRCP1tjF3/Qt3PMJlp3sCBJV0=)
                          11: MGVQ1Pe4Bbjksh7RxAPXKFi-gns.roa (hash: oq6oMuIa+sh8k3n0YT4iJn2bOtl8Pkfdnf7oFH+xs4w=)
                          12: PxwyiW3Tjn8aEe60HunYWfpdc1w.roa (hash: +CB624H0aM2+6WeM1dGm74K9HqVEUvwZQ+MNE6guhOM=)
                          13: Zn2F_GITaJUFXYczVsLI2VOyKdU.roa (hash: CEg2vq6S7OzyDS7MVIrVNzF15tpZ2z6WrwU8c/VyAWA=)
                          14: aojI_JsDEIxXnOz4PZxsAnlJa3o.roa (hash: PJic4it1tGPs9tX49/CnUprlHognZespLJ+dZ7W4/TY=)
                          15: bCOP39p472Lk-lkmW7HPI2seXtc.roa (hash: LFvAsIyeBJmUq7QEzxWZPznh8Eot8p72RV5zfPuvMYU=)
                          16: dPcC6P2Ub94KhMYnU4O-c5682vk.roa (hash: g/ztEAIPkKUjRwwmBVeCjJEZxo+DRe9x5QOVITmEu/0=)
                          17: nv3XJW4SHiYOrTQVrxnoavOvwJ0.roa (hash: FchrHLVpTQQsdpH665V5pFmlLVhCeW2ycJA4HdohxTU=)
                          18: okXnT74qywzO1FrHvIGeTAiBrgc.roa (hash: 74KAMVLnQqkDmufjZpA13514bwfaHFLUW/T2GwWCXtU=)
                          19: sSsX9lAuTzO9VldLxQMeK-5adaY.roa (hash: iur8WTZ1EdrXyR3WNetyiFe4lZT9wDb3S5el30eYdBE=)
                          20: vrcNcGLKzc4126aByqCn10xR7hw.roa (hash: BJLHLu3Ei5L0mbo/lskPrmlmi+TRNkPtsukA9ptks7A=)
                          21: wLYTFgarc0-ql_9yDw0jet-6cdU.roa (hash: p6vpMWbNqzC01Ai5TEGReU7vIhGcrJ1tvziK4csCWpE=)
                          22: zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa (hash: YXMs2R7ig2C7zGo2CvCc44PcqUIofxwBlRKFLyt5A3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:d0:ed:1c:15:33:ec:7e:3c:8b:42:ac:87:2a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
        Validity
            Not Before: Mar  1 13:00:55 2026 GMT
            Not After : Mar  2 13:00:55 2026 GMT
        Subject: CN=854d0f8326d1be68bb6a206b7132cf77600127a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:19:d2:42:97:18:3f:97:28:c1:4f:8f:ae:
                    3d:79:5b:b4:95:9a:e5:18:2f:b8:f0:f8:54:b1:51:
                    f0:e5:5f:fc:65:b7:29:7f:71:ed:cd:77:df:57:2b:
                    91:08:ec:49:59:98:a2:d8:03:b0:9c:5c:12:00:99:
                    62:eb:22:e3:cf:be:29:d8:bc:93:f1:d1:89:68:4b:
                    bc:af:50:9a:b4:d1:72:c7:09:24:42:ae:76:f8:16:
                    8b:8f:a4:44:22:57:04:44:b8:7d:88:cf:95:10:72:
                    86:78:10:e5:c5:4c:88:31:60:b9:c5:bb:c7:ad:72:
                    e0:22:32:8f:c6:20:d7:8c:b1:0e:b4:86:93:b7:b4:
                    06:47:87:23:86:c1:e8:55:87:b0:22:43:c7:da:88:
                    e0:6f:d0:9f:bd:b0:31:eb:53:21:95:e4:47:74:1e:
                    43:cd:6f:7f:9f:7f:96:f3:5a:63:f6:fe:20:a2:08:
                    ed:b5:c7:f1:d3:b2:2b:b2:73:8f:0b:46:94:02:6a:
                    57:07:5d:35:db:0b:2a:e4:55:e1:c8:5e:9d:79:f3:
                    09:e3:d3:aa:64:b5:97:57:bc:07:fe:0d:dd:15:3b:
                    77:ee:bb:a3:3d:f5:ad:94:6f:a9:f3:ce:0a:5f:9f:
                    70:56:cb:8c:2e:36:b7:93:a9:8e:f5:98:d4:ff:93:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4D:0F:83:26:D1:BE:68:BB:6A:20:6B:71:32:CF:77:60:01:27:A4
            X509v3 Authority Key Identifier:
                keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:45:e5:55:22:c3:a4:4c:39:c0:c5:27:b5:4a:6b:1a:1f:4a:
         28:ef:ce:10:f3:2e:08:cc:c6:2a:d1:59:de:01:d7:55:5c:6b:
         c2:9e:f9:9c:0b:ef:ea:bb:72:6e:36:5c:95:ff:c6:c1:96:8f:
         af:1c:36:f6:56:e9:73:32:a1:60:4e:e3:f2:07:07:05:b3:6f:
         b1:f9:19:f9:61:4a:44:8b:93:c9:1b:a5:53:9d:16:38:71:94:
         d7:f6:bf:5c:b7:5a:b0:58:9c:7e:ce:4c:31:5a:ec:f1:7e:23:
         7b:a7:da:3a:55:58:a1:9d:7d:7f:b7:10:ab:8a:d5:5b:74:ba:
         4f:a3:15:47:49:e8:ae:3c:a8:3e:81:e2:43:a3:e5:98:24:06:
         58:fe:c3:a9:7f:fd:c0:46:95:bb:56:cf:1b:47:a8:6f:fc:f9:
         76:ca:a1:eb:a1:e2:ce:91:26:c1:26:5c:1c:00:d4:35:44:46:
         79:80:82:f8:1b:d5:28:d1:5e:4f:73:5b:6c:8d:05:1d:77:2e:
         79:ca:b6:51:dc:fe:49:9c:f6:dc:67:22:ab:38:fb:e9:c9:f6:
         0a:1c:17:dd:6b:02:3f:ab:32:13:d6:20:2e:8f:0c:bc:cb:6c:
         d3:d3:a9:95:60:44:15:ff:9f:61:fc:b5:cd:77:b1:04:7d:6a:
         17:b8:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:29 2026 by rpki-client