Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          i6LIMZ2v+NzDWq6C9lxHwr+7r693yAP1oxPh1T4j8zI=
Subject key identifier:   84:89:CE:62:05:ED:C8:98:BB:34:B7:06:91:20:3E:EA:C7:C3:81:93
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       019CACB54A3BE1442386331A9FCC58F9396B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          0359
Signing time:             Mon 02 Mar 2026 04:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:27 +0000
Files and hashes:         1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: wNNs+6Hk61swqEuMQeDFI0XN77jtQH20rH6i1hQfY3M=)
                          2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:4a:3b:e1:44:23:86:33:1a:9f:cc:58:f9:39:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: Mar  2 04:01:27 2026 GMT
            Not After : Mar  3 04:01:27 2026 GMT
        Subject: CN=8489ce6205edc898bb34b70691203eeac7c38193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:51:3b:43:00:e3:0b:95:01:15:62:ce:fa:
                    42:fc:aa:c6:9a:02:4f:a7:80:d3:b3:6c:16:a2:7b:
                    d8:fa:83:62:e8:26:d7:69:d2:d6:8b:8c:19:80:dc:
                    27:cb:b8:ba:e7:3d:2f:27:dd:7c:fe:dc:d2:fa:ca:
                    63:ee:e1:5f:b0:01:52:ce:14:ee:a3:3d:50:ab:37:
                    32:c7:c2:f3:64:66:1d:fc:ac:87:c0:bf:79:3d:07:
                    3a:56:43:09:52:72:3f:cc:29:b5:6d:0d:9f:a9:d2:
                    a2:02:45:69:97:70:06:b0:58:a3:9f:a4:32:53:14:
                    a1:55:32:cb:db:10:b6:b8:35:cc:c2:35:da:89:9e:
                    f7:50:c1:65:7a:52:e0:0a:ec:2e:c0:37:f5:71:20:
                    e3:4f:ea:3f:7e:fa:eb:18:94:fd:ed:d5:10:8c:1f:
                    40:f3:17:4f:fc:f2:3e:9a:c7:00:53:d1:2e:33:79:
                    fa:c2:c8:0d:d5:7e:7c:c2:e2:4d:bb:1d:1b:03:4d:
                    67:74:77:0a:68:08:57:da:a1:9f:82:76:ac:81:78:
                    b0:a1:4d:b1:3c:84:c5:61:c1:d6:19:af:9a:d8:06:
                    19:60:c5:79:a5:6e:5f:2f:c2:7f:02:a9:0a:77:82:
                    9f:72:66:0b:2d:dd:f5:ee:2f:a6:bf:b7:36:68:f7:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:89:CE:62:05:ED:C8:98:BB:34:B7:06:91:20:3E:EA:C7:C3:81:93
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:34:a7:5e:a9:6e:14:86:e1:91:f4:47:30:a2:9c:77:f3:49:
         f1:73:31:87:2c:53:9d:49:56:81:4c:f3:18:e6:eb:da:b6:c9:
         d0:01:9e:33:22:12:ef:c7:62:4c:b0:bd:71:91:0d:dc:dc:23:
         67:09:03:13:d9:8d:86:83:f9:b2:e4:64:65:ea:2c:2a:b7:6f:
         a2:2d:b3:1a:1d:a8:4c:37:6f:0f:b9:72:a5:f1:74:e7:a4:1c:
         0b:78:6d:78:fe:6c:ff:30:de:5b:e4:6a:0e:28:95:5d:92:0c:
         28:77:f6:d6:39:df:bd:f1:b3:68:fe:22:55:b3:df:06:51:4c:
         2d:9f:50:d2:bb:04:e6:b0:2b:8b:05:ce:02:98:33:a4:cf:18:
         a6:f5:2f:be:fb:21:7e:eb:5d:66:b3:2b:d9:ad:c2:00:bc:dc:
         47:44:f5:69:55:23:16:c4:51:67:00:07:28:44:3f:d5:1c:26:
         2d:86:2f:31:08:27:b2:49:ba:28:b7:61:4f:c0:90:f1:91:d3:
         e4:1b:35:d3:22:1d:6b:40:f8:ff:51:88:eb:96:fc:e5:95:ec:
         4b:b3:52:cc:30:41:02:86:4b:2a:41:d6:6c:be:61:76:84:03:
         2a:c2:05:3d:50:67:39:e2:ea:6f:26:4c:04:90:da:d6:be:68:
         c5:49:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:18 2026 by rpki-client