Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          i2t8msZsYRGXRNnhgDjojOQrrtAvhfClvOuEbOU3JnQ=
Subject key identifier:   DE:89:E8:2E:67:67:B1:26:D2:3D:74:77:A5:13:F7:AA:2D:4D:35:06
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       019CABD948B0DDDF9B19AAD2CB7DA36E09DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          11BB
Signing time:             Mon 02 Mar 2026 00:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:09 +0000
Files and hashes:         1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
                          2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: 3Ej727gOKhtDQhP7OiFOlG1wufm3CD4MZgF+uLp0W2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:48:b0:dd:df:9b:19:aa:d2:cb:7d:a3:6e:09:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Mar  2 00:01:09 2026 GMT
            Not After : Mar  3 00:01:09 2026 GMT
        Subject: CN=de89e82e6767b126d23d7477a513f7aa2d4d3506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:92:7a:c7:e6:e7:fd:54:17:ae:b9:74:41:80:
                    90:30:6e:07:f3:7f:04:57:4c:42:9d:fe:16:6b:be:
                    29:fb:ba:c7:7f:59:47:0e:db:c3:60:99:19:fe:9e:
                    56:d8:34:16:f5:22:51:09:81:8d:72:43:a0:18:f4:
                    3b:76:1a:f5:88:b2:d5:91:17:9d:52:7d:a2:f9:40:
                    b4:a0:f2:7a:1e:1d:f7:b2:87:66:fe:e0:ba:9f:dc:
                    bd:62:79:e2:a8:53:b5:29:81:c9:22:4f:8e:63:04:
                    aa:ed:74:ff:3d:2a:e4:39:3b:57:bf:a2:5a:8b:9c:
                    a6:a1:6e:41:b2:72:78:0f:67:a1:c3:1c:61:94:63:
                    2f:49:f6:3c:06:17:8c:a3:74:a1:2d:0b:7c:b9:2b:
                    18:87:8b:82:d6:74:26:11:69:3d:66:4f:1d:52:73:
                    9d:e2:fb:ab:d5:fc:f2:a9:7e:25:7f:a8:4a:14:99:
                    56:d6:6b:c5:4d:3e:53:ab:1c:3c:24:45:d2:85:1c:
                    55:8a:10:26:18:fe:d2:82:52:09:48:9c:b2:56:3e:
                    db:ae:1a:83:c6:37:d5:fd:eb:f1:d5:bb:d4:3e:04:
                    78:f1:06:ef:3f:46:4b:6e:b5:ee:73:d1:93:81:fb:
                    2a:da:00:d5:66:7c:3a:ab:ce:d2:d4:ee:40:88:ad:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:89:E8:2E:67:67:B1:26:D2:3D:74:77:A5:13:F7:AA:2D:4D:35:06
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:24:85:a8:fb:74:65:73:48:8d:80:25:2a:d2:03:06:77:
         3b:9c:b8:05:f0:8d:f1:fe:53:50:c1:e5:68:67:cb:64:72:0a:
         a0:c1:42:14:ca:0c:64:13:a8:5f:5b:e3:b7:21:57:24:9a:c2:
         e4:0d:16:23:f5:14:27:03:09:b8:ab:26:38:c1:5a:4f:5b:58:
         e5:a1:80:46:42:40:02:4a:20:12:8e:d9:08:cf:28:a8:8d:a0:
         5c:7e:b2:64:0a:ef:ba:1d:06:dc:66:e8:3a:af:34:5d:17:61:
         8f:c5:e0:39:71:6e:68:9a:4e:94:ec:0d:4e:dd:5f:10:d9:2b:
         6c:47:3f:63:70:a7:9c:f4:e1:54:c0:4a:ec:d3:eb:56:1a:05:
         1f:d8:28:f6:53:e3:db:16:3a:02:9f:43:ad:3c:e1:72:26:a7:
         fd:4a:74:42:ee:4c:50:86:40:c6:a7:e0:b4:33:fc:36:ab:a7:
         68:98:68:3b:59:e7:20:ff:7c:a2:b0:a3:31:9a:b7:c2:d0:a5:
         dc:61:87:0a:63:49:a3:14:24:f5:52:72:2a:11:e1:73:70:74:
         11:f2:b6:68:f4:e8:c8:8f:99:56:a3:15:99:66:d9:df:d4:d7:
         29:80:44:9d:c7:ad:49:b9:00:b5:c3:ca:c7:a8:20:ce:d8:29:
         2e:e7:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:20 2026 by rpki-client