Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File:                     9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier:          D7GPLgwoB3jecQCcDSUpWYI1/coBuMzxNQrrZm2gXdY=
Subject key identifier:   57:BA:02:21:ED:F3:C5:12:71:6B:5B:61:B7:99:A7:78:81:CA:CE:B7
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer:       /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial:       019CAAC6B8790AFF3E0BCB67DA0BE996EE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number:          0D63
Signing time:             Sun 01 Mar 2026 19:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:15 +0000
Files and hashes:         1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
                          2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: itoMyur6Tyjc2uBC20S/kONv6vbf5dx8sfLOe/It3Hs=)
                          3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:b8:79:0a:ff:3e:0b:cb:67:da:0b:e9:96:ee:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
        Validity
            Not Before: Mar  1 19:01:15 2026 GMT
            Not After : Mar  2 19:01:15 2026 GMT
        Subject: CN=57ba0221edf3c512716b5b61b799a77881caceb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:75:4f:08:31:18:21:55:e0:6b:c7:2b:be:
                    5b:e8:6d:84:1b:b3:30:2b:4f:34:a8:e2:b0:dd:46:
                    93:e9:f8:11:c3:68:21:0b:41:ab:9f:f6:78:00:53:
                    1c:70:f7:bc:1d:dd:93:2f:02:fc:ab:e4:ff:6a:08:
                    5c:f9:d7:1c:c3:5a:84:87:42:2d:de:95:9f:0b:41:
                    90:a4:29:c9:0b:79:af:cc:62:43:6a:8d:47:3e:27:
                    f3:02:70:9a:95:a1:16:3f:6d:ba:e4:7f:ef:a4:ea:
                    bc:a8:15:4f:2e:1a:7d:a4:19:6b:8c:f4:1e:08:1a:
                    31:73:a2:15:60:e3:08:41:43:50:5b:c7:0c:31:85:
                    6c:59:1b:b1:60:90:7f:8f:ff:a4:e8:4f:80:6f:a1:
                    f1:25:96:0c:8b:a5:84:ea:73:21:2a:0b:d0:8a:49:
                    21:43:9a:43:f8:99:41:b1:28:53:b6:37:70:9d:e8:
                    be:91:27:8b:30:f5:ce:a8:4b:95:44:28:e3:81:ec:
                    be:4b:5f:57:2b:07:89:53:fd:93:02:04:fc:1a:ae:
                    b9:bd:99:72:97:fc:0b:ce:0f:55:e9:ec:11:34:f3:
                    6a:79:d5:59:f2:c6:8f:d4:76:cf:50:66:70:ab:e6:
                    77:1b:8e:46:9e:56:10:87:9d:92:23:cf:60:87:d0:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BA:02:21:ED:F3:C5:12:71:6B:5B:61:B7:99:A7:78:81:CA:CE:B7
            X509v3 Authority Key Identifier:
                keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:08:46:58:4f:d7:ed:32:cd:a9:c4:ba:31:d4:95:6f:d6:
         51:49:81:d4:b9:82:d9:7b:ba:87:e1:72:f4:66:5b:79:d3:b3:
         f2:48:2a:c2:25:ce:dd:4e:c1:e2:7e:24:2a:dc:2b:f5:5b:ee:
         11:d3:eb:3f:52:b3:a0:68:7e:1f:f8:f4:78:1e:a9:84:28:b9:
         64:5a:4c:3c:ed:9f:0f:a8:63:71:d6:88:00:1a:a8:fd:65:28:
         68:b8:ea:6a:83:63:f3:f6:dc:73:fa:6e:be:fe:df:08:01:89:
         22:62:3f:29:49:ec:b0:38:41:44:34:8c:d9:17:0b:b9:7e:b4:
         98:2a:13:c8:df:7a:22:a8:be:b8:ab:79:18:41:72:fb:60:bb:
         bd:f5:7b:7f:7d:c4:59:7c:fe:b8:63:e1:55:14:b4:88:02:86:
         03:bb:cf:95:fe:26:8d:71:5a:f7:af:a1:96:c1:99:f2:9a:63:
         e3:15:ef:1e:bd:38:17:6f:67:ab:8a:ec:f4:ee:5a:09:1f:26:
         d2:da:17:7b:d3:fe:cb:f3:d0:44:e6:c4:ed:ca:9f:f3:f0:34:
         5d:c8:d9:4c:13:ce:f2:c3:67:97:a1:3c:8f:07:da:39:9e:7a:
         31:4b:ae:9c:be:97:dd:ca:1b:77:6f:9d:cb:34:b8:44:0d:09:
         cf:b1:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:21 2026 by rpki-client