Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File:                     _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier:          9qCViVPDivRHdQ5n64PHMbrpacX+V5Cb7VacrtNuwTs=
Subject key identifier:   F2:ED:A3:5F:71:6C:15:99:C3:C0:94:A7:46:C7:9B:96:CA:E8:9F:2A
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer:       /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial:       019CABD9BFEC4E9A3F660AA97D878C070DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number:          15FC
Signing time:             Mon 02 Mar 2026 00:01:40 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:40 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:40 +0000
Files and hashes:         1: OBdFDRVC595sAnyB_0VmTmVJFWo.roa (hash: 28ttAFOYw0/3k0gD+y/7PAKtDPtrhHQLrlbHUNtynS0=)
                          2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: UOVK7tGvbccXB6VK746f/EJqwhmC7s1rksP2M9odHH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:bf:ec:4e:9a:3f:66:0a:a9:7d:87:8c:07:0d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
        Validity
            Not Before: Mar  2 00:01:40 2026 GMT
            Not After : Mar  3 00:01:40 2026 GMT
        Subject: CN=f2eda35f716c1599c3c094a746c79b96cae89f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:9b:95:91:94:ac:9c:33:a9:5b:e4:2a:7d:
                    84:c4:76:37:e1:32:89:87:dc:3c:a5:6f:3f:33:27:
                    1f:1d:e6:c7:75:cd:f9:f9:1b:fa:43:85:b9:4f:6a:
                    e3:0e:d5:d0:2a:f2:46:05:9d:96:01:9d:9d:a0:da:
                    78:e4:59:9d:71:d0:2f:cd:b4:4c:32:ff:6b:a1:6a:
                    6e:24:f3:35:ad:ca:62:25:80:87:54:62:b9:17:2f:
                    fd:bb:e0:c4:ca:ff:63:02:23:10:ec:cc:c3:57:36:
                    79:7e:ef:ae:2d:96:9c:33:cf:a6:95:23:6b:79:e7:
                    db:b6:2d:5a:e8:4d:ce:c0:17:87:9e:21:17:d3:80:
                    e2:e2:5f:5c:9c:7d:b4:bd:ff:43:33:d3:9b:51:25:
                    28:ad:8e:89:61:e9:a2:f0:92:e8:09:35:c1:25:09:
                    c9:9f:6a:c3:96:ab:89:68:80:c1:a0:47:e3:b9:73:
                    35:28:b4:cb:b4:73:bd:d2:5f:4c:18:ab:00:b5:f7:
                    54:b4:a0:11:11:dd:6e:cc:ef:e5:93:50:53:c6:b9:
                    bd:21:e2:1d:9e:90:1e:67:2a:84:64:c2:d5:c7:cc:
                    56:40:2b:90:5a:04:ed:45:0e:f3:27:91:c6:9e:a5:
                    c8:da:ba:8a:2a:58:44:e9:54:7d:d4:ef:b6:2e:27:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:A3:5F:71:6C:15:99:C3:C0:94:A7:46:C7:9B:96:CA:E8:9F:2A
            X509v3 Authority Key Identifier:
                keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:4c:ef:e4:82:1a:af:6e:0b:f3:4c:52:2c:35:a2:b5:0c:
         b3:1b:11:98:54:dd:05:67:d4:4c:64:b5:d3:3d:64:c0:2c:65:
         11:f6:2d:89:dc:c8:b5:e9:e8:97:ec:2e:46:ce:16:04:87:72:
         75:ae:6b:78:09:76:c3:42:d2:57:c9:d8:74:ae:59:d6:f6:f9:
         f0:a4:e9:86:50:3d:3f:b5:03:d9:ae:f6:8d:1e:22:89:03:a9:
         f1:64:db:b3:03:8c:ec:fc:04:53:a5:cf:3d:ef:14:06:15:14:
         e0:a8:ec:64:cb:9c:28:5b:58:5b:42:9d:c3:3a:a3:27:b1:8c:
         10:9e:c1:f0:16:32:fc:86:3b:6b:5a:3c:36:6b:c2:00:33:1e:
         39:cb:85:47:55:1f:a5:c3:8a:4b:22:07:6f:93:31:2b:79:d5:
         31:d0:e4:e8:c8:76:54:33:55:6d:78:4e:2a:7c:1a:e0:fe:dd:
         c8:eb:e2:f8:a7:b4:84:49:db:44:20:30:1a:6d:fb:e0:e5:f9:
         88:76:07:52:cf:ed:11:a3:92:d0:cf:07:2d:da:90:fb:7b:9f:
         f7:85:fb:93:61:20:93:fb:6f:43:c0:de:2f:bc:3a:a2:f6:3a:
         de:72:f0:2a:e7:b2:9f:dc:9e:44:a6:a6:7e:74:21:e9:a2:3c:
         29:e1:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:41 2026 by rpki-client