Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
File:                     psCc_RV4gUqM0dgdyGyJD9X6hmE.mft (raw, json)
Hash identifier:          zPO0A3fyi/EaUtEWVY3MdUMWdidcK7oEraj4pdxyM2U=
Subject key identifier:   FC:67:7E:5B:82:79:41:38:F0:6C:A5:21:F2:FE:A8:F4:5D:4B:28:08
Authority key identifier: A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
Certificate issuer:       /CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
Certificate serial:       019CAB6BD3E1E8365E6519916B75472B0BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
Manifest number:          0B17
Signing time:             Sun 01 Mar 2026 22:01:36 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:36 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:36 +0000
Files and hashes:         1: 0X-8DIn3BuQjjBQ9eCsjsW8Dcg8.roa (hash: LbQ/hnkbU7PVWvL7lVNJeSAVtKBQkfLZPhP9e++JU6s=)
                          2: HgYWYODmi1RL9hSK5Clq3k8JEO8.roa (hash: 0TU1NUiw62UNP6/NP1DieKsIwti8CgEltP+KmYGgF7A=)
                          3: ffX3VsckZLc4-RcWXfaxE7WOdc0.roa (hash: gI5X7EBuAWJm9swpecj8XXe2ZApaNA07hJoO/xei8RE=)
                          4: hz7lj2eZQUoABeI9x4fVkCFHdyQ.roa (hash: xUeXDDyBDFWaWumwKndxvSVmNo5fikQ4qnOyoheblN0=)
                          5: psCc_RV4gUqM0dgdyGyJD9X6hmE.crl (hash: OPayrdcw618XPBNcelKQQ4KQvpXiumJjks2cOePAwvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:d3:e1:e8:36:5e:65:19:91:6b:75:47:2b:0b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
        Validity
            Not Before: Mar  1 22:01:36 2026 GMT
            Not After : Mar  2 22:01:36 2026 GMT
        Subject: CN=fc677e5b82794138f06ca521f2fea8f45d4b2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:9e:92:01:34:aa:ac:b2:9a:43:89:f3:ba:
                    3f:9c:d8:a2:49:32:b2:73:15:8e:bb:31:36:38:b8:
                    61:52:34:48:aa:9b:bb:70:aa:f6:44:25:1d:26:b6:
                    0f:85:5a:08:b4:3c:9c:26:e4:3d:8d:6a:ac:8e:b6:
                    e2:aa:5d:58:f7:18:4f:8e:9e:17:c8:6b:5c:25:b6:
                    56:b8:92:85:16:72:5c:95:c1:39:dd:75:9f:d4:d6:
                    6c:c2:fa:e8:48:b1:bc:a0:26:1d:f0:ae:05:6a:5c:
                    33:98:7b:62:5c:57:87:e3:76:d3:81:c7:20:b4:76:
                    e9:47:30:e1:e4:c1:a1:6b:ff:a7:0a:1b:fd:77:89:
                    6a:f8:50:b0:f7:83:20:38:25:cd:99:38:3b:46:b8:
                    8f:cd:58:cb:7a:8e:55:5f:da:ff:9c:05:e2:ce:da:
                    dc:c0:1f:90:5b:4e:c8:6d:86:47:42:3e:92:dd:e5:
                    19:cd:46:87:d5:d4:89:7f:27:0b:83:13:f8:95:b4:
                    5a:41:d7:94:dd:78:bf:95:e8:1e:c9:38:db:61:e4:
                    22:7d:c6:80:96:ba:76:96:05:20:06:66:0d:e4:98:
                    9e:aa:b7:34:48:87:a5:60:5e:36:0b:2d:cc:aa:b8:
                    18:b6:21:bd:89:90:98:a9:0a:4c:52:0b:b4:56:52:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:67:7E:5B:82:79:41:38:F0:6C:A5:21:F2:FE:A8:F4:5D:4B:28:08
            X509v3 Authority Key Identifier:
                keyid:A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:9c:c2:cd:c7:2e:4c:23:c4:92:d5:b9:4f:e7:32:36:61:
         72:19:02:b6:38:aa:fb:c9:1d:61:dc:fe:90:d1:8f:ca:43:9c:
         0f:31:aa:18:fe:5a:85:28:3a:f6:71:30:d4:3a:ad:74:29:1d:
         77:89:20:81:7c:61:99:4d:a9:87:c6:40:78:b0:02:50:09:00:
         de:00:a6:45:bb:9c:1b:b3:20:d1:74:20:8f:ed:2b:bf:3a:7c:
         8f:33:b2:58:c6:1a:ba:4e:0e:25:32:8a:9a:0e:40:c7:84:b5:
         de:65:88:64:23:d2:3f:5b:c8:c5:e0:88:cb:51:bb:29:ca:77:
         24:9f:0b:13:f8:4a:d1:6b:0b:83:7b:10:87:64:db:74:36:d7:
         48:49:aa:a9:a3:39:ef:25:86:6c:ee:60:92:84:b0:69:e1:6d:
         90:35:26:ff:21:dd:48:b0:90:28:3e:5f:37:ec:83:05:d2:c1:
         a2:0c:b8:35:bc:91:98:f5:ff:a9:f8:8c:44:1c:eb:5d:bc:04:
         ee:02:16:3f:d4:af:72:9a:84:e9:e4:fe:bd:04:3b:44:85:4d:
         04:76:64:45:72:98:94:38:c3:35:da:21:8e:6b:94:b5:2c:37:
         d0:82:1f:18:af:61:88:c3:11:68:01:5f:5f:63:5a:f6:3e:da:
         1b:9b:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:09 2026 by rpki-client