Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          o77ICZBKynOplN80c6rzd/QaiKfmqgC5fysMeBP+utc=
Subject key identifier:   70:8E:32:BF:F1:5A:F7:19:B3:F2:D2:9C:4B:C6:95:F6:01:B2:16:24
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       019CAAFD65B66D36FDA6E51C0D79E91AF41B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          1894
Signing time:             Sun 01 Mar 2026 20:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:59 +0000
Files and hashes:         1: 5Sb_HPOKAsSdsUjzw140834viv8.roa (hash: dbP1i30GcVhpjOAzB6T5uPHGgdW2XcNsW1MsPzGhr80=)
                          2: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: bMtIxkG25hY7AAmPtKYA6vyIkCL+DtMCr3LJtuKHFzM=)
                          3: 8BqmL7UcN2qfYbL66pHli8JsIzY.roa (hash: pCciA+077UGjAkiMs81qTKCGq54F1nIKWaxa6mwVk+s=)
                          4: TxQ0636d2LwXH2VImycVLeg_GD4.roa (hash: Cd3bRS1ODPCLQTHK/bSamcQr7JmtV/0UDeqKAMmW1WI=)
                          5: a2XY2UXf90IY1VBTinejxs4Lai4.roa (hash: gW9fcMOQIykl/4g6Q5f2diEfBFcQxaR7rcpmHjIDqIU=)
                          6: b1DIfi1TIgisD2mj9mIudUDky2Q.roa (hash: 8/djcR5s1h3BO25UT9u9sv+7vkujrEwwNUUxglccUCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:65:b6:6d:36:fd:a6:e5:1c:0d:79:e9:1a:f4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Mar  1 20:00:59 2026 GMT
            Not After : Mar  2 20:00:59 2026 GMT
        Subject: CN=708e32bff15af719b3f2d29c4bc695f601b21624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:72:fa:1f:fb:ac:35:9b:ea:57:2d:03:51:dc:
                    42:2b:ec:2f:bd:5f:99:d7:1c:f7:72:f8:78:20:78:
                    39:46:c8:58:2b:28:e3:a1:5f:e1:92:6e:1c:af:37:
                    a4:40:33:ba:ca:3e:b2:ea:31:ad:14:39:ad:14:76:
                    b4:3b:4d:10:01:64:ce:d6:5f:b4:9b:2c:d4:97:f2:
                    02:91:33:c3:2d:92:93:56:3f:39:68:ff:fd:36:f5:
                    aa:a8:7c:21:65:39:f5:49:bf:fd:1e:cb:09:ee:f9:
                    71:db:82:37:f4:cd:e9:89:b0:9e:26:fc:af:26:15:
                    a2:aa:f8:b6:b8:c1:e1:c3:0b:5f:c2:72:d9:59:b3:
                    0f:85:ab:ba:c6:42:41:a7:6f:61:bc:61:9b:dc:17:
                    a6:3d:12:33:fe:95:46:f1:b7:1e:33:e9:2f:30:48:
                    c8:c5:97:79:3d:39:88:2c:3c:30:3e:26:7b:40:23:
                    f3:03:d9:99:00:70:53:1c:88:64:14:d7:98:c4:2e:
                    d1:ba:70:f7:43:6c:c0:54:4d:76:fa:61:1a:9f:2d:
                    f2:1d:f9:2b:6c:b0:88:3a:b4:ae:c5:35:5e:b7:bb:
                    6c:e3:10:be:0a:ce:36:6b:31:f9:d2:47:74:ee:86:
                    cd:77:94:4c:57:f3:5c:ae:9b:00:16:7c:32:60:e2:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:32:BF:F1:5A:F7:19:B3:F2:D2:9C:4B:C6:95:F6:01:B2:16:24
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:45:e2:96:30:e4:30:70:19:19:38:b1:dd:0f:50:88:5e:e7:
         98:7c:53:1c:c4:63:d6:23:f9:58:a6:3f:89:4c:d9:29:74:83:
         1c:a7:b5:52:31:02:b9:25:a9:55:da:15:85:50:87:d0:0d:67:
         4c:d7:a4:11:57:7e:56:24:ad:db:ed:97:c8:5c:4e:cc:06:a3:
         a4:00:33:ee:69:02:10:e3:72:5d:44:f9:81:30:58:7d:5b:cc:
         20:7b:01:64:c0:79:44:86:ba:5a:81:e8:ad:e6:f4:eb:41:d3:
         e3:f4:08:db:ec:92:db:88:ee:95:b8:b9:75:95:1d:1c:cc:f6:
         62:6c:99:27:81:b5:70:d3:6a:18:7c:af:5e:59:db:ea:6b:5f:
         08:d8:ce:69:d4:65:2c:93:0f:fa:ce:e0:3c:a7:2f:cc:a2:26:
         11:22:ef:4f:ee:39:29:85:37:d7:c8:88:b8:18:97:05:fd:c3:
         18:de:e1:5c:bc:de:e9:41:5c:94:f0:23:7b:3b:bc:80:be:91:
         5d:28:37:2a:41:81:f9:ca:f5:b4:e6:b3:85:eb:97:15:e9:45:
         38:39:ab:4a:b4:61:9a:b9:46:78:48:47:f9:f7:d5:49:32:5b:
         96:77:55:b1:17:65:c5:3d:93:28:88:9f:66:d9:fd:46:05:65:
         a4:3a:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:08 2026 by rpki-client