Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          o/Xt3hobxG2csSpCmiIqlhgtvbKX75bcosDsZcjP4To=
Subject key identifier:   47:6A:87:B6:7D:14:43:89:A4:19:D3:EA:6E:3D:48:6B:F6:5F:22:FD
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       019CACEB974EC66E8D035BBAF79F9CBF8407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          17C7
Signing time:             Mon 02 Mar 2026 05:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:46 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: wPfdfh/qKH/ZgyraQoFu5/dVwiZ9jtMpLfnu6E/ft8k=)
                          2: XTqrU8Fe3dyCsrhN-j7VCGJxXio.roa (hash: f4c8Huch2WTliXq5MFgPvjqV6741k9rGMrHBDUOfaY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:97:4e:c6:6e:8d:03:5b:ba:f7:9f:9c:bf:84:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Mar  2 05:00:46 2026 GMT
            Not After : Mar  3 05:00:46 2026 GMT
        Subject: CN=476a87b67d144389a419d3ea6e3d486bf65f22fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:16:bd:5d:19:f0:63:c3:ab:ef:0f:b5:10:
                    8b:c4:e2:1c:4d:02:c8:02:91:3c:00:f8:4f:a1:97:
                    a9:1c:b5:2a:42:00:39:84:c0:12:61:8e:54:36:4e:
                    bb:5a:1b:da:e8:a8:86:4d:62:ee:13:22:95:41:90:
                    07:f9:ba:22:02:8c:89:d0:fa:a9:17:c2:b3:d4:a8:
                    9a:43:45:3f:e7:70:a7:c2:38:29:b2:70:16:69:3b:
                    54:14:e5:47:b6:35:b1:90:d3:7a:d8:58:69:f1:e7:
                    16:c8:61:3b:b5:5f:fe:eb:f9:57:26:25:5c:26:e8:
                    2f:1a:e7:72:ee:07:11:da:db:f4:08:f3:66:45:33:
                    6b:81:e5:61:8e:e7:d5:e6:53:11:57:76:51:2a:48:
                    12:df:87:21:a1:00:22:5b:13:d4:25:87:f5:ef:ae:
                    d7:fe:44:86:52:bb:97:e1:96:52:d1:90:fe:fe:fc:
                    3f:8c:3c:3c:be:e5:38:d7:1c:6b:d8:a4:fe:b0:2e:
                    ab:3b:5a:71:83:29:f7:4c:cd:7d:ff:95:d8:58:d5:
                    88:a2:a7:b4:07:e1:67:9d:0b:0a:f9:d9:85:d8:2f:
                    04:f1:0d:35:6e:35:75:43:99:6c:43:74:a1:9f:c6:
                    5c:5b:dd:63:c4:54:cd:3c:d1:5a:18:1e:8e:4a:ea:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:87:B6:7D:14:43:89:A4:19:D3:EA:6E:3D:48:6B:F6:5F:22:FD
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:39:11:25:58:62:3e:23:7d:27:3f:7a:8f:fc:86:2c:bf:
         8c:9a:3e:a7:2a:0c:37:b4:7a:a3:96:6e:0d:8f:65:f4:b9:17:
         ae:05:fd:c2:1d:3c:c9:0f:ca:ec:d2:95:b1:39:df:09:ca:b0:
         9f:7a:84:5a:11:91:a3:29:b0:1c:39:98:cc:0f:ed:61:10:e4:
         30:46:59:92:71:5e:84:4a:ff:54:70:c3:bf:d8:a2:0d:c9:b5:
         40:35:6b:90:a1:af:b9:81:83:32:2b:93:92:8e:e2:c8:84:fd:
         62:15:83:8e:cd:ae:09:ed:f3:1d:28:15:bc:5b:8c:16:96:0b:
         7f:99:aa:b3:85:fe:07:85:54:2d:4a:5a:5b:2c:8c:36:87:d6:
         14:19:69:e2:89:ac:4d:f6:37:24:f7:1b:63:72:cd:3b:29:79:
         64:76:46:71:4d:18:8e:5d:d0:3b:97:a5:a0:51:f8:46:ef:b7:
         75:dd:bd:f3:d4:2b:b3:9d:4b:b6:40:51:7b:bc:46:f6:57:ca:
         da:ae:75:c1:d5:bc:28:01:fa:88:31:48:0a:68:95:88:d4:96:
         24:69:ec:86:36:12:c2:ac:fe:99:d9:6e:0e:f7:e4:de:35:06:
         77:97:69:1c:51:b2:91:18:88:11:26:91:dc:15:f0:b3:96:3d:
         98:8a:ef:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys65dOxm6NA1u695+cv4QHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZmUzOTAwZTE0MWMzYjE2OWEzY2NjYjM1NTdiY2NlZjI4
OTVlODUwHhcNMjYwMzAyMDUwMDQ2WhcNMjYwMzAzMDUwMDQ2WjAzMTEwLwYDVQQD
Eyg0NzZhODdiNjdkMTQ0Mzg5YTQxOWQzZWE2ZTNkNDg2YmY2NWYyMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17AWvV0Z8GPDq+8PtRCLxOIcTQLI
ApE8APhPoZepHLUqQgA5hMASYY5UNk67Whva6KiGTWLuEyKVQZAH+boiAoyJ0Pqp
F8Kz1KiaQ0U/53CnwjgpsnAWaTtUFOVHtjWxkNN62Fhp8ecWyGE7tV/+6/lXJiVc
JugvGudy7gcR2tv0CPNmRTNrgeVhjufV5lMRV3ZRKkgS34choQAiWxPUJYf1767X
/kSGUruX4ZZS0ZD+/vw/jDw8vuU41xxr2KT+sC6rO1pxgyn3TM19/5XYWNWIoqe0
B+FnnQsK+dmF2C8E8Q01bjV1Q5lsQ3Shn8ZcW91jxFTNPNFaGB6OSuooyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdqh7Z9FEOJpBnT6m49SGv2XyL9MB8GA1UdIwQY
MBaAFBH+OQDhQcOxaaPMyzVXvM7yiV6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEt
Y2UxYThkYzk0MDQ4LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEtY2UxYThkYzk0MDQ4
LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoP05ESVY
Yj4jfSc/eo/8hiy/jJo+pyoMN7R6o5ZuDY9l9LkXrgX9wh08yQ/K7NKVsTnfCcqw
n3qEWhGRoymwHDmYzA/tYRDkMEZZknFehEr/VHDDv9iiDcm1QDVrkKGvuYGDMiuT
ko7iyIT9YhWDjs2uCe3zHSgVvFuMFpYLf5mqs4X+B4VULUpaWyyMNofWFBlp4oms
TfY3JPcbY3LNOyl5ZHZGcU0Yjl3QO5eloFH4Ru+3dd2989Qrs51LtkBRe7xG9lfK
2q51wdW8KAH6iDFICmiViNSWJGnshjYSwqz+mdluDvfk3jUGd5dpHFGykRiIESaR
3BXws5Y9mIrvww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:10 2026 by rpki-client