Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          64U7DpZTZKlU6e89RbOmydFi9rmh5cDEPxxg9lwRU3Q=
Subject key identifier:   3A:87:99:D0:6B:5D:50:CF:8F:A7:33:7B:52:38:4E:6F:91:E6:4B:B1
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       019CAD90B64BC0405879D98353C0422850EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          118F
Signing time:             Mon 02 Mar 2026 08:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:07 +0000
Files and hashes:         1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
                          2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
                          3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
                          4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=)
                          5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: 0f8dbI7RGJH1+rv3s7jNNLtj4/I0JlNpbQFwSC5qnUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:b6:4b:c0:40:58:79:d9:83:53:c0:42:28:50:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Mar  2 08:01:07 2026 GMT
            Not After : Mar  3 08:01:07 2026 GMT
        Subject: CN=3a8799d06b5d50cf8fa7337b52384e6f91e64bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:f4:19:c6:bd:c6:39:b6:34:66:da:63:38:
                    7d:e3:15:41:37:ba:2a:01:60:64:98:76:5d:a5:1b:
                    70:8b:67:82:a2:ae:c0:1c:51:c6:f7:7e:43:00:d8:
                    fc:26:a1:43:da:27:6c:1f:5f:bb:79:bc:e9:55:38:
                    57:19:e8:a6:bc:2c:52:0c:cb:48:2a:53:3b:6b:07:
                    f9:ed:dd:ec:a0:09:2c:0a:1f:f2:b9:e3:c4:55:f3:
                    ca:5a:57:35:9b:8e:3c:ed:3b:3b:e0:7e:91:f6:8c:
                    d0:3b:95:70:ab:a4:cb:d5:16:32:57:79:2c:dc:4c:
                    5d:47:15:02:36:c1:d0:a1:e9:bc:37:12:45:be:81:
                    ad:7d:fa:dd:c6:83:46:5d:bc:10:9e:c2:1c:ad:a3:
                    a8:b1:51:81:fb:03:ba:58:00:57:d5:51:17:a6:b2:
                    22:9f:f0:77:0d:77:1b:ab:17:47:b4:1b:f5:66:b1:
                    93:6e:f1:66:7a:3a:63:e2:fc:b3:ea:7d:be:77:2e:
                    57:46:77:b8:e8:6c:73:2a:d6:48:a8:f5:cc:26:c9:
                    27:0e:ca:4f:6b:52:2b:dd:ec:01:64:79:e5:bb:5d:
                    c4:c7:9b:e9:cb:49:59:e7:a1:3f:4c:f6:ca:fb:ae:
                    a5:0f:51:cd:76:10:e1:37:b7:b2:d3:9c:44:15:3f:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:99:D0:6B:5D:50:CF:8F:A7:33:7B:52:38:4E:6F:91:E6:4B:B1
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:01:fb:50:90:bf:c6:b9:db:ce:32:c9:15:56:b0:b7:84:69:
         d0:ef:59:83:f0:40:10:67:57:c8:41:3e:89:23:c8:5d:76:79:
         61:c4:b1:38:f7:62:04:2c:9c:2d:45:ec:9b:2f:19:1f:2b:ce:
         de:48:5f:90:e4:6a:ea:ee:6e:a9:46:e4:b1:e0:5a:0e:79:4a:
         37:e6:36:b8:52:8a:15:d2:d0:c5:b5:a2:c3:62:88:95:57:2c:
         af:83:f2:33:5f:5b:4d:46:da:35:57:f0:a7:b2:b1:21:05:b2:
         c6:47:9f:be:7f:73:cf:8b:fd:66:2e:b0:ff:77:77:f4:0c:4b:
         29:92:9d:a8:cb:ba:a5:8e:4e:1f:1b:ad:88:90:33:9b:0c:84:
         6a:d7:73:48:94:2c:05:d2:2b:3e:c6:d0:f6:cf:33:89:e1:da:
         13:10:1e:61:60:58:08:14:c3:73:e2:e1:3e:96:3e:ba:22:d0:
         66:22:a4:9e:36:2a:e5:f2:5a:ae:2d:b7:e6:c9:ce:ca:5c:a7:
         08:a3:7e:d9:65:c7:36:e8:f9:79:35:a2:9f:8f:b3:d8:eb:06:
         97:48:c3:35:93:34:f8:2b:e8:d5:46:9c:12:ab:ff:1e:7c:ed:
         d4:6f:c9:0a:25:77:24:6d:57:c9:b1:de:fe:41:99:de:10:c5:
         a4:f3:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:41 2026 by rpki-client