Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File:                     xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier:          Z7X4QO45bcSI56eCm2rzT71udGUA6MTbNunEyh0HBL8=
Subject key identifier:   00:F1:80:31:CF:5A:F1:21:97:D4:A9:E8:5A:98:26:B0:5C:68:C3:7C
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer:       /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial:       019CABA1D5DEA3041294F7061FC44DFD13BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number:          07B2
Signing time:             Sun 01 Mar 2026 23:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:35 +0000
Files and hashes:         1: mI2eJ7owlng-a2RTBGJSB2dC0xc.roa (hash: Mtyhcf44MGwkMCoMpod+PD8wPTtDOMEI8pvJgEO7E5k=)
                          2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: kZAlFlDAXl+ep39u5pJKT1Xp4bb1uCiAKmaYQ1JQH2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:d5:de:a3:04:12:94:f7:06:1f:c4:4d:fd:13:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
        Validity
            Not Before: Mar  1 23:00:35 2026 GMT
            Not After : Mar  2 23:00:35 2026 GMT
        Subject: CN=00f18031cf5af12197d4a9e85a9826b05c68c37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:6c:3f:cd:65:1b:6a:67:e4:58:bd:6d:ab:
                    62:2d:b1:fd:0e:6c:f3:00:78:18:c8:78:d7:27:07:
                    42:59:93:73:19:6a:61:f3:66:e8:95:dd:e8:19:95:
                    90:9c:c3:c8:44:58:d9:22:c3:14:82:56:ee:73:7d:
                    56:9c:44:d7:7a:fe:f5:3c:4d:82:c0:af:f7:54:4c:
                    5c:da:74:29:4f:be:ec:c9:c4:b4:c0:4d:8f:d6:89:
                    ba:99:ac:78:2d:80:2d:a6:d8:f3:30:77:21:11:0f:
                    23:38:b9:31:91:8e:cc:0e:6d:77:19:d1:aa:c9:02:
                    db:e3:6b:db:5e:ae:19:f3:4e:e1:b5:d4:65:9f:f8:
                    65:73:a8:ef:2b:85:5b:c2:7d:76:1d:51:5b:86:e8:
                    12:76:b2:c2:a9:d8:b5:ce:0e:7e:38:d1:a5:7a:95:
                    1a:04:c4:62:cb:c8:38:c7:5f:e1:3f:bf:24:c1:f6:
                    3a:03:fc:fc:15:e4:47:5a:08:73:09:5e:5c:61:f7:
                    e2:3f:a2:df:0f:da:bf:d4:0c:8e:99:50:2b:00:92:
                    39:a0:66:be:9c:0f:8a:d1:83:8b:fd:47:89:08:bd:
                    73:6b:a6:49:1e:29:cb:f1:e9:c3:ec:05:7b:fe:37:
                    47:b3:5c:9c:51:7c:49:51:96:6a:15:46:4d:1d:88:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F1:80:31:CF:5A:F1:21:97:D4:A9:E8:5A:98:26:B0:5C:68:C3:7C
            X509v3 Authority Key Identifier:
                keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:1a:62:8f:be:ab:19:0d:ce:79:37:3f:b7:d6:67:49:b2:
         df:a2:ca:dc:40:7d:67:9f:a7:e6:fa:c3:e2:96:8d:56:da:f2:
         b5:8f:c3:8d:73:43:10:55:13:e8:93:be:80:c4:6a:df:49:73:
         35:ca:a9:4d:d0:66:cb:1f:74:33:7e:2e:b3:6e:8b:1d:34:81:
         ac:ec:c2:21:71:cc:0e:f1:0d:0d:73:a8:63:a1:3a:bf:dd:a5:
         5d:69:c2:27:9d:93:47:80:c4:16:07:91:f1:1e:4d:8c:f6:c5:
         b7:9f:b2:fb:86:a7:37:61:0a:7b:67:d0:cf:50:bf:ed:c0:34:
         81:d8:fc:b9:1b:2b:9c:0d:2e:19:d6:ea:8c:3d:8c:25:a6:d6:
         68:6e:19:6a:92:63:aa:6d:ab:9c:92:4f:ac:a2:85:03:3d:48:
         5c:f4:20:a1:c1:fd:22:b2:21:28:0d:af:23:18:b4:b6:b4:89:
         9a:37:7e:cf:ce:22:e1:8b:e3:52:e2:51:30:7a:d4:fe:14:ae:
         52:f4:c4:24:bd:57:26:6e:a1:dc:32:7e:4f:31:7d:74:0d:4b:
         0e:1e:fe:9e:cb:49:ff:3e:40:0c:51:a4:d4:3c:de:2e:72:05:
         63:a0:d3:78:66:af:7e:97:cc:a1:01:91:1c:16:fe:51:79:3b:
         14:46:22:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodXeowQSlPcGH8RN/RO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2M2JlNzUzNzQ2NzhkYjNhMDQ5ZjZhM2VmMmFmYWI3MGQ0
ZjZmMjcwHhcNMjYwMzAxMjMwMDM1WhcNMjYwMzAyMjMwMDM1WjAzMTEwLwYDVQQD
EygwMGYxODAzMWNmNWFmMTIxOTdkNGE5ZTg1YTk4MjZiMDVjNjhjMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhZsP81lG2pn5Fi9batiLbH9Dmzz
AHgYyHjXJwdCWZNzGWph82bold3oGZWQnMPIRFjZIsMUglbuc31WnETXev71PE2C
wK/3VExc2nQpT77sycS0wE2P1om6max4LYAtptjzMHchEQ8jOLkxkY7MDm13GdGq
yQLb42vbXq4Z807htdRln/hlc6jvK4Vbwn12HVFbhugSdrLCqdi1zg5+ONGlepUa
BMRiy8g4x1/hP78kwfY6A/z8FeRHWghzCV5cYffiP6LfD9q/1AyOmVArAJI5oGa+
nA+K0YOL/UeJCL1za6ZJHinL8enD7AV7/jdHs1ycUXxJUZZqFUZNHYh1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADxgDHPWvEhl9Sp6FqYJrBcaMN8MB8GA1UdIwQY
MBaAFMY751N0Z42zoEn2o+8q+rcNT28nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQt
NmIzYjg2N2JkMjMyLzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQtNmIzYjg2N2JkMjMy
LzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMMaYo++
qxkNznk3P7fWZ0my36LK3EB9Z5+n5vrD4paNVtrytY/DjXNDEFUT6JO+gMRq30lz
NcqpTdBmyx90M34us26LHTSBrOzCIXHMDvENDXOoY6E6v92lXWnCJ52TR4DEFgeR
8R5NjPbFt5+y+4anN2EKe2fQz1C/7cA0gdj8uRsrnA0uGdbqjD2MJabWaG4ZapJj
qm2rnJJPrKKFAz1IXPQgocH9IrIhKA2vIxi0trSJmjd+z84i4YvjUuJRMHrU/hSu
UvTEJL1XJm6h3DJ+TzF9dA1LDh7+nstJ/z5ADFGk1DzeLnIFY6DTeGavfpfMoQGR
HBb+UXk7FEYiAg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:34 2026 by rpki-client