Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          YT5e7NMwU3sUQI40Fiq8bYQpZWw85bFsg1scoO3Ts18=
Subject key identifier:   96:EE:F6:70:89:04:C0:94:B4:3A:5B:FB:4D:75:31:6C:9D:3B:18:59
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       019CABA23E9C11E23A6B6BC1950580A4394B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 23:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:02 +0000
Files and hashes:         1: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: f5dNH01DD1e3GnTPZTgoiEiaQC6041McNXdqZqKua78=)
                          2: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (hash: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE=)
                          3: _kAyTCQof302et37HvM6mt9jgEM.roa (hash: 424VJZvw+ZmGcQi0r8Ayp33km0iNLVdVw38YU4HDjGU=)
                          4: wxi4D1t6N5E-A8MwJ6AwFD8d4kM.roa (hash: 391+SiltY2IpnHulRAud0EhzjNpX6Vgh8CqJXOeyKCI=)
                          5: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (hash: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:3e:9c:11:e2:3a:6b:6b:c1:95:05:80:a4:39:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Mar  1 23:01:02 2026 GMT
            Not After : Mar  2 23:01:02 2026 GMT
        Subject: CN=96eef6708904c094b43a5bfb4d75316c9d3b1859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:b0:84:8b:11:35:17:cf:2b:2b:12:dd:fc:
                    42:3d:fd:e1:e1:e7:42:e3:23:2d:f2:9a:46:57:98:
                    10:e6:0e:f6:1a:6c:54:b8:4d:21:33:3a:db:f8:79:
                    bd:50:be:4b:75:82:bc:84:7b:63:01:f8:4a:d1:1c:
                    35:4d:66:86:01:08:8f:eb:2e:dc:a9:bf:fd:f3:28:
                    38:f8:d3:16:24:c5:cf:45:99:ff:2d:f9:c2:7b:c7:
                    48:7c:dd:84:47:ef:db:f2:0d:a3:00:bc:98:ec:51:
                    45:a6:c2:17:ac:98:22:46:49:96:36:67:a2:c2:68:
                    73:3c:a6:5d:bf:dc:40:a1:31:66:49:b6:f3:66:3a:
                    c6:98:af:21:66:5a:f3:c8:7d:3f:f5:0f:49:56:f4:
                    ea:6b:84:7f:7d:1c:95:c0:ae:01:de:36:c7:40:c3:
                    0b:28:17:82:59:09:2e:8b:e1:eb:da:de:4a:d5:fb:
                    a5:99:ca:9c:a5:ef:cc:7a:a4:f6:a6:fb:2f:f0:f0:
                    ee:49:f4:45:80:a1:26:5c:7b:1a:55:06:dc:4c:62:
                    e3:94:8e:30:52:84:12:ad:f9:a4:e4:e1:ea:1b:fe:
                    26:0f:6e:1a:3f:5a:d2:9b:1b:5f:e5:08:83:0d:47:
                    0d:ff:48:7e:ee:32:89:5b:ea:c2:b7:9b:64:06:b0:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EE:F6:70:89:04:C0:94:B4:3A:5B:FB:4D:75:31:6C:9D:3B:18:59
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:74:33:94:ff:62:0c:02:29:6d:15:c2:77:19:a2:1d:5a:6c:
         2e:3d:38:df:6f:19:52:d1:b3:1f:a3:e5:8a:72:1f:cc:ab:b8:
         8d:4a:26:de:da:2d:8b:b5:0f:b4:ab:aa:ea:22:b4:82:cc:e5:
         ff:44:7a:d8:cb:8a:b5:63:0c:62:e1:0e:d1:91:fb:94:39:e6:
         01:4a:a0:d1:e4:89:4d:3b:f9:17:62:c4:91:f4:54:00:e9:ec:
         ef:22:59:1b:7c:53:41:8d:99:44:97:6a:fd:2f:6a:dd:a3:78:
         bb:c5:f2:12:8a:35:33:93:81:e9:e1:05:59:c9:b9:ad:2c:dc:
         6f:e1:f8:3f:62:5d:b3:e4:9b:a9:37:12:7d:2e:94:54:91:ab:
         ea:cd:bd:0b:a6:ad:13:3e:52:da:65:03:a1:8f:eb:7f:a8:7f:
         71:97:57:91:41:53:ed:61:ff:a8:62:85:ae:69:e0:26:1c:e5:
         3f:23:ae:81:ae:af:1c:d4:1a:6c:c4:d3:51:66:bb:7a:45:a2:
         e9:fa:c1:26:1f:b5:fe:99:9a:d8:9f:ce:4d:8a:80:ec:8a:e2:
         d5:ff:db:b9:72:ef:4b:4d:a6:6a:45:4d:95:ee:e1:7d:26:d2:
         11:10:57:c1:4f:38:e7:8c:94:a9:70:7f:0c:d6:70:1d:5a:8a:
         b0:10:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:42 2026 by rpki-client