Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File:                     _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier:          XYKUcLE+wXN6NUeDE7riuu3NM213qRUVs6Ul2H8H0tc=
Subject key identifier:   55:1D:DB:EB:51:FA:4D:D4:13:FF:45:DC:AC:F1:3C:9E:5F:32:A7:3C
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer:       /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial:       019CAAC672381B120C2B07C9BF796B596F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number:          0EF6
Signing time:             Sun 01 Mar 2026 19:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:57 +0000
Files and hashes:         1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=)
                          2: TcH4GIuktxSUfHtquYZnE0nBhtE.roa (hash: rpQl9MUfMf8qQcoJFxTK9nJpUXGjE7ncDisSQXNZN4E=)
                          3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: T/kqGEvc3gFeI/n7qdJmUgD/sP9Y91KkrnnsxEoQGqA=)
                          4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=)
                          5: nkfXYoc4Mcgj_WnSgw1MfRAkUv8.roa (hash: uTw63Gl3rRgs6l5JsMFtSBnpBCOYFjYiM97n8RknJaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:72:38:1b:12:0c:2b:07:c9:bf:79:6b:59:6f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
        Validity
            Not Before: Mar  1 19:00:57 2026 GMT
            Not After : Mar  2 19:00:57 2026 GMT
        Subject: CN=551ddbeb51fa4dd413ff45dcacf13c9e5f32a73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:8e:c0:c9:59:8e:b5:6d:3d:82:d0:29:b2:
                    4e:3a:e1:f1:d0:0d:f9:33:fc:53:1c:02:88:e4:ef:
                    fa:60:24:c6:bb:a1:28:ce:48:87:ac:0f:4d:1c:54:
                    58:bc:e8:46:ff:98:54:9f:96:9b:da:73:a1:41:00:
                    85:e6:18:eb:84:b7:71:21:01:4a:ed:bf:b4:20:f9:
                    94:33:2c:1d:d1:7b:fb:9f:84:e7:7c:b4:2e:23:03:
                    e5:14:db:ec:c1:95:29:84:92:96:94:c7:c6:58:8b:
                    ee:9b:88:d0:14:25:5d:ff:9a:09:5a:8d:fd:9e:49:
                    8d:b3:98:00:5b:44:e9:96:7d:87:3d:8a:15:c7:21:
                    fa:e6:db:12:06:d7:9b:f2:55:cf:07:9f:cf:f9:f1:
                    48:55:ee:c2:65:dc:8f:8c:6b:7b:b2:7c:e3:42:96:
                    52:1c:78:75:e5:9a:f4:fb:db:03:21:d5:b6:12:7a:
                    ad:cd:1f:2d:5f:44:eb:2b:3c:b6:1d:da:19:b3:6f:
                    c5:d8:f3:94:5b:80:77:60:30:06:11:06:7e:bc:e6:
                    96:59:50:5a:0b:47:e4:91:8a:fe:6d:9e:07:13:4d:
                    e5:2e:08:00:c4:44:59:8f:d6:24:dc:5e:c0:d6:69:
                    23:a0:2d:c5:23:4f:cb:bd:1c:9c:46:4d:60:7f:ec:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:DB:EB:51:FA:4D:D4:13:FF:45:DC:AC:F1:3C:9E:5F:32:A7:3C
            X509v3 Authority Key Identifier:
                keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:81:f8:b3:91:03:f3:84:14:09:2b:bd:3b:99:f8:ec:04:29:
         bd:ee:9f:8a:d0:00:87:02:c8:dd:f2:60:f2:8b:a6:0d:1e:a3:
         6e:65:69:13:ce:a9:dd:20:13:71:8f:d5:b0:fa:1e:66:fc:4f:
         4b:16:9d:c5:57:59:76:90:04:a7:2d:9f:73:63:05:bd:77:a7:
         c5:a1:17:d6:c3:31:15:5c:bc:e4:68:a3:bc:59:6b:d1:53:0c:
         70:22:83:61:d4:62:c5:22:e5:8c:bf:0d:a9:bd:09:18:a0:2c:
         51:1a:af:3d:a7:21:d6:1b:cb:00:1a:02:e2:7a:79:c2:40:fc:
         41:54:ed:68:03:f0:e4:7b:f6:63:0d:97:60:7f:80:10:90:d7:
         02:c5:79:7e:79:02:3b:68:27:eb:12:8a:b0:07:93:61:4a:da:
         06:7c:7a:2a:4c:5b:4f:14:38:59:44:d4:3c:ad:b7:9d:ba:65:
         97:73:9c:07:dd:f2:ba:b9:d4:13:8c:bb:84:a4:27:60:9d:fa:
         32:89:72:8e:23:c4:1f:3d:95:6b:3d:5d:d6:ba:f7:10:c2:58:
         ab:59:82:b0:ff:f7:49:bf:63:db:ba:93:fb:2b:f5:6e:2f:ab:
         02:db:94:60:78:7d:22:74:f1:b2:5d:df:af:e0:50:c6:62:ce:
         b0:35:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:46 2026 by rpki-client