Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          BYDgiw69901ZoXIOJCdRfrCc2V2nMYue08a1V372HMs=
Subject key identifier:   82:0A:61:C5:BB:C5:51:49:76:1D:DA:10:64:9D:78:B0:75:BF:A7:0F
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019CACEBBDA0E0F9147252D692458B5D3446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          04B6
Signing time:             Mon 02 Mar 2026 05:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:56 +0000
Files and hashes:         1: 13lETM7dYwgkukJoWApUFl8dJuI.roa (hash: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4=)
                          2: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (hash: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI=)
                          3: KVEesZy60JcmrCD9X0Zw8ckitl8.roa (hash: LDsra63f6peITAW/vE5Lx25+kAf2+irA29kJov0WXy0=)
                          4: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (hash: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0=)
                          5: dYPKia158SIrrNF4l9j5f3SItUA.roa (hash: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas=)
                          6: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: kRITYXWuKRIrCm2tMCv/rV3NGbiO786Xf1dfc0To8T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:bd:a0:e0:f9:14:72:52:d6:92:45:8b:5d:34:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Mar  2 05:00:56 2026 GMT
            Not After : Mar  3 05:00:56 2026 GMT
        Subject: CN=820a61c5bbc55149761dda10649d78b075bfa70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:53:d3:8a:36:ff:46:0d:fa:e8:31:07:ad:17:
                    f4:60:8c:eb:49:f3:de:c1:1d:78:a5:76:69:21:5f:
                    75:eb:b1:54:ea:dd:5a:9c:fb:1c:e1:f2:d5:c3:71:
                    21:47:11:42:2c:98:3a:da:22:56:1a:4d:d9:b7:71:
                    30:18:b1:f8:b2:ce:56:55:e0:4b:06:fa:c0:d0:bf:
                    d7:1a:f5:6b:bb:e9:e1:33:1c:4b:7a:be:e9:11:89:
                    1e:5b:53:d1:54:e2:59:9b:1e:4e:e1:f1:75:1f:11:
                    1a:80:bd:a4:71:06:80:1c:49:f8:9d:bc:bd:a8:d4:
                    71:61:e0:ce:89:33:db:9e:a7:db:04:29:24:2d:3f:
                    9b:d7:20:07:b2:9b:76:0d:45:a6:9d:05:d0:b2:99:
                    ae:bc:26:1d:fd:6f:15:f6:5a:0f:62:21:ae:ed:cf:
                    4e:5f:62:3d:8b:15:9e:ef:39:e4:d3:aa:09:7e:7f:
                    c6:b1:50:47:4e:c2:c7:f2:34:16:dd:2f:d4:c7:e8:
                    78:e3:cf:5a:76:1d:47:1f:a3:a3:05:8a:83:72:10:
                    db:77:37:e6:1d:47:df:1b:01:d0:53:97:44:41:9c:
                    19:b6:85:57:0a:2b:eb:c1:cd:e1:18:14:29:9b:94:
                    a3:8d:5f:46:40:d4:34:09:e2:84:b1:28:77:7e:d7:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0A:61:C5:BB:C5:51:49:76:1D:DA:10:64:9D:78:B0:75:BF:A7:0F
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:81:71:d8:a5:b5:92:11:06:c3:d2:bb:f0:c1:16:20:29:d1:
         fd:17:a4:80:08:66:e2:09:7c:42:57:b4:75:56:1f:e1:33:36:
         7a:29:9e:0d:65:84:e9:82:36:a4:03:c0:76:af:05:48:cf:0a:
         cc:35:67:74:5e:5e:10:18:68:ec:46:18:22:7f:4a:9d:48:2a:
         08:ea:cc:40:fa:56:d2:44:f0:81:dc:a5:cf:40:bf:39:92:ed:
         91:16:72:ea:c0:cc:3b:d8:e6:40:e8:63:4d:63:81:15:c3:1e:
         8a:06:e7:47:61:89:48:d6:94:60:0f:c6:b9:ed:f9:2d:ca:b3:
         71:b0:a1:25:70:74:3c:ba:fd:93:52:65:ae:98:8f:41:d5:af:
         84:1c:1b:72:31:29:23:31:f2:6c:b0:c1:59:dd:79:7b:f0:6a:
         0d:73:ea:40:15:20:aa:7f:6f:f6:8b:71:93:ee:0e:db:37:54:
         73:15:e6:75:f4:15:64:fe:4a:02:4d:80:e9:cf:8a:0b:db:3b:
         45:88:9c:6e:06:c9:d1:5c:af:3d:06:54:c5:2c:ce:cc:0f:ae:
         bf:f0:46:44:c9:b4:c9:0a:ad:46:70:3d:a7:44:4b:bd:5d:39:
         3a:c7:17:0a:9c:ac:97:d1:a9:61:a7:15:c1:c9:ba:02:8c:28:
         c4:51:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:45 2026 by rpki-client