Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File:                     rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier:          Y8psb5dQj3AhtW1W60LT0U6eTgJ8B54Rnuyqi9Sskfg=
Subject key identifier:   71:26:2B:A6:D0:BD:BE:3F:C6:CD:98:0A:29:71:FE:DD:21:61:65:6A
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer:       /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial:       019CACB4E7AD2E2CB0EB5A860182C911DD83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number:          01B3
Signing time:             Mon 02 Mar 2026 04:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:02 +0000
Files and hashes:         1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=)
                          2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=)
                          3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=)
                          4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=)
                          5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: bGRONIeasSbT7E2F4Mh4v6KB+zKdnp03deZOaysH2z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:e7:ad:2e:2c:b0:eb:5a:86:01:82:c9:11:dd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
        Validity
            Not Before: Mar  2 04:01:02 2026 GMT
            Not After : Mar  3 04:01:02 2026 GMT
        Subject: CN=71262ba6d0bdbe3fc6cd980a2971fedd2161656a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:a3:87:31:ae:4a:e3:1d:76:9b:0b:a8:0a:
                    30:49:64:84:a5:49:76:ff:be:9c:4e:8c:7a:8e:8d:
                    99:40:12:b9:a4:ce:02:49:6b:19:fc:99:65:71:1b:
                    a3:a7:10:09:26:2a:e1:0b:67:e1:84:05:51:75:6c:
                    e1:32:0a:bf:7c:76:ef:5e:0e:03:5d:df:f9:17:87:
                    72:d4:67:9a:2f:4b:79:72:a2:85:86:fd:d2:d3:99:
                    84:6a:4b:d2:f2:c1:7c:6c:e3:aa:58:15:bf:1f:e4:
                    27:f2:8e:4b:1f:16:b8:80:6f:45:b0:84:43:68:77:
                    b5:79:16:a4:cd:e5:ef:d5:fb:23:63:7d:88:0f:ab:
                    44:97:20:c8:4b:0c:b5:6f:dd:f2:09:54:b4:6f:ef:
                    67:3f:65:92:ca:9e:12:0e:ec:d8:da:32:60:52:a5:
                    15:89:cf:a4:fd:ee:d3:da:c8:ba:56:dd:8c:91:62:
                    3f:66:88:51:3b:b3:36:83:ab:e9:f5:a7:02:2f:4c:
                    08:5b:d7:0b:d7:a0:64:d5:bc:5a:fe:c4:d3:82:80:
                    15:ad:1e:d9:81:b6:d5:e6:d8:1e:81:02:3c:e7:56:
                    ae:6a:0c:b1:02:94:f6:fe:98:22:06:44:88:3d:f7:
                    95:d1:ed:c0:1e:d3:ab:6e:e9:33:b3:0b:0c:3f:1f:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:2B:A6:D0:BD:BE:3F:C6:CD:98:0A:29:71:FE:DD:21:61:65:6A
            X509v3 Authority Key Identifier:
                keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:e5:97:f2:1a:f5:b7:b0:0f:ca:a0:e6:da:0e:bc:4d:09:
         28:63:92:c5:b1:bb:3e:e9:d3:60:66:51:10:c5:41:33:fb:dc:
         b7:3f:e6:81:2e:26:23:28:01:13:0b:db:8a:f6:0a:72:44:b5:
         ea:c2:e0:f5:22:fb:35:fc:87:8b:bd:54:2e:b0:9c:f6:e6:24:
         ab:e6:fa:1f:23:ff:fd:d8:4e:4e:43:5c:e1:be:82:18:03:c9:
         ea:20:10:42:90:b7:6e:40:bc:7f:c6:bb:8d:30:88:a4:42:f4:
         a7:05:32:d2:cc:44:54:4e:71:ea:5b:8e:97:e4:37:b2:86:5a:
         fd:ee:e6:d3:b8:79:ab:30:b3:5d:68:c6:45:34:63:8a:5f:e7:
         03:af:16:54:30:8a:5c:80:27:df:68:15:0e:c7:45:aa:1f:00:
         a8:95:71:53:ed:92:97:6f:a4:a2:4d:33:ab:3a:9c:ab:53:a2:
         fe:aa:28:f0:73:e8:41:c9:e9:e4:5c:78:69:95:6d:5d:ad:b9:
         38:14:46:1e:b5:9f:9c:53:db:f7:22:ae:42:ee:34:e8:f0:f4:
         30:69:df:b8:0d:40:9b:d7:fd:7c:55:6b:14:ad:14:72:7f:32:
         93:08:8d:85:59:22:d2:37:62:54:59:60:ba:ce:f3:1e:57:5c:
         e7:ad:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:02 2026 by rpki-client