Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          apBXbdZTrB7D31y0r/YfaoYxcixRaO+gUFIB8koROfc=
Subject key identifier:   11:86:6D:5F:82:E6:21:99:26:BB:91:5A:5D:9A:D2:F1:24:30:43:E6
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019CAB6B052329715621FE72163BCBB86071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          1204
Signing time:             Sun 01 Mar 2026 22:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:43 +0000
Files and hashes:         1: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: J6r3RGJr2aKCJKFWpuDxYA3Qi2AqP+701mMpPWu5whU=)
                          2: HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa (hash: rGZ8j3Yypq0spYgSmlQPy3xpKi1OQAliNPVd0/dnsVw=)
                          3: NdtOCJvzGmFZlmDg7mwNpBd1B_Q.roa (hash: W9vZQt0X+AIDjmeyVAUiJ2h6aMzNBj5GBkBeIxqmyoM=)
                          4: zb3M5sCfdcroGbb7sb_8fFyKbFk.roa (hash: DT+a2ocZ5cYF7PMlIn/Yq8jpDiPXnKsM/EWJpn65oWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:05:23:29:71:56:21:fe:72:16:3b:cb:b8:60:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Mar  1 22:00:43 2026 GMT
            Not After : Mar  2 22:00:43 2026 GMT
        Subject: CN=11866d5f82e6219926bb915a5d9ad2f1243043e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:cc:9d:d8:4c:42:25:ef:f0:11:a9:8c:db:
                    25:b4:2e:4b:0d:a7:91:95:d9:7f:d7:a1:bf:5d:c6:
                    e8:7d:ec:d4:42:53:14:c5:d1:48:3c:60:b1:7f:28:
                    7d:07:f4:13:35:10:b4:62:d8:83:d9:2c:a3:12:c6:
                    8c:2f:16:6d:f7:c3:ae:82:35:e3:ae:b8:ab:02:72:
                    01:29:da:f2:0e:7e:35:7f:c7:ba:b0:c4:9c:86:42:
                    5b:82:75:4f:cf:21:55:ea:7b:b4:c1:79:f8:9d:1a:
                    74:f1:51:1a:33:25:43:49:a7:7a:e1:cc:10:11:83:
                    dd:b4:85:51:28:77:79:bd:d6:e1:7f:cd:57:ba:af:
                    d3:e0:8e:2c:69:9e:b9:76:7f:35:f6:e7:ac:be:17:
                    42:87:51:cf:41:5d:1c:a5:2e:86:0c:ca:d2:1b:7a:
                    6a:2d:cb:a6:c1:95:ce:ac:a3:6f:fe:fe:54:7d:a9:
                    46:40:b4:72:03:bf:33:41:5c:97:02:d7:07:3b:ec:
                    b5:60:e1:b2:09:51:08:e2:77:16:f2:53:ca:42:6f:
                    a4:ed:b3:4b:56:ea:9b:17:e0:26:20:58:cd:e6:76:
                    46:67:2c:d9:3b:60:0d:4d:24:c0:82:52:19:03:40:
                    4d:bb:85:26:17:42:22:82:b0:4c:ed:ad:36:68:ba:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:6D:5F:82:E6:21:99:26:BB:91:5A:5D:9A:D2:F1:24:30:43:E6
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a3:76:1a:48:df:19:1a:d4:aa:4c:4f:52:02:cd:7c:f2:b2:
         46:cb:9c:91:ff:a3:f2:82:b9:30:81:3a:df:ec:3e:f1:fd:c5:
         c7:ff:12:80:8b:dd:58:84:2d:be:bf:31:3d:4f:ce:6c:5b:23:
         4d:3b:b9:f4:31:55:3b:8b:fa:4a:d2:10:30:da:0a:b2:b9:d6:
         d9:7f:b8:74:1b:82:5b:07:f6:c6:85:3e:10:5c:e3:c0:30:0b:
         01:d4:a2:73:df:51:68:b3:84:cc:9f:ce:53:7d:64:f1:34:00:
         97:40:36:ba:97:4f:18:7e:c2:66:7b:b0:ca:56:29:1f:3c:7c:
         c0:b6:a8:2c:df:b7:00:86:c8:f6:60:fa:d5:db:84:7c:d0:ab:
         39:f4:5a:5c:09:dd:e7:87:99:9b:11:7e:ef:24:07:98:79:f8:
         62:2b:b9:32:1f:c6:b5:2a:58:2a:24:46:a9:3a:b0:f7:3a:43:
         41:f0:df:df:5f:df:a2:2d:5c:11:17:96:a9:71:8f:be:cc:eb:
         80:aa:ee:81:12:a9:91:38:ce:57:b6:91:b4:44:50:d0:5f:7d:
         c8:61:93:ae:9d:b2:cf:0b:f5:46:1d:ff:53:f1:7a:9f:e0:be:
         15:92:da:4c:21:57:22:14:f7:55:c6:4b:b3:6c:d1:37:04:06:
         45:e7:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:27:48 2026 by rpki-client