Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          djZpHRHHtlgnrLd6QRzpX7vTDNHrmJGOaISeJ/fTuCc=
Subject key identifier:   10:FE:66:49:3B:89:EF:0A:E2:70:74:0A:1B:78:27:CA:0A:E0:91:00
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       019CA9EAF71AC0D18816010C05EB4B240E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 15:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:14 +0000
Files and hashes:         1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: CsmGVTrnzcU582fCBMgYbEDq/EBthR8Zniei3YPvYac=)
                          3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
                          4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
                          5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
                          6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:f7:1a:c0:d1:88:16:01:0c:05:eb:4b:24:0e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Mar  1 15:01:14 2026 GMT
            Not After : Mar  2 15:01:14 2026 GMT
        Subject: CN=10fe66493b89ef0ae270740a1b7827ca0ae09100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:5f:a1:c8:33:57:15:1b:97:e8:ff:cf:f8:
                    49:9a:32:0f:8c:a6:2d:54:0e:b2:7e:c6:4b:91:31:
                    d5:3b:b7:e5:44:1e:e4:7f:bf:91:59:ad:b7:62:a7:
                    76:27:30:27:7e:93:8a:ae:a1:c0:64:28:2f:34:85:
                    7f:d3:f3:82:7e:d2:56:c5:56:93:4d:29:5b:72:c0:
                    e3:cb:0f:bd:98:46:68:45:b7:75:1c:98:be:31:dc:
                    56:83:46:76:23:02:e3:f5:1f:16:41:3a:ed:53:c2:
                    5d:47:4b:fd:fd:df:fc:42:e6:f1:f8:67:5e:78:76:
                    66:c3:41:46:45:e4:e1:53:82:ef:0b:9b:09:6e:ec:
                    18:fb:8d:d5:b9:5c:85:ba:4e:99:d4:c0:72:2d:47:
                    45:15:ee:be:e8:3d:73:52:81:ff:1f:c6:32:e6:57:
                    1c:58:ad:02:14:98:10:d0:92:58:13:65:d1:73:fa:
                    60:aa:d0:5d:e4:e3:a2:71:d6:82:97:ed:26:27:1b:
                    44:eb:be:82:33:37:7f:56:59:bb:9a:31:59:ff:f1:
                    a3:7e:5d:a1:10:cf:da:51:43:5a:d4:a6:ef:11:9d:
                    e5:69:da:f8:df:a3:ba:c4:ca:fc:b6:d2:11:4f:c2:
                    39:09:13:8c:91:e0:50:ad:84:42:32:c0:c4:f0:cc:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:66:49:3B:89:EF:0A:E2:70:74:0A:1B:78:27:CA:0A:E0:91:00
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:dd:0f:dd:82:de:55:e9:d6:cf:70:8f:ff:f7:f5:b7:51:
         e7:86:c5:f9:5c:ac:fc:34:dd:f0:90:ff:4e:8a:d3:89:4e:ea:
         30:9a:33:88:71:5e:8e:43:23:20:20:28:e5:e1:22:3e:50:07:
         1b:be:94:41:24:9e:59:8c:92:bf:40:e5:db:d2:74:4c:01:a5:
         3e:a3:46:11:7b:ed:30:46:5c:38:cf:81:81:37:b0:2e:5f:e7:
         17:97:9c:c8:8d:b3:3b:e9:98:09:2f:52:b3:d3:d0:0a:c6:6c:
         50:d9:65:32:d2:ed:a8:4d:ca:40:8b:bb:f4:49:da:db:bf:8e:
         4a:dd:e3:a4:a5:83:02:05:b0:f5:ef:84:43:88:b3:88:18:ba:
         87:ac:20:ac:f1:1f:37:52:d0:e8:ec:7b:45:80:d2:6e:62:3e:
         e5:d1:31:ee:ef:af:b7:27:25:99:4b:56:10:b5:62:0e:78:b3:
         a8:c1:cb:a1:70:9f:d0:e3:e9:aa:f1:da:96:fa:08:06:a1:05:
         0c:c9:0e:f0:1f:90:84:2d:b8:02:3b:7b:7c:be:a3:ed:b2:d0:
         ae:5b:b3:53:ad:97:e5:a9:3d:4e:c4:ad:99:2b:25:87:e5:28:
         ef:70:fb:42:ec:e8:f7:d0:37:1b:30:0c:0c:49:5a:d8:77:90:
         c5:3a:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:43 2026 by rpki-client