Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File:                     9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier:          aQ6VcGnf+1cMza6wLAmU1g3uUkEgP1J2pUrk2+JPKLQ=
Subject key identifier:   CB:CC:AD:2E:DE:33:B1:11:0D:E6:C3:F0:76:6F:36:F9:62:46:CC:62
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer:       /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial:       019CAD22E4A4B376895938AED982B1C7BF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number:          1306
Signing time:             Mon 02 Mar 2026 06:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:10 +0000
Files and hashes:         1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: jWLItKLQLCO6ufNApNWt3pd3HEQIOQCMbbakXKj4M64=)
                          2: bvCBuuEdxAUjZ43AaqObXsCRP24.roa (hash: +knVgbiUviDOgcpEQ9q1n1I2+704D2tY8YWzgF0kEqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:e4:a4:b3:76:89:59:38:ae:d9:82:b1:c7:bf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
        Validity
            Not Before: Mar  2 06:01:10 2026 GMT
            Not After : Mar  3 06:01:10 2026 GMT
        Subject: CN=cbccad2ede33b1110de6c3f0766f36f96246cc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:89:5d:5f:4c:45:9f:09:ba:6c:89:d6:5c:bf:
                    ad:4c:d8:41:68:35:da:a0:e5:0c:69:50:e5:5f:df:
                    50:ac:98:c3:2d:7b:ef:d7:b9:b7:b3:b9:b3:02:5b:
                    16:60:cb:35:51:9e:c2:d7:62:81:61:3b:91:b6:99:
                    bd:29:9c:7f:a9:0d:ec:c9:95:7f:7e:5d:e3:3f:ef:
                    5c:fe:1b:81:b4:d5:84:11:8c:b6:dd:42:4e:19:f0:
                    ba:41:68:93:db:d1:13:cd:a1:9f:b5:af:48:3e:8f:
                    18:b4:84:e4:e9:1d:81:40:74:6b:99:11:a4:b4:c7:
                    2a:d1:50:e2:f3:fd:de:26:0f:3d:fe:5b:49:5f:cc:
                    9c:95:3c:86:67:74:1f:e3:f4:66:15:b5:9a:d6:17:
                    99:40:8c:44:54:90:87:c9:1e:73:38:31:09:17:2e:
                    47:4f:48:3a:46:6c:65:79:26:2e:62:8f:71:95:d1:
                    7b:b9:f4:7a:f0:64:c5:d4:5d:9c:4c:58:ed:c2:aa:
                    78:ed:5c:54:dc:9f:7b:bd:7e:fe:28:8f:5a:53:bd:
                    04:20:ff:9c:84:7b:65:30:74:0b:58:09:70:5d:ec:
                    10:d9:57:1b:5b:e8:18:3d:9a:c3:52:1a:57:5f:61:
                    a3:d4:43:39:7e:35:21:5b:76:9b:bc:4e:d5:d9:19:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:AD:2E:DE:33:B1:11:0D:E6:C3:F0:76:6F:36:F9:62:46:CC:62
            X509v3 Authority Key Identifier:
                keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:d4:f7:23:b6:82:06:a5:5f:3e:bf:66:79:89:45:c5:b4:
         04:b0:64:4d:b8:74:cd:9a:93:3d:5a:f4:93:a1:1b:46:f5:8b:
         20:a7:8e:3e:0b:7a:f1:17:f7:53:14:56:8f:8a:fe:df:55:0c:
         c8:83:74:cb:d5:d9:6e:3e:aa:17:6e:76:2f:26:91:80:72:03:
         78:03:40:0d:f1:01:9b:64:df:29:aa:de:43:36:7f:bc:a8:d1:
         25:e1:a4:78:f2:61:20:c2:b6:82:d4:5b:ab:cd:24:bd:04:54:
         ef:c2:6e:28:8e:79:32:84:60:a3:61:50:4f:25:b8:b2:a9:37:
         b6:e1:a2:bb:51:65:35:7b:67:28:b0:86:80:35:48:12:35:4c:
         ab:09:1e:57:f5:56:11:94:05:37:fb:77:48:06:2e:7e:58:47:
         bb:88:03:df:bf:bd:a2:48:49:1e:e9:0d:6a:71:4e:e2:53:16:
         c9:38:47:4f:b0:2a:da:4f:06:3a:8b:73:f9:96:2e:f7:4d:f4:
         b0:42:fc:66:e2:6a:f8:d4:71:c1:fe:50:32:51:d6:89:e6:d6:
         12:4e:af:c3:c5:67:05:fc:69:94:4a:98:ed:f9:61:79:67:e2:
         f2:66:e3:89:98:fd:a7:e2:c0:ff:79:4a:74:3b:04:52:10:de:
         8b:53:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:21 2026 by rpki-client