Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
File:                     59CqrsABapJr7tz991g1gVW3G-8.mft (raw, json)
Hash identifier:          fFsJVHgY8qT2L/VGNvOe3gy/JIzHQwm4KetId79KqMQ=
Subject key identifier:   54:94:19:E2:6F:A3:FD:48:30:CD:C0:0D:B0:42:8A:76:41:FA:0B:C0
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Certificate issuer:       /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial:       019CAFB604F63C46EA7F989B4F11F445A413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
Manifest number:          0AD7
Signing time:             Mon 02 Mar 2026 18:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 18:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 18:01:07 +0000
Files and hashes:         1: 59CqrsABapJr7tz991g1gVW3G-8.crl (hash: fT7NRsd0HW5LsCk7pHsl/LF72z7kYkwD0p1Vo7uAk6o=)
                          2: 9YC1GQJz6SSHljrp3FZeTZ3rhas.roa (hash: fghtvcVlErFCr5VAPk70z2SRbv9sLRMsCYDkFviRnrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b6:04:f6:3c:46:ea:7f:98:9b:4f:11:f4:45:a4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
        Validity
            Not Before: Mar  2 18:01:07 2026 GMT
            Not After : Mar  3 18:01:07 2026 GMT
        Subject: CN=549419e26fa3fd4830cdc00db0428a7641fa0bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b3:e1:76:02:d9:89:8d:f4:44:21:8c:77:2e:
                    5d:33:03:b5:50:9a:de:28:b4:7d:a7:05:c8:73:1c:
                    69:4d:64:28:56:10:16:92:a0:1c:0a:34:4b:9f:c9:
                    d8:2e:7d:b1:e0:7c:db:c9:2e:85:a5:f1:3f:f8:56:
                    c5:27:a4:13:00:72:9d:c1:94:71:28:80:67:d6:7a:
                    3e:9a:45:a0:51:60:0c:8f:2f:51:df:7c:f3:23:51:
                    b4:d3:17:8c:0c:b0:6a:78:ba:1a:9e:a7:75:e7:e2:
                    8b:b3:e4:25:f3:8a:03:4e:ee:06:71:f1:0f:4e:a7:
                    f4:fa:23:69:db:08:7f:e5:63:d0:48:e0:3a:04:45:
                    7c:f3:49:83:b3:75:1e:9f:ba:59:9a:49:3b:05:18:
                    fa:94:60:21:68:7e:db:50:1d:6b:32:60:43:1e:53:
                    83:84:9c:ba:23:66:8b:0f:28:28:04:f0:03:86:bf:
                    d1:96:9f:a9:10:a5:34:38:83:c8:59:1f:7c:39:67:
                    de:c9:48:cd:57:fc:eb:d0:35:e4:65:bd:c1:8f:30:
                    1c:bc:7f:5a:f2:57:bc:12:d3:ec:13:e1:b8:42:0f:
                    64:63:4c:13:21:f8:25:5b:66:b6:91:ad:62:1c:72:
                    5e:82:f7:cf:2f:4c:06:36:a8:fa:89:88:fc:37:9a:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:94:19:E2:6F:A3:FD:48:30:CD:C0:0D:B0:42:8A:76:41:FA:0B:C0
            X509v3 Authority Key Identifier:
                keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:02:f5:dd:77:bd:b5:37:06:73:e0:35:0e:53:19:64:3a:a8:
         a8:1e:cb:a8:aa:18:81:75:8f:a5:88:ed:10:b5:1c:3f:e1:e7:
         de:f2:99:95:c4:f0:c9:f8:19:6e:7e:84:9b:6d:2b:d1:f2:f5:
         ee:35:19:b1:99:c3:44:a7:99:88:d2:14:56:55:0a:63:4f:7f:
         c4:f0:5a:19:0f:0b:bd:6a:54:cd:c4:e4:fa:ee:6b:19:22:f8:
         73:dd:8f:59:6f:c4:2d:d0:dd:9c:b0:58:b2:ae:96:5e:92:95:
         6d:0e:23:08:a8:3c:f5:52:1f:61:d7:a0:90:8e:12:9f:11:ef:
         b2:38:d6:b8:da:3d:4d:5c:e3:4c:8e:9e:e7:aa:9e:8d:a0:00:
         5a:0a:5d:85:f3:6e:1a:c9:b3:32:77:18:4d:5f:1d:eb:02:66:
         96:87:52:d7:96:58:66:1c:76:28:53:1d:09:72:a6:76:db:48:
         42:e2:99:7b:bf:5b:27:5b:2d:0d:53:da:1b:ab:05:68:5c:6a:
         51:49:30:18:87:e2:5a:9b:45:ee:97:f7:e0:3c:09:63:6a:00:
         9a:fe:99:ae:49:87:4e:51:4b:73:9b:03:9b:fd:5a:9f:d4:64:
         df:22:76:b8:3f:11:c3:57:8f:61:20:ef:7f:b1:1a:4f:4b:39:
         ce:b2:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:43 2026 by rpki-client