Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File:                     sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier:          PaXe80WAgsez1H3nf2MT4gSRO4Om/8Nvps8Fh2iePnU=
Subject key identifier:   B8:12:C6:C7:1E:06:70:C6:64:97:84:69:53:CD:B7:AE:44:17:37:13
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer:       /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial:       019CABD910313696BE9C6840D7F1FCC4750F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number:          0DA0
Signing time:             Mon 02 Mar 2026 00:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:55 +0000
Files and hashes:         1: oTQStwFSuI2Q1W08FZTLs7BXO5k.roa (hash: C8X1J1aYpfCLBdtwgg3h+C2d55+qHBalin4zkQ6E7f4=)
                          2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: 6EV96qAt+maIhvShQ9XWGQGhiMFZYe7pWuDAkz0Lb38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:10:31:36:96:be:9c:68:40:d7:f1:fc:c4:75:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
        Validity
            Not Before: Mar  2 00:00:55 2026 GMT
            Not After : Mar  3 00:00:55 2026 GMT
        Subject: CN=b812c6c71e0670c66497846953cdb7ae44173713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:76:fd:47:14:47:2a:88:ba:ec:bb:cc:43:
                    c2:97:3b:7e:09:d5:d3:c1:e7:a9:3a:38:35:f2:81:
                    0b:bf:fc:e2:71:ae:2f:c2:72:69:3b:22:46:86:f4:
                    dc:13:ef:40:71:b1:b3:3e:d9:ad:56:a2:9c:cf:f6:
                    0c:fe:12:1b:52:68:e0:df:ab:4d:d1:42:f5:10:61:
                    00:bc:3e:ed:a5:b2:10:41:07:e0:a4:a5:ed:e9:8b:
                    56:89:05:d4:2c:07:24:10:d7:11:b8:ec:6b:26:5d:
                    36:23:9d:0c:8a:0c:71:3d:f2:4d:b9:28:60:1c:79:
                    14:ed:76:24:00:3a:bf:f9:4f:fe:f2:c0:d9:c9:ac:
                    63:3a:ac:16:72:6d:11:c3:e5:98:a3:8f:56:0e:96:
                    60:88:e5:a8:dc:85:42:cf:01:e2:63:76:15:e2:03:
                    61:30:b7:d4:35:c4:ab:37:da:26:a3:e1:82:69:55:
                    ef:c3:0f:51:b9:6b:09:aa:50:39:70:1b:9e:72:58:
                    f3:52:74:47:f3:fb:e7:17:30:0b:71:f3:f7:92:11:
                    eb:a7:c0:1b:74:42:b4:10:12:9e:6f:b3:26:5a:af:
                    00:bf:b2:f6:cf:ea:d0:6c:4c:6e:de:e9:54:26:17:
                    a2:15:c5:32:ae:ed:91:b0:80:22:00:af:de:92:0b:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:12:C6:C7:1E:06:70:C6:64:97:84:69:53:CD:B7:AE:44:17:37:13
            X509v3 Authority Key Identifier:
                keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:f2:95:40:1b:b6:e2:19:83:3f:5b:b9:3e:14:8b:2e:d6:
         b9:a7:c8:50:91:65:be:1b:9a:86:b5:67:e5:c4:aa:30:15:50:
         78:76:98:8f:7c:53:68:76:42:9d:42:b7:26:1b:1a:c9:4e:3e:
         ba:84:20:16:78:b5:e8:ac:2b:e1:ae:14:47:3c:b6:68:d4:3a:
         02:ae:7d:c8:0a:86:d0:4e:be:33:a0:d8:19:fc:b5:e8:8a:2f:
         ef:1b:36:a4:9f:a0:60:16:ed:fb:dc:09:bd:93:1b:fa:eb:ca:
         33:c8:b9:92:22:c5:db:f3:18:9b:ee:98:34:97:b3:22:13:f4:
         60:0d:13:6d:c8:20:f4:ca:32:3b:94:5d:56:4a:ed:c7:be:1d:
         60:9f:77:10:e6:56:77:bb:75:70:2f:84:37:24:73:06:a2:51:
         bf:40:9b:95:bd:2b:34:eb:0b:28:56:64:e8:70:5d:1c:66:2f:
         0c:f3:b9:51:5f:d6:c0:d4:ac:27:f6:5d:c2:19:55:ba:5a:7f:
         b0:51:ef:15:b9:66:0f:9a:ca:53:c0:7c:b4:ec:a2:9a:ba:86:
         c1:43:82:1e:c7:6a:30:9c:88:37:b3:9d:80:bc:04:e7:bb:d9:
         3c:14:b3:ac:6f:6e:c8:85:8e:1b:44:c8:e6:be:d3:54:d3:69:
         03:7e:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:13 2026 by rpki-client