Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
File:                     79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json)
Hash identifier:          MYIXaL6Eo8lEVV8MFHKGaEPatcKXlkop2+PNWt2mNsU=
Subject key identifier:   35:A9:B9:31:3F:2D:95:00:EA:D8:C7:64:6B:5C:AA:DF:FE:0F:51:24
Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69
Certificate issuer:       /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
Certificate serial:       019CAAC6F7A8FF6BEE2C1E6C70E66AE178B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 19:01:32 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:32 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:32 +0000
Files and hashes:         1: 5q8b-mFBKEi7KxA-qotiTf_Ngcs.roa (hash: UP1Aef3+F12caRUYXmTS+aJsJJVlKeAHOy7RJvD6MyQ=)
                          2: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: emmkwuMOaogAZZRkLBuBb2ASOGOLmDpk4A64og5po9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:f7:a8:ff:6b:ee:2c:1e:6c:70:e6:6a:e1:78:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
        Validity
            Not Before: Mar  1 19:01:32 2026 GMT
            Not After : Mar  2 19:01:32 2026 GMT
        Subject: CN=35a9b9313f2d9500ead8c7646b5caadffe0f5124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:7a:af:e4:32:8a:1b:9f:a5:c9:ff:bb:22:
                    92:64:5d:47:d7:24:ca:ce:53:08:61:68:0e:08:2b:
                    a6:90:a7:98:d2:6a:8d:00:58:d3:6b:19:5b:bf:ca:
                    04:d4:0d:fb:6a:94:6f:d7:72:18:91:24:28:d3:06:
                    5d:c4:43:24:a6:c5:48:ad:9a:98:f4:64:85:95:a6:
                    a2:ec:71:53:47:14:c5:6e:e0:5e:7c:d6:6a:b0:21:
                    d8:d8:63:2e:b9:cf:9f:91:d9:c9:a5:f1:bb:08:9e:
                    15:5e:2c:ee:18:34:a8:40:54:ad:c9:b3:50:4e:b5:
                    ea:81:22:ab:3a:15:da:18:27:31:9d:37:db:25:fe:
                    30:06:69:08:5d:fd:a4:fa:e4:d8:08:c5:ca:b6:44:
                    78:fb:d3:5a:2a:7d:29:38:80:0a:04:ce:aa:7b:f3:
                    a5:c5:1f:0c:f8:93:96:a7:7a:74:10:cd:d4:f7:10:
                    58:ec:c0:97:f4:90:a3:3c:6e:6d:29:0a:82:e3:40:
                    20:d0:95:67:41:fe:7f:72:15:de:a4:7f:8a:c9:58:
                    84:c1:2d:bc:c7:56:4a:da:e8:90:30:0f:ea:0b:c4:
                    75:58:7e:54:1e:06:52:b8:0d:63:77:13:03:ce:e9:
                    ac:5f:98:8b:30:c1:f9:76:0f:5b:fa:1a:bf:a6:35:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A9:B9:31:3F:2D:95:00:EA:D8:C7:64:6B:5C:AA:DF:FE:0F:51:24
            X509v3 Authority Key Identifier:
                keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bd:c5:68:f0:8a:14:59:d0:5b:b9:8d:d5:d5:f2:2b:be:ae:
         7a:28:6d:b4:d4:62:27:60:ea:57:b1:23:e3:6b:00:c6:0c:42:
         95:be:32:5c:45:5a:fd:75:08:b6:fd:00:54:39:1c:cc:c3:97:
         eb:d6:c6:37:12:4e:8d:ac:b4:96:e0:ce:53:85:49:15:54:c6:
         6c:97:5a:47:8e:d0:01:93:4c:5e:a5:8e:c9:3e:5c:ca:17:0e:
         78:6b:3f:03:ac:e4:07:81:4a:82:40:27:13:8b:87:14:f6:ec:
         61:78:70:21:b5:1a:ec:8c:15:d6:23:16:de:95:46:f9:9c:99:
         7a:d2:4d:10:05:b4:e1:d3:28:95:62:01:1c:47:62:85:2e:bd:
         48:27:7f:99:8a:1a:8c:a2:67:0d:69:1b:9e:da:d5:37:70:81:
         68:ec:f0:a5:6e:fc:b7:da:f5:8b:bc:3e:3f:c4:f4:39:ec:bd:
         7f:6a:07:44:2b:13:ec:4d:57:5c:ea:bb:94:63:52:12:4f:03:
         61:8e:3d:92:2f:46:12:3c:44:24:ef:32:b9:80:b7:e1:49:d5:
         b0:16:a2:78:54:88:dc:a5:f8:48:b8:75:61:1c:2c:fe:b3:9c:
         8c:3e:56:a0:28:68:ee:65:c0:32:0e:19:b2:74:be:d6:72:55:
         25:ca:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:50 2026 by rpki-client