Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
File:                     ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json)
Hash identifier:          1+0n13pi+1fTJFgrfS8XXaHuym1065xszCFoh4CK8pM=
Subject key identifier:   C6:BF:70:CF:45:F3:26:E0:78:38:9A:4D:53:71:01:11:13:25:F9:BB
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Certificate issuer:       /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial:       019CAAC66475CB269B5B441051C0544FD081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
Manifest number:          1668
Signing time:             Sun 01 Mar 2026 19:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:54 +0000
Files and hashes:         1: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: gG4OiviI+Np/PbRpbc94WTks9yJ4V0P+P6T5GFwIxrE=)
                          2: huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa (hash: yMEbieQN4mmr0B4PHYgIfIopNkBH4Ovpl20WF2oTeLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:64:75:cb:26:9b:5b:44:10:51:c0:54:4f:d0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
        Validity
            Not Before: Mar  1 19:00:54 2026 GMT
            Not After : Mar  2 19:00:54 2026 GMT
        Subject: CN=c6bf70cf45f326e078389a4d537101111325f9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:d3:ba:66:4f:ce:a9:08:db:66:0c:7d:6f:
                    49:6e:68:e7:44:14:27:e5:89:38:7f:c1:ea:95:6f:
                    14:1a:40:e1:ca:a1:5f:a8:64:b4:6e:c3:b0:ea:30:
                    82:0f:05:9d:3e:d3:d9:8e:d1:5c:b9:b0:35:3d:8f:
                    ed:11:55:57:08:03:71:06:45:8b:50:9f:1b:65:46:
                    37:af:65:44:88:4a:e7:e2:37:a1:66:44:c8:0d:a1:
                    a4:ad:94:e4:e7:25:2a:18:f8:cd:a4:d7:aa:29:6f:
                    a2:9d:84:59:d8:48:61:1d:9d:f2:f2:70:d5:3c:c1:
                    96:ea:51:05:61:69:76:09:af:62:6b:63:ea:63:0b:
                    e6:ec:1e:7e:8c:06:83:d8:e2:ac:d5:9c:f0:a0:fc:
                    ca:8c:0c:71:77:de:06:c7:0d:35:fe:8e:c9:3a:38:
                    35:78:32:63:71:9e:4f:14:06:e5:7e:68:01:c8:e4:
                    df:9a:e0:65:01:4d:3f:db:5a:4c:53:ac:0d:0a:5c:
                    b8:30:c3:40:89:16:d2:8b:c8:0e:e1:2d:fd:db:fc:
                    70:62:f8:e0:5f:1b:3d:3e:ea:b3:fc:43:af:fc:ca:
                    b3:26:ed:34:d6:01:29:8d:3c:43:9d:dd:87:56:34:
                    ef:08:63:25:4a:8f:db:8e:5c:48:92:59:8d:b9:7c:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BF:70:CF:45:F3:26:E0:78:38:9A:4D:53:71:01:11:13:25:F9:BB
            X509v3 Authority Key Identifier:
                keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:a0:50:1c:e0:30:3b:46:c3:3e:ea:34:d8:7a:29:fd:ac:
         2b:f0:58:5f:b0:15:aa:fe:ca:64:ea:7f:f1:eb:87:3d:7a:0f:
         e2:5f:1b:37:35:d7:a3:a3:6f:c8:49:a6:57:c4:ca:0c:85:e4:
         29:17:af:7f:d1:3c:1b:6f:5a:3b:0b:e1:0d:1c:8d:fd:8f:16:
         65:23:8f:f6:7a:e1:40:25:e8:70:d9:e6:21:47:b8:23:58:85:
         89:f6:7e:9b:f3:40:57:89:f9:2b:33:7f:08:39:7a:d7:ee:e6:
         22:c3:05:17:25:31:45:87:85:7e:28:7a:43:44:a0:3d:df:90:
         da:6d:ef:ed:47:ef:07:47:14:9c:71:05:29:c2:d8:d0:55:20:
         20:c7:d5:ee:bb:43:3c:c5:50:0b:9b:43:d1:02:ca:e9:d1:43:
         5a:8e:0c:d5:ec:82:af:d7:8f:4f:da:bf:c1:6d:93:31:3d:77:
         5f:e4:7c:ad:5e:c5:72:17:89:70:4f:a5:ff:81:9c:e0:b5:bf:
         80:ec:dd:e2:cc:ec:c7:56:c2:0c:77:ac:97:e6:73:d1:b8:2e:
         75:1d:54:d6:f2:0c:7a:c3:e8:1d:55:5e:9a:cf:19:89:17:6c:
         35:35:56:57:84:20:af:4a:4d:b0:37:cd:ef:fa:64:6f:55:a5:
         94:73:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:24 2026 by rpki-client