Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
File:                     k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json)
Hash identifier:          nZTicD1jrYyV1+StURpaasQCYiUNMRJ8gwwAmSoKQaU=
Subject key identifier:   DE:71:21:8A:4C:CD:5B:22:93:3D:8D:8C:1B:9C:D9:AC:CA:79:0F:7F
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Certificate issuer:       /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial:       019CABD9A5947D98B72671D269F65C841E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
Manifest number:          0A80
Signing time:             Mon 02 Mar 2026 00:01:33 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:33 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:33 +0000
Files and hashes:         1: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: R4ncuCq1VE8UcAPss6K0JFxDf/L2jer6x7GQTslcr74=)
                          2: xnGY0GE7g_ENVu56e5gxelHybG8.roa (hash: yJUaHCIzmB9kSFy3GFPElESkvsA2U0DoARJQmC3vS48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:a5:94:7d:98:b7:26:71:d2:69:f6:5c:84:1e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
        Validity
            Not Before: Mar  2 00:01:33 2026 GMT
            Not After : Mar  3 00:01:33 2026 GMT
        Subject: CN=de71218a4ccd5b22933d8d8c1b9cd9acca790f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:22:c1:e3:48:95:7b:5f:aa:36:a9:63:1f:
                    fe:d9:a6:01:01:e8:06:63:02:01:c7:13:a5:6e:15:
                    36:6c:6b:e6:50:49:70:b3:43:60:17:fa:d8:8c:af:
                    8e:17:45:e3:cb:df:3c:a0:08:54:4d:db:e1:2e:cb:
                    6a:db:01:5f:92:43:e2:e0:f8:5d:a4:e7:60:c9:bc:
                    ea:1e:07:74:dd:1c:d4:4a:45:ac:b7:c7:01:11:a9:
                    fb:78:aa:dd:83:04:ee:09:24:95:50:c6:3b:98:ea:
                    3a:5c:97:c1:a2:98:0b:76:bc:da:0c:0b:f5:0b:1b:
                    60:71:a8:61:1e:7e:37:86:1b:ca:17:7e:7b:46:1b:
                    a2:53:52:f5:72:b7:44:33:6d:23:df:49:8d:4e:81:
                    e3:19:4c:f1:e1:1f:86:1f:6f:5c:ca:27:95:f5:29:
                    70:f5:21:e7:c0:6f:06:d4:6c:d7:27:5f:44:a2:e5:
                    b8:e1:d1:8b:fa:cf:b8:1c:27:ad:10:97:c7:84:b3:
                    d1:aa:c8:52:01:02:e1:fa:5d:fa:09:00:74:92:41:
                    b2:6e:da:0a:5f:9b:78:bc:24:fb:87:f1:46:77:fb:
                    c7:55:98:ee:9e:c8:07:96:55:1f:dd:1c:50:ed:21:
                    fc:ba:73:8d:88:cd:c5:8f:c7:77:23:b0:d0:05:da:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:71:21:8A:4C:CD:5B:22:93:3D:8D:8C:1B:9C:D9:AC:CA:79:0F:7F
            X509v3 Authority Key Identifier:
                keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a9:00:8c:ac:0e:91:7a:66:12:f9:f9:75:39:f4:7d:ea:be:
         f9:b1:be:d1:b5:c4:0c:c7:3b:b4:3c:c9:69:19:f9:cf:f6:0b:
         26:84:73:4f:00:4e:0a:e8:b6:fe:70:c7:2d:b8:8c:c5:a3:19:
         6a:16:03:ee:ff:ef:4a:1c:93:f0:28:a4:7d:5c:3f:7a:a6:32:
         e0:03:15:bc:53:55:83:e5:c1:47:35:95:e1:7f:e3:ba:5b:5b:
         09:09:39:00:41:ba:32:c3:43:94:65:2e:c4:56:eb:4c:68:3f:
         ae:c8:01:c9:f3:a9:24:07:d0:92:1d:0b:c6:02:59:4a:c1:45:
         d3:66:78:1f:08:ce:de:92:af:ed:0d:d4:ee:22:8d:01:25:1e:
         a2:4b:1b:70:7b:b5:46:93:b9:73:ef:c6:93:3f:6e:9d:74:d9:
         aa:d0:55:a4:d1:ac:58:13:22:fe:54:db:28:ce:6f:96:0c:33:
         2f:a1:4d:52:d7:e3:2e:f1:ef:c2:22:f2:e8:0f:02:02:ef:82:
         ef:0c:f4:b7:3c:d1:de:99:c3:2f:48:86:fa:f4:d6:1c:13:7a:
         d8:21:1e:5b:f4:d7:7c:fc:9b:06:27:1c:99:b1:7a:dc:6b:db:
         b8:a0:66:73:4b:8f:0d:8b:38:53:1f:91:1e:1d:fa:48:f8:5e:
         1c:bf:07:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2aWUfZi3JnHSafZchB6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmQyNmQzYTBiNjkzYTAyOWJjNjJkY2I5ZGRhOTUxOWU0
Nzc2NDAwHhcNMjYwMzAyMDAwMTMzWhcNMjYwMzAzMDAwMTMzWjAzMTEwLwYDVQQD
EyhkZTcxMjE4YTRjY2Q1YjIyOTMzZDhkOGMxYjljZDlhY2NhNzkwZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvIiweNIlXtfqjapYx/+2aYBAegG
YwIBxxOlbhU2bGvmUElws0NgF/rYjK+OF0Xjy988oAhUTdvhLstq2wFfkkPi4Phd
pOdgybzqHgd03RzUSkWst8cBEan7eKrdgwTuCSSVUMY7mOo6XJfBopgLdrzaDAv1
CxtgcahhHn43hhvKF357RhuiU1L1crdEM20j30mNToHjGUzx4R+GH29cyieV9Slw
9SHnwG8G1GzXJ19EouW44dGL+s+4HCetEJfHhLPRqshSAQLh+l36CQB0kkGybtoK
X5t4vCT7h/FGd/vHVZjunsgHllUf3RxQ7SH8unONiM3Fj8d3I7DQBdqahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5xIYpMzVsikz2NjBuc2azKeQ9/MB8GA1UdIwQY
MBaAFJP9JtOgtpOgKbxi3LndqVGeR3ZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYt
NzNiYjkzMDBmNTc1LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYtNzNiYjkzMDBmNTc1
LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKkAjKwO
kXpmEvn5dTn0feq++bG+0bXEDMc7tDzJaRn5z/YLJoRzTwBOCui2/nDHLbiMxaMZ
ahYD7v/vShyT8CikfVw/eqYy4AMVvFNVg+XBRzWV4X/jultbCQk5AEG6MsNDlGUu
xFbrTGg/rsgByfOpJAfQkh0LxgJZSsFF02Z4HwjO3pKv7Q3U7iKNASUeoksbcHu1
RpO5c+/Gkz9unXTZqtBVpNGsWBMi/lTbKM5vlgwzL6FNUtfjLvHvwiLy6A8CAu+C
7wz0tzzR3pnDL0iG+vTWHBN62CEeW/TXfPybBiccmbF63GvbuKBmc0uPDYs4Ux+R
Hh36SPheHL8HwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:46 2026 by rpki-client