Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          BkZiCvImEglVAdElnGER0U5pZno9xf36JGhPPawKiwE=
Subject key identifier:   07:BE:B4:04:2E:95:80:2D:9C:DD:AE:7D:E0:B9:E8:7B:A1:D9:6A:5F
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       019CAD598DDE6BA9A5524DD9E88A1C1C34B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          17E4
Signing time:             Mon 02 Mar 2026 07:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:53 +0000
Files and hashes:         1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
                          2: 3H8BLKzmkCfljUjNrQGOgxtelOg.roa (hash: v8PSaEUxks+gqrCM9n7vdattQCJR6qYVTo0H/ICFPWs=)
                          3: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: omofqWpK6Njzn/d46MT6FH8L0UszW0ekmT4pICvZJls=)
                          4: OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa (hash: 7l0K8yYViyqwamqByXDtNcYGRuw4fCtQkRZ/3UwAsLE=)
                          5: OoGvPehNjKU6hE3SxfV0wILIsN4.roa (hash: 7Php/xkVqP8tmnrDY7MQsYCSTzCCLDFw6kgWF4S8f2I=)
                          6: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:8d:de:6b:a9:a5:52:4d:d9:e8:8a:1c:1c:34:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Mar  2 07:00:53 2026 GMT
            Not After : Mar  3 07:00:53 2026 GMT
        Subject: CN=07beb4042e95802d9cddae7de0b9e87ba1d96a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:9c:a6:58:23:1a:1b:83:23:81:22:84:8e:
                    80:8d:4f:15:94:00:34:0e:d8:95:26:2d:92:16:2c:
                    75:9e:74:cd:b0:f5:aa:ba:5f:b7:23:4a:f0:16:90:
                    83:a3:17:54:5d:05:d4:35:c3:de:f5:d8:91:55:1c:
                    ca:ea:c9:0b:7d:1f:5c:cf:6c:bb:d4:e4:ad:46:7e:
                    ea:8c:d9:5b:ef:1b:6c:9e:84:ca:4c:7c:d6:e5:00:
                    5f:16:7d:80:57:d1:4f:c4:4b:ea:99:17:e2:9f:43:
                    7d:bc:41:eb:32:0e:f0:7f:b7:ef:82:ab:48:0f:fd:
                    d2:b2:9c:34:9f:da:03:eb:76:55:f5:53:c8:50:2b:
                    c7:25:88:41:1d:92:8d:01:ba:7d:e5:7c:53:b5:13:
                    22:d0:a3:0d:82:2a:07:3d:7d:7d:2f:51:a6:49:8d:
                    cd:9f:90:70:5c:bc:97:6c:1c:7a:cd:4d:f9:7a:fb:
                    de:cd:16:e9:03:b5:7b:5e:c2:70:2d:47:5f:16:2b:
                    47:0f:58:dd:c7:d0:59:a5:57:41:5e:1b:55:7c:27:
                    b9:71:5b:3d:54:cc:34:7a:5c:4a:64:f9:0a:2a:4a:
                    4f:68:77:e9:80:8c:18:10:d4:0d:f4:5a:aa:55:2d:
                    49:26:19:05:87:ee:01:ea:72:ff:30:fc:21:82:20:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BE:B4:04:2E:95:80:2D:9C:DD:AE:7D:E0:B9:E8:7B:A1:D9:6A:5F
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:69:95:d5:cb:f5:fc:2b:06:11:b0:1f:06:2d:50:b8:82:d3:
         18:66:96:e4:f1:aa:0a:26:9f:bf:f5:02:85:cf:b0:bb:99:d9:
         f3:ea:b7:70:c8:a3:a2:88:f6:50:e4:08:95:68:60:cc:6d:cd:
         21:1d:8c:b9:a3:2b:f5:63:5b:24:c3:cc:db:2b:6e:6f:24:aa:
         33:24:e1:3d:ab:0d:43:54:e0:91:87:7e:27:13:d3:8d:38:8f:
         ea:d6:3f:0b:7f:62:70:c7:57:ca:d4:ae:fb:9c:b8:d6:3a:9c:
         3b:28:2b:47:fb:51:91:55:3d:a6:54:eb:97:aa:42:77:41:fc:
         20:70:07:76:d6:54:2a:1b:06:4c:0e:c0:7d:2a:1d:af:d6:8b:
         0a:f1:9c:35:a4:18:cf:68:77:55:6b:bb:b2:01:a8:50:36:bd:
         73:04:ac:8e:1f:f9:fc:6d:3c:94:d1:f8:f5:fb:ba:06:57:bb:
         08:5d:a3:8e:e3:11:75:65:73:27:dc:66:34:04:5c:7c:60:b1:
         23:3a:4c:82:ac:0b:d1:0b:29:2b:19:a6:ac:57:49:2f:d4:d1:
         d8:69:d6:90:85:a4:ef:73:e1:7e:2c:b9:8f:de:7e:e4:4b:b8:
         8d:d0:3b:03:2b:52:74:05:9c:6e:81:3c:0e:3f:fe:f7:ce:0b:
         d0:6f:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:44 2026 by rpki-client