Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          +Bie+dUbOLSOWmRegmvUQIJ0OCZRvwxmEUWnTyC6YFo=
Subject key identifier:   D2:90:C6:90:11:93:49:12:5B:C2:19:CB:91:28:98:62:D7:34:79:00
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019CAAC62491D80B51D9DB8CF13E23D7D1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0983
Signing time:             Sun 01 Mar 2026 19:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:38 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: /8TwKhxEsK4grGUnqtmvax2p9batMk434lX7HbFlqYA=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:24:91:d8:0b:51:d9:db:8c:f1:3e:23:d7:d1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Mar  1 19:00:38 2026 GMT
            Not After : Mar  2 19:00:38 2026 GMT
        Subject: CN=d290c690119349125bc219cb91289862d7347900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:32:64:9c:be:7e:1a:14:86:84:1b:2b:67:
                    31:56:f7:fe:92:f9:41:a1:cc:e3:a3:69:b7:07:bf:
                    25:a6:ff:58:1c:b8:a8:1c:21:7e:78:4b:04:93:0a:
                    e3:5f:77:2b:b5:58:b9:a1:17:eb:da:a7:6a:59:a4:
                    4a:df:0d:4d:e9:50:42:fa:76:7c:6e:df:9f:cf:d5:
                    f1:66:eb:5c:f8:1e:a8:af:da:e4:13:bc:db:15:fd:
                    2d:3b:e8:1e:0d:78:1a:bf:10:03:d3:f4:b5:e3:5f:
                    b0:2c:7a:e9:d7:ca:ab:8e:e6:9e:45:cb:76:14:4e:
                    30:51:82:8d:b2:e7:73:3a:0a:c2:26:37:b2:70:ab:
                    cc:f9:2f:5d:56:0f:5f:03:3c:11:4f:db:c9:ad:e6:
                    11:ee:f1:bc:06:17:86:cf:55:37:45:66:1f:7b:2c:
                    ab:b1:4f:c4:b2:3b:c2:5f:e9:bb:74:dc:16:2a:38:
                    68:85:df:5b:7d:d4:66:96:04:08:b9:23:6c:ed:c6:
                    98:b9:fa:2b:4f:a5:f8:6c:81:5d:2c:a4:89:fa:ed:
                    a3:ac:c5:48:ff:68:6b:fe:65:3c:b7:3b:af:5f:ab:
                    aa:74:95:63:74:c9:91:cc:db:84:a5:dd:6b:43:55:
                    7f:08:28:6e:25:e0:4c:26:2c:5b:ef:b9:da:4d:28:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:90:C6:90:11:93:49:12:5B:C2:19:CB:91:28:98:62:D7:34:79:00
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:7c:45:12:02:69:f2:bd:80:0d:21:b3:0b:5d:31:a3:77:cf:
         00:d6:0f:d5:3c:02:98:f8:ca:06:0e:24:52:fb:7b:95:78:1f:
         45:c2:44:60:7d:e5:96:4d:75:94:3a:19:0d:6d:73:45:2d:f9:
         43:b0:10:c8:82:8c:2e:1e:b9:49:10:ca:86:4a:69:68:6c:b3:
         13:23:c3:c9:1f:a7:0b:8b:eb:9e:95:00:c7:bf:8f:76:46:a5:
         72:7c:fc:76:e7:79:b2:b3:d5:28:80:b3:23:b4:13:61:89:b9:
         fe:a7:7b:84:72:d7:93:a9:2a:5b:83:9e:02:43:69:94:58:10:
         4d:68:24:28:f5:37:2b:2a:bb:29:cf:ba:84:c3:09:ce:c6:33:
         be:54:19:df:d5:39:07:8c:66:58:8a:5d:1c:3e:73:75:66:59:
         fa:5a:f7:00:5a:38:65:4d:73:a2:7f:87:5e:dd:7f:a3:a5:f2:
         bd:51:57:fc:bc:15:d2:96:6f:b7:ce:06:aa:6e:fe:f5:51:1d:
         6f:61:9d:e2:75:a8:a3:68:ed:74:9a:83:2d:83:61:4f:5d:a4:
         27:2e:1f:eb:ff:d5:7c:98:c8:39:d6:d1:35:9e:2f:52:44:95:
         a8:22:91:99:8e:0f:dc:10:36:3a:d2:67:b4:d2:b5:6b:b2:b0:
         cd:5d:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:13 2026 by rpki-client