Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          CMW7DOutTtQ67DwLyBFIcUZPCY83iiM9NJxPKZ/JHzo=
Subject key identifier:   A7:50:B3:2B:9E:F6:FE:6F:3E:04:F8:09:81:42:E9:B1:E5:1F:0E:D7
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       019CAD59CB78980A9F341323E3484631FE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          14A7
Signing time:             Mon 02 Mar 2026 07:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:09 +0000
Files and hashes:         1: Kix4kTPQLQIQBS24-RxgbmJP4uM.roa (hash: IZRFChFiccTGrMi/xaHD/Y4tJtbN4JDWbyxQCJ6ZGnE=)
                          2: PjKNrzs98ZdtJ-2groduxlQr3TI.roa (hash: AGUANunYg5ZMjpAMIYuWSYyo7zh4erXZq7j8d3Oabq8=)
                          3: U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa (hash: nQFt4KKc4aLyiGsSy8KXsL646+IOodr1L6IOWwHG5ek=)
                          4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: 7DRCJQtZDiqhKSv7MU+rRTktARvT+PNuy3VGaN8bJbw=)
                          5: k_1EWr6TT4OeQM7j9nrbpaIqcOA.roa (hash: 2HdlKCer6OR1eYI5oco+zFvSBQWIdH/6nbjqpzGMvtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:cb:78:98:0a:9f:34:13:23:e3:48:46:31:fe:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Mar  2 07:01:09 2026 GMT
            Not After : Mar  3 07:01:09 2026 GMT
        Subject: CN=a750b32b9ef6fe6f3e04f8098142e9b1e51f0ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:68:23:bd:a1:b6:a2:54:e5:c8:e5:da:2e:
                    0b:6b:c9:09:e3:0a:3a:55:83:51:4e:d9:a2:e1:87:
                    d5:42:c5:dd:ab:e1:ab:f7:0b:4b:be:e1:bc:e4:0e:
                    bc:95:e5:34:4b:1b:a2:28:01:b3:63:60:59:b3:bc:
                    95:97:bd:73:a4:74:73:ee:be:34:9f:c7:97:9c:3a:
                    29:08:7e:45:73:a0:5b:65:b3:eb:33:73:cf:c8:c6:
                    37:60:cb:1d:d9:3c:b3:4d:6a:8d:5c:8c:b4:9e:85:
                    d5:10:d6:03:e0:eb:16:12:0c:c4:75:d9:9d:87:12:
                    c5:bd:e6:1d:9d:ae:0f:ad:76:89:fa:d1:74:fb:79:
                    98:03:06:f1:22:fb:c1:00:bb:59:8b:fe:1f:47:27:
                    2a:e9:86:97:4c:6b:79:a9:00:ad:7f:0f:66:f6:ed:
                    fc:e3:a0:78:12:dc:b0:a3:a5:f0:17:14:ff:d0:d5:
                    1d:22:6b:4a:0c:86:d5:27:a5:10:d9:f1:0e:f1:cd:
                    7d:3f:1f:24:01:e3:e6:b5:03:5d:75:6e:4b:73:2b:
                    b1:23:2a:ab:e2:d9:8a:72:f8:6a:d2:01:15:f3:c2:
                    82:72:47:c9:3b:5b:f1:c2:ea:c5:38:75:09:4a:57:
                    47:e0:fc:6f:19:b7:72:d6:dd:35:8a:d9:a0:a9:89:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:B3:2B:9E:F6:FE:6F:3E:04:F8:09:81:42:E9:B1:E5:1F:0E:D7
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:f9:36:7b:b7:9e:32:0a:ff:4a:86:c5:d4:2e:35:74:1a:
         83:f7:c4:d0:f8:56:24:d2:3c:56:e8:11:50:35:bd:37:9b:8c:
         75:8f:ce:ec:1b:62:5b:ec:62:aa:92:9c:7e:3c:a0:f4:7d:ba:
         68:8a:bc:c9:73:00:e7:f2:8c:cb:74:56:04:c7:c6:28:cd:a2:
         8f:f8:1b:b7:43:f9:34:18:7e:1d:49:7c:b8:01:6c:c0:9f:f5:
         d3:ca:97:2c:95:bb:86:cd:71:07:e7:1a:b7:b9:34:b3:ce:72:
         97:90:60:d3:ad:d2:5f:cb:9d:d6:92:3b:ec:c4:3c:2c:9c:b6:
         30:c8:ce:f1:91:d4:94:e9:4d:0a:f9:be:d6:df:0b:5c:13:ab:
         7d:fc:18:77:91:98:47:73:37:5d:84:e9:fe:9b:d2:f9:29:77:
         cd:c6:37:32:a3:52:90:73:a5:51:e2:49:d2:7d:8c:00:35:9a:
         16:d2:f0:a1:cc:12:c3:61:42:6d:c5:4d:51:80:19:07:e2:99:
         41:9c:99:11:18:6e:e1:37:da:98:8e:6f:0c:9a:72:77:76:c0:
         9a:f8:99:6e:88:da:7c:ac:6c:ee:e0:57:17:60:7c:ab:23:ab:
         a3:10:17:78:56:5a:a6:55:93:61:c0:6c:3c:58:48:da:8e:df:
         69:ff:11:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:10 2026 by rpki-client