Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          Csx74rsb9Jdm334sYxWMpbpzNs5t7i2qG3V6rlBzE6U=
Subject key identifier:   25:DE:07:6A:0A:21:1A:A8:3C:70:7D:6E:3A:06:8A:ED:7C:EE:3C:9E
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019CAC4781E5DD43A65761D11348DC3AD135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          185D
Signing time:             Mon 02 Mar 2026 02:01:33 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:33 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:33 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 0HfPOrZDFfZLyWzGxAbv7wlFzg31Q5KVje/ZT6EAhIc=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:81:e5:dd:43:a6:57:61:d1:13:48:dc:3a:d1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Mar  2 02:01:33 2026 GMT
            Not After : Mar  3 02:01:33 2026 GMT
        Subject: CN=25de076a0a211aa83c707d6e3a068aed7cee3c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:8f:01:1d:51:56:34:73:39:61:e3:47:b6:
                    f3:0e:1a:cc:de:ac:c4:a0:06:ce:3a:6d:20:d1:13:
                    87:9a:af:4d:88:89:70:9b:59:58:7b:51:6a:3a:94:
                    14:3f:41:5c:66:ce:01:b3:e9:d3:6a:e6:86:cd:d7:
                    06:51:4b:1e:a8:72:c1:14:99:dc:dd:18:47:3a:a2:
                    90:ca:a7:ff:b2:23:03:cc:eb:06:18:bd:09:25:ff:
                    26:6c:c2:6c:55:9c:2e:51:25:1a:ab:9d:af:77:87:
                    f2:aa:cd:28:bf:34:3e:ce:cc:68:2b:3c:0d:dd:5d:
                    86:26:c5:69:4c:7c:eb:88:1b:74:26:38:b0:6a:18:
                    28:66:06:5e:48:3f:d6:6c:89:81:a8:aa:20:c9:e5:
                    f8:8b:e3:23:68:3d:d2:33:91:69:a6:c4:92:7d:6c:
                    79:cb:b8:6c:d9:0f:dc:9a:16:18:3f:6b:0d:a0:31:
                    87:6d:9c:8d:8c:2b:2f:f3:0c:42:b4:12:94:85:d6:
                    da:40:7c:9f:d3:f8:00:ad:f8:59:39:02:90:ba:c3:
                    0e:13:d9:2e:3d:50:fb:5a:13:50:83:99:2c:1d:73:
                    f4:14:54:db:9e:6d:b8:ba:09:89:6b:05:55:60:30:
                    73:af:9e:65:67:91:46:20:7f:e6:d6:5a:8f:5a:f9:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DE:07:6A:0A:21:1A:A8:3C:70:7D:6E:3A:06:8A:ED:7C:EE:3C:9E
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:ab:cb:0e:71:98:10:31:66:b5:ec:69:c9:85:f1:d6:4b:
         47:4f:e8:cc:fe:e1:52:16:ff:d8:09:fc:74:cf:78:4e:d1:af:
         2e:26:b4:5e:a5:a7:a7:84:ea:f4:5c:0b:aa:3a:8c:71:c0:40:
         c4:cf:68:2d:5f:85:5c:28:75:6d:24:64:86:24:27:1a:c0:d6:
         af:21:a3:c7:4c:6c:2d:d5:46:3c:c8:48:4d:4e:1b:89:4c:0b:
         c6:29:71:5a:23:94:f1:07:c6:4a:78:ed:84:10:e6:3c:99:9c:
         b4:ff:f0:b8:e2:3e:75:98:ab:c8:77:a8:b8:a9:33:c2:3f:96:
         46:53:fb:79:22:0c:65:76:a7:d5:25:3f:25:00:4c:fa:ad:94:
         78:d7:23:a0:e1:13:14:13:32:50:07:8c:85:3c:10:30:99:b5:
         51:0f:bb:ce:ce:e3:e7:1a:37:1e:fd:1e:ac:59:ad:70:0c:4e:
         74:5f:75:f3:21:13:44:76:9d:a6:6c:44:75:70:2f:b3:77:55:
         86:46:24:d8:55:44:06:cd:97:15:c9:c0:91:20:96:30:ca:82:
         62:a0:46:3d:1c:22:bf:b4:8a:25:44:70:b4:81:fa:97:43:71:
         84:b4:4c:15:f4:04:69:1e:8a:80:dd:8b:15:0c:08:e3:40:7a:
         11:63:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:08 2026 by rpki-client