Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File:                     t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier:          UyDzIEHpD0/Ok+BUAB52yJX3rVM+/dw5gMVxdrR7Gr8=
Subject key identifier:   67:BF:E0:91:30:A3:BF:7C:2E:F4:5C:1D:3C:BB:70:BF:8B:63:C7:43
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer:       /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial:       019CAD22D86516BAB0E0A6E7DEC066B4BAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number:          103D
Signing time:             Mon 02 Mar 2026 06:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:07 +0000
Files and hashes:         1: ZwPne8zOsgkMT0U51cJiftdsvfk.roa (hash: BIxOUNugWCSEebM0j8omjX/fG0IbzdxHMnELYPl8RdM=)
                          2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: sE9EsgCrrR8zvXSKN/0VqmjJR0LNYWcso4IugZjTALo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:d8:65:16:ba:b0:e0:a6:e7:de:c0:66:b4:ba:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
        Validity
            Not Before: Mar  2 06:01:07 2026 GMT
            Not After : Mar  3 06:01:07 2026 GMT
        Subject: CN=67bfe09130a3bf7c2ef45c1d3cbb70bf8b63c743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:73:43:47:7a:33:f1:ab:25:18:0b:14:a9:
                    f2:a1:30:06:0f:ae:8f:c0:21:b1:b7:5f:e7:1c:0a:
                    44:f4:d0:c3:f4:40:a7:60:1a:f6:7b:e4:02:46:14:
                    89:d2:83:ed:25:34:a1:d5:b9:41:d1:db:b4:ac:c5:
                    9f:b1:79:e6:b8:1f:df:a0:db:5f:5d:51:e6:a1:93:
                    a6:d1:5a:54:a7:25:de:53:22:35:d6:5f:40:d2:38:
                    e3:96:9f:66:e4:1e:12:52:14:02:a2:44:7d:1c:30:
                    22:29:af:ff:6e:3b:19:24:1d:37:8c:3d:a1:75:d5:
                    e2:88:1b:cb:13:d0:0b:35:f6:eb:8e:cb:cf:41:62:
                    35:af:76:d4:5c:0f:b1:ae:f5:e2:40:85:e7:4d:c1:
                    70:96:93:45:0c:fe:48:2b:07:39:72:cc:a6:f7:38:
                    18:fb:52:47:49:fe:4b:2a:fe:07:e2:ad:54:df:b7:
                    21:7d:4a:8a:05:b7:1b:b8:9c:c4:bf:7e:91:af:2b:
                    37:00:d6:da:f7:d7:93:ad:2e:a0:5b:26:13:1e:5a:
                    41:a0:ad:83:90:08:ea:a6:4c:08:c5:87:ce:f3:93:
                    d7:7c:dd:95:85:07:87:aa:33:f9:57:c8:bb:66:87:
                    64:22:bd:2c:5d:ea:ef:8f:a6:24:26:df:dc:ef:a8:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BF:E0:91:30:A3:BF:7C:2E:F4:5C:1D:3C:BB:70:BF:8B:63:C7:43
            X509v3 Authority Key Identifier:
                keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:98:26:df:43:4d:b4:cd:14:6c:33:43:3e:7b:89:4d:1a:
         84:5a:f0:62:c2:a7:f0:c5:b6:62:0a:15:46:0f:7c:c9:a2:86:
         21:e1:31:fb:24:b1:eb:f7:e0:2a:13:fd:0c:7d:06:bc:0a:17:
         2e:bc:13:d5:05:a8:2f:ab:e9:cf:7e:05:10:a6:a9:68:2c:95:
         f7:34:83:fa:24:58:45:04:3d:6e:ff:ef:15:bb:d3:11:be:87:
         58:1c:9c:a3:0e:a7:48:67:61:a0:2b:3b:69:2d:d0:dd:26:4d:
         59:22:93:2c:ca:7a:7b:6b:3e:00:db:52:43:cc:57:3a:3b:80:
         64:cf:69:3c:98:10:a9:1f:c1:9e:a8:83:23:60:1e:9d:29:09:
         ac:05:3b:8f:75:47:59:9d:3b:c5:00:88:09:8a:94:e8:e3:ee:
         da:e8:61:97:1c:6c:0d:98:18:46:6a:d7:01:cf:19:22:59:ea:
         9d:39:32:b5:20:57:20:70:db:99:3e:25:5e:66:7e:a7:4e:8a:
         41:02:66:9c:60:94:c8:5c:17:35:cd:92:fa:1d:fb:14:92:c1:
         b4:8c:91:f8:48:43:29:7e:2d:73:81:27:0c:a0:3f:13:45:dd:
         0a:38:d9:ba:d1:da:50:a2:a6:df:23:a9:45:9f:1d:4a:3f:7c:
         fd:1a:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:34 2026 by rpki-client