Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
File:                     4MW7PaU0Nb9B4X997EfUSE5_MSk.mft (raw, json)
Hash identifier:          QHuWr/8F8MrbgyozJj6nDbrG6XB4/D2/aKcIaGLDGdo=
Subject key identifier:   9B:40:5B:2F:4C:55:23:40:13:3A:64:C9:48:99:DD:3B:06:51:AE:9C
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Certificate issuer:       /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial:       019CAA581D21580961B5759EEF5D2BF9DB78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
Manifest number:          0214
Signing time:             Sun 01 Mar 2026 17:00:27 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:27 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:27 +0000
Files and hashes:         1: 4MW7PaU0Nb9B4X997EfUSE5_MSk.crl (hash: 492bHm2TUvh1BPGG0Di19qaS9zOYAp0HeYMSP9604K8=)
                          2: 6CkXD84pke9k3M4G741F2bkK36U.roa (hash: W5UgpdGLKX1sz4JtCaw9TLFL+VAMoIT+vGJMM59xCmY=)
                          3: 7JRXJdqq0quI6VLheZDVHGBGYz4.roa (hash: zht/JvnIioKlRWL/1Q3IwXr569wZITbnh/lEFG9dvRk=)
                          4: 9u2DZc6_t39AXh0hNQyl49GQcrA.roa (hash: upTRBVGB5NItiTNl9OAPzE1F31sUOeznk1tVJmk+yGA=)
                          5: RTTvZ91An04BzsZrcK7X2zCFClc.roa (hash: kCKXhl0NYkaUuNNKlZZSKElx8syewh/z7QdIGywZE+c=)
                          6: VNLKS-pNZk5YJ26vbOoNAKp2U2w.roa (hash: NTY/vgG8CnozUkg7LalMOYtygnJJQiS7TOtc3cYLXpI=)
                          7: nacKkZ_RzNV2zE3WKspS3-HlFXU.roa (hash: ze+QdgGOYq7DqvrwPTJyra//9o0vJyW5oNH5TT0oWWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:1d:21:58:09:61:b5:75:9e:ef:5d:2b:f9:db:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
        Validity
            Not Before: Mar  1 17:00:27 2026 GMT
            Not After : Mar  2 17:00:27 2026 GMT
        Subject: CN=9b405b2f4c552340133a64c94899dd3b0651ae9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:e2:e5:04:8b:bd:02:93:f7:63:03:40:a6:
                    88:21:58:f9:0e:8e:1f:00:03:85:1a:19:43:d7:de:
                    1f:e8:78:b6:a3:b2:5f:4c:82:f2:fb:d5:40:a0:8e:
                    ed:89:72:15:0a:71:b3:e7:4a:0a:a6:f3:cb:f3:75:
                    2f:ef:a4:13:61:0c:4b:5e:75:c2:c6:48:cf:a8:92:
                    e2:73:98:5f:00:a4:91:40:86:34:e9:14:ad:76:bc:
                    f9:3c:3f:b2:cf:1d:29:57:15:74:4a:24:ce:66:77:
                    2f:36:ec:97:26:bd:10:0f:3f:ce:8a:9e:00:88:f0:
                    1d:0b:45:3a:44:11:68:bc:b5:46:fe:b3:a7:24:75:
                    b5:d8:18:3e:a8:bc:00:fb:37:40:3d:c4:d7:55:75:
                    4a:af:25:61:8d:3d:74:15:04:26:c2:eb:7d:b2:1e:
                    d6:fc:81:11:ed:af:2a:bf:dc:71:4a:f1:6b:a3:6e:
                    f2:00:5b:4d:eb:78:b2:1c:f2:6b:84:ca:55:03:e0:
                    cf:1e:47:5a:fa:8b:9d:6f:33:22:7a:b9:04:eb:25:
                    f6:eb:87:97:f2:c6:ae:d7:ed:c0:3b:0d:3c:75:30:
                    71:98:86:87:7e:6a:77:0e:0f:d9:b5:9e:9c:ce:f2:
                    da:9a:c0:ef:b4:9f:bf:28:2d:5a:36:6f:e0:99:f4:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:40:5B:2F:4C:55:23:40:13:3A:64:C9:48:99:DD:3B:06:51:AE:9C
            X509v3 Authority Key Identifier:
                keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:57:91:a9:a9:bb:6f:60:4b:8a:fa:00:bc:e7:ad:bc:ab:68:
         a8:ed:40:91:73:57:80:f9:06:26:df:75:bc:47:4d:97:1e:0f:
         02:e8:c0:df:66:69:03:7b:6b:21:ac:f6:51:ac:4c:a7:42:55:
         fa:f1:d7:0e:e8:dc:57:7a:5c:84:f4:d9:28:ff:b8:12:5d:63:
         06:a2:18:ee:8c:25:88:f0:8d:7c:8f:43:b1:87:15:33:ae:bc:
         25:cf:c4:1c:d3:c3:af:f0:43:e7:04:88:96:ce:a1:77:5d:27:
         c2:67:47:e8:97:7c:e1:d5:c9:5c:46:84:19:a8:e5:d7:07:ed:
         ef:db:fd:8b:91:4e:82:53:3e:7d:d1:13:27:4d:91:f1:a5:09:
         3c:9c:98:c5:a0:08:fc:d6:d9:81:ee:8f:1b:e3:53:c3:b9:e7:
         ca:1e:c2:4a:b8:47:a3:af:8f:a8:75:39:cd:7c:bf:ab:d4:d9:
         9b:5a:de:31:e2:c8:2e:5d:d6:8a:fc:df:d8:14:fb:65:2b:95:
         4d:0e:70:16:ca:f2:e7:50:54:72:77:4c:d2:7a:d3:61:d2:82:
         9f:d8:d9:f4:e0:d6:d2:a4:29:fb:5f:8e:c8:31:45:81:6f:c5:
         ac:bc:4e:b9:3d:3c:77:82:bc:69:78:64:2d:b3:02:c6:c8:83:
         87:e6:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:58 2026 by rpki-client