Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
File:                     B1n2rBc_de2eWF7H2HKlhlzvKDU.mft (raw, json)
Hash identifier:          a3m4O8icyoQT1H+d8GhQ0lfrfDCdNZM4l0qYogIDjQI=
Subject key identifier:   89:92:4C:FE:1D:93:66:9B:31:A9:C0:97:39:09:8F:D1:78:96:CC:A6
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Certificate issuer:       /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial:       019CABD94A82B7D9A27388766F6C53E1371C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
Manifest number:          1853
Signing time:             Mon 02 Mar 2026 00:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:10 +0000
Files and hashes:         1: 7sslS3RUIuhf5Zaqe2lYWrmi-zg.roa (hash: vaQFknxSj3T9Lsw68a9dNOcrY1wtAS0N77E0Dy/WJXw=)
                          2: Ah16mLLdh0qTIWTu4DElnGt6Rf0.roa (hash: +2AS4JmYTZXXzzonBU9RhWYzUC8DPPlap0ns3j4LJZ8=)
                          3: B1n2rBc_de2eWF7H2HKlhlzvKDU.crl (hash: HoNMW8h8fISJu7uTG4i0Y78HMSitj8AB5cCdwTv++I4=)
                          4: TP2YSwqVyfqUIy4MvNgVm92X3cE.roa (hash: ZjMe7Najk1MfjHandVTL1SRsCu1fPTQIQjdH4Ut4rpM=)
                          5: bgwAATh9CUO7xiOucQ6npGFxHx8.roa (hash: T9bimoTkLBlvWZuKy6AOXF/8PICrLV1Er8M52jbgMpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:4a:82:b7:d9:a2:73:88:76:6f:6c:53:e1:37:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
        Validity
            Not Before: Mar  2 00:01:10 2026 GMT
            Not After : Mar  3 00:01:10 2026 GMT
        Subject: CN=89924cfe1d93669b31a9c09739098fd17896cca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:b7:2a:0b:45:29:43:4d:a6:5c:b2:cb:0a:
                    d1:70:f3:52:3f:33:12:13:68:f4:60:43:2d:1e:6d:
                    00:3e:a3:ce:a4:9b:c2:83:3c:65:69:41:26:73:dc:
                    e4:cc:9b:55:04:3f:79:33:db:30:b7:06:b7:07:41:
                    7f:20:65:0a:81:7c:4c:f2:02:bd:1f:7c:e9:f1:91:
                    ba:41:a1:12:77:71:70:11:88:fe:08:e2:75:1a:e7:
                    47:40:ba:7b:2c:38:87:50:6c:6c:31:5a:8c:e9:7f:
                    5f:b5:74:9d:b8:cc:85:4f:d9:66:9a:56:4d:2a:bc:
                    27:f5:48:32:0f:41:e6:a1:7c:32:47:2a:84:4f:f5:
                    bd:b9:14:cd:d8:5f:b0:fd:c8:95:62:6b:69:da:a0:
                    7a:7c:67:8a:05:71:87:c9:dc:86:95:38:3d:e7:60:
                    fd:99:2b:1a:38:30:21:76:5d:f3:7d:2f:5e:98:77:
                    69:d9:16:34:85:d9:8e:37:75:fa:57:8a:1a:b5:e8:
                    a6:33:7e:dc:82:16:51:30:fc:8a:5e:1c:e3:90:cc:
                    f9:18:0e:32:3e:34:cd:b8:be:f8:76:70:d0:8c:99:
                    91:a8:55:17:7d:85:8a:2b:1a:71:4f:40:e5:87:b7:
                    9d:1b:9d:1d:aa:06:ee:4b:4d:2a:9a:08:03:1f:12:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:92:4C:FE:1D:93:66:9B:31:A9:C0:97:39:09:8F:D1:78:96:CC:A6
            X509v3 Authority Key Identifier:
                keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:92:95:67:bb:71:6c:29:51:23:f4:b0:2f:b2:3a:a1:b8:
         ad:49:e6:4c:78:60:82:c8:61:27:e1:e0:96:f1:5c:d4:21:19:
         2e:8d:f9:aa:e1:e1:81:46:1d:54:11:8b:48:bd:9a:bd:72:c1:
         20:1f:14:dd:04:cf:4d:89:d2:97:2d:a7:7e:d8:65:bd:3d:e4:
         6e:07:12:9d:f3:01:4d:5f:8d:41:d3:0b:d9:37:9f:3e:39:8c:
         9f:70:e1:cc:ff:72:6a:ae:02:77:d3:c1:82:0c:58:39:9f:e1:
         95:7f:c1:eb:5d:ad:39:4c:ee:ca:3a:34:49:d3:83:58:63:aa:
         91:8d:3f:7b:3b:5c:f2:6f:18:c1:53:ad:d8:22:1d:2e:a7:ab:
         da:d7:ad:fc:a9:e1:ba:06:93:df:7a:08:50:ef:db:3e:1f:33:
         24:d0:66:c1:2c:58:a4:5a:2f:70:10:cd:6c:68:b8:ef:3c:d1:
         68:f9:c4:a6:28:01:8a:2e:36:c6:a9:c1:7d:94:a8:3a:e9:26:
         31:06:fd:da:91:b9:59:51:09:db:90:8b:16:8d:8c:aa:36:ff:
         8d:25:26:d0:11:91:3b:8c:11:09:ec:d7:8b:52:88:e0:a1:4d:
         98:6f:ee:ef:59:2e:99:8b:85:9f:fd:f0:f3:2d:74:41:b1:fb:
         b8:9e:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:26 2026 by rpki-client