Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          j3fn6bZOb8MIXQ0Huqwxxpwm4iZ2oBvNKYx6Uz/FelU=
Subject key identifier:   64:31:C0:CC:F1:53:89:70:5A:F0:44:2A:CD:7C:81:29:74:15:CA:E9
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019CAB6BC059E5CB574EB123872D224ABDF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          1283
Signing time:             Sun 01 Mar 2026 22:01:31 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:31 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:31 +0000
Files and hashes:         1: MpwIY7Ebi8bx833CV_5moln-CB0.roa (hash: IcPeEwSEZRPBHIQ02cGM6FjSpHotFVeRsIkfWF3fy2s=)
                          2: dwAqRvLPaFJvT81jjmY8z6OAffc.roa (hash: U+GbR8Ko/UO/PdAN8+pRGxNFE5XM37ujAKQFqPLbxQ4=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: v7H9k0nPFBgvdVuveoEAtDeslli56dSBFWmI3iAMepM=)
                          4: mstzb26BC_IbEF1cblkahySAWUo.roa (hash: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU=)
                          5: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (hash: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c0:59:e5:cb:57:4e:b1:23:87:2d:22:4a:bd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Mar  1 22:01:31 2026 GMT
            Not After : Mar  2 22:01:31 2026 GMT
        Subject: CN=6431c0ccf15389705af0442acd7c81297415cae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:17:a2:13:a9:1c:e7:df:07:b4:b4:6f:82:
                    06:d5:96:83:ab:17:9d:cf:fb:35:d0:1e:fc:d7:9c:
                    06:21:92:8a:ea:27:02:09:0a:0b:5a:b6:45:89:e9:
                    22:d9:43:3f:4c:81:99:cf:c1:f3:87:32:f7:45:1c:
                    72:ca:83:da:ff:ce:68:b9:e7:3f:2c:6f:1d:e4:8b:
                    2d:69:8f:38:ba:9a:d8:09:01:23:7b:e3:f3:77:19:
                    d0:1d:94:e0:ea:c6:37:dd:fd:e6:6f:b5:eb:68:90:
                    f9:80:14:81:44:33:94:fa:3d:26:78:a5:3d:6f:ff:
                    0d:9f:cc:59:3b:f1:90:77:0e:0c:9e:de:43:a0:a7:
                    6a:39:83:96:6c:90:e4:64:c1:21:8a:f9:90:6c:35:
                    24:eb:d5:e8:2f:0d:c0:55:88:c0:8f:a7:5d:a5:32:
                    d8:89:0d:8d:6d:ec:c0:26:ce:c9:ae:cc:9d:81:fa:
                    94:fc:ae:44:6e:3f:e8:85:a8:32:02:b0:2a:20:d6:
                    7f:16:16:3a:b5:fa:70:7d:cc:21:18:74:14:57:fe:
                    8c:19:66:a3:53:e8:31:b7:33:fa:7c:a6:a3:78:49:
                    e0:da:34:e0:ab:2b:93:9d:10:42:e4:98:51:d3:b7:
                    a9:99:c7:73:a3:c2:1c:ea:eb:2d:1c:32:8b:80:b4:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:C0:CC:F1:53:89:70:5A:F0:44:2A:CD:7C:81:29:74:15:CA:E9
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:02:20:62:40:27:f0:4f:03:d4:e3:70:e8:50:da:de:35:65:
         e5:75:4d:b9:93:03:f9:eb:08:31:92:be:55:c8:2d:38:f1:d4:
         bb:0b:a7:3a:e0:eb:1e:a4:99:0e:ff:1a:67:38:c1:0e:8a:45:
         79:ca:ab:60:71:ae:6a:a5:6a:b4:3c:4b:8e:cb:7c:3c:db:21:
         74:6a:f2:ed:92:0a:57:24:17:b4:3e:fe:5a:35:6b:8d:ef:7f:
         4b:53:22:9a:f4:42:b3:db:d5:db:10:f0:26:31:72:0f:c3:87:
         1c:be:25:2a:da:b0:a9:6b:18:bc:1b:96:ab:12:fa:5d:9f:aa:
         e8:4a:4e:97:6e:d5:8d:d2:ec:93:bc:c8:ce:25:67:30:bc:b5:
         e3:b5:cd:c0:3b:2e:80:09:26:97:59:17:bf:b4:58:97:99:5d:
         a6:65:7f:46:33:1c:47:52:5e:6c:65:7e:a7:36:b9:73:09:45:
         89:46:7f:50:04:d1:c1:2d:d6:90:69:c3:86:df:fe:6d:0e:b0:
         44:b0:e3:d8:2c:2d:cd:0d:6b:1a:6f:40:7f:db:99:c3:6f:9f:
         80:d8:21:4f:c3:98:b7:be:6e:42:74:6f:22:9e:21:9a:d4:24:
         60:b5:94:db:70:a2:cf:74:0f:fa:ef:9f:90:6c:09:51:90:2c:
         b9:1f:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:31 2026 by rpki-client