Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File:                     a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier:          4cLnRsgvhLrXH/2QlDCBcoxWddZCQkkizkQRoCAXk3U=
Subject key identifier:   AF:53:95:67:7C:BA:73:E5:06:43:4C:1C:4E:8D:21:E5:9B:19:22:E9
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer:       /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial:       019CAC7DF9D2414440712A46AA0742996AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 03:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:02 +0000
Files and hashes:         1: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (hash: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU=)
                          2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: FD8nc6XXXJOwco2cobkdFPgM4F0dp5Uis5BlNJ6VS/A=)
                          3: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:f9:d2:41:44:40:71:2a:46:aa:07:42:99:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
        Validity
            Not Before: Mar  2 03:01:02 2026 GMT
            Not After : Mar  3 03:01:02 2026 GMT
        Subject: CN=af5395677cba73e506434c1c4e8d21e59b1922e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:8e:27:74:25:d9:db:37:42:4c:2e:fb:86:
                    84:a9:cf:22:a1:e9:46:fd:d6:3a:e7:7f:6f:56:0d:
                    aa:d0:ef:f0:0e:8e:2b:bd:51:db:83:f9:f0:ef:63:
                    53:a4:a3:d0:ac:d1:f2:66:88:e0:d8:b9:10:d4:39:
                    34:44:78:f0:34:06:a9:b3:3a:77:82:77:b7:2b:dd:
                    df:3a:d2:da:eb:b9:34:48:df:f3:b1:00:66:06:5e:
                    66:3f:e6:66:c4:9b:07:98:10:58:f5:b3:1f:07:69:
                    f1:5c:35:8a:01:b8:e9:21:25:ea:f2:c3:9f:98:1b:
                    12:bd:fe:36:de:3d:72:cf:37:a2:1f:07:c9:bb:b6:
                    a9:d9:95:b0:37:61:cd:03:e0:3d:d8:fc:74:2e:79:
                    a5:8a:ea:ca:92:dd:1b:fb:52:de:27:f2:da:7b:74:
                    8e:36:1d:e5:c4:65:a5:76:cb:b4:9c:16:61:2a:05:
                    f1:dc:97:ef:7f:88:5d:92:38:8d:78:b7:6d:89:93:
                    98:56:85:27:51:0d:46:40:ed:e2:ab:ab:51:6f:86:
                    87:64:7f:b3:b4:1e:07:f4:1a:50:b3:66:88:c4:a4:
                    98:94:bd:46:8f:cf:5c:1b:d2:39:3a:eb:f3:e6:3b:
                    60:bb:91:4c:f7:2c:c5:51:3d:19:d4:29:52:86:bb:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:53:95:67:7C:BA:73:E5:06:43:4C:1C:4E:8D:21:E5:9B:19:22:E9
            X509v3 Authority Key Identifier:
                keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:04:b0:fe:8f:f8:76:1c:23:28:71:63:69:3c:23:e6:79:3d:
         aa:37:18:38:8e:2f:0e:0f:99:e7:de:f7:6b:f9:41:19:51:0c:
         44:0c:33:a1:65:63:08:e5:69:23:f9:e5:05:4d:f0:5f:3f:9f:
         e6:a0:5c:37:a9:31:d3:cd:7d:b3:c7:4f:5c:73:35:0d:92:37:
         21:09:9a:14:64:9f:71:18:37:07:c8:b8:b7:36:1a:d4:c7:0f:
         ec:49:3d:de:f6:5a:e1:a0:be:93:7c:a0:70:7f:f4:bf:c1:f9:
         64:94:37:e6:89:dc:f2:6e:74:f4:8e:86:21:d9:f9:43:e4:37:
         e8:e2:51:8b:58:da:7c:dd:b7:4d:f8:5d:40:fa:86:82:9f:86:
         7e:3b:b4:88:c8:af:50:f2:7b:72:50:9a:a1:e3:cb:37:6c:cd:
         c4:19:e3:91:1a:ba:a5:51:1b:9a:db:5f:b8:34:36:56:1a:e0:
         37:cf:22:a0:ee:a4:d4:89:d1:31:c0:e2:3c:a5:8f:31:7e:97:
         92:4a:0e:73:8d:03:e5:6e:fc:d5:30:7c:45:c7:1d:10:6e:a7:
         0b:47:ed:01:de:b3:cb:de:da:4e:00:52:3a:c8:e9:1b:97:0c:
         20:55:0a:ad:60:cd:9f:b9:58:81:f9:83:90:06:ea:6a:e4:90:
         d5:34:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:22 2026 by rpki-client