Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File:                     e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier:          DabA2LRh5SO0i26kwQwVnPNrK9qRSCPjPtAAM2D9Foo=
Subject key identifier:   BF:0D:66:88:CB:68:87:24:AC:56:D1:22:C6:60:2C:78:69:F0:EC:A2
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer:       /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial:       019CADFE940A0E1312AB297644A5D64FF955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number:          184D
Signing time:             Mon 02 Mar 2026 10:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 10:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 10:01:08 +0000
Files and hashes:         1: GJv2c95zewqGYYNIQJziJZtnsNM.roa (hash: Mp+zg2LDO9MydwbN7xl835TAh4mfHcni/EzAt55706E=)
                          2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: GOAHUzoYMYq2XN3AO4viSd5C363a2lRPt3PKiiYEJTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:94:0a:0e:13:12:ab:29:76:44:a5:d6:4f:f9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
        Validity
            Not Before: Mar  2 10:01:08 2026 GMT
            Not After : Mar  3 10:01:08 2026 GMT
        Subject: CN=bf0d6688cb688724ac56d122c6602c7869f0eca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:7e:d6:1f:19:88:74:d5:58:34:65:de:87:
                    5d:ef:49:73:4f:bd:d2:e1:61:d5:64:c8:3a:9f:43:
                    96:6c:d1:7e:84:9a:55:20:d4:c0:59:a7:ab:c5:2f:
                    35:c1:57:ba:0c:fc:a0:8e:41:15:b1:0d:88:e6:54:
                    76:05:d8:8a:d0:af:0e:90:7d:fd:d8:ac:7f:19:79:
                    30:1e:7b:9c:d5:1c:0a:0f:17:58:2f:f3:94:7e:4e:
                    0a:1a:c2:28:a8:a9:63:d2:7c:ca:13:54:b7:5b:a0:
                    c1:20:ba:23:12:c6:ea:35:99:db:3c:20:5c:b1:b9:
                    a7:6c:c4:f0:fb:2d:a4:94:f3:c2:5b:34:02:3f:49:
                    20:ac:68:9e:fd:68:c0:b6:d8:09:bd:ed:4f:e1:e1:
                    bf:39:39:b9:55:19:d3:20:1c:ff:53:38:a5:8d:43:
                    33:d0:cd:36:a4:c6:ae:42:24:7b:0e:13:9d:5d:9f:
                    15:4d:a8:d3:d7:b4:40:cf:1c:d6:32:46:4d:2f:bb:
                    35:d2:b1:c5:6d:a7:cf:92:30:3c:7d:be:77:98:eb:
                    c3:af:95:28:f9:08:fb:10:26:94:22:20:59:33:50:
                    2d:25:fe:c2:ba:7e:58:ac:21:3e:2b:90:d7:43:a8:
                    9b:5a:ff:c9:c9:c1:bc:d1:12:73:0e:89:ec:d7:0c:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:66:88:CB:68:87:24:AC:56:D1:22:C6:60:2C:78:69:F0:EC:A2
            X509v3 Authority Key Identifier:
                keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:c6:d1:52:63:f5:79:f2:e6:71:44:ed:f6:17:d7:5e:98:
         71:09:00:1f:9d:81:f6:18:27:19:3b:c0:96:9a:f3:4d:83:b8:
         0a:5a:72:11:14:a9:63:b8:c8:93:25:99:a7:1b:89:22:c6:ba:
         33:af:e8:0f:05:cf:9f:df:b2:2a:a9:a8:db:9e:62:5d:52:ed:
         88:b1:ec:d9:02:cf:88:2d:31:d1:8c:bd:29:eb:1b:99:be:5a:
         fe:6b:84:a2:4d:96:bf:2d:25:7f:67:d7:46:cc:9b:dc:f3:fa:
         e2:c3:9b:39:3c:b7:a7:ad:89:38:36:47:c6:19:08:ef:08:35:
         d2:98:34:38:4d:09:a0:bc:2d:8e:c2:1f:2f:3e:c3:36:8b:1d:
         0b:b3:46:bc:b5:07:6a:75:d3:47:de:c2:19:eb:b9:43:53:f4:
         bc:d5:73:1e:27:c2:78:12:c4:dc:7e:8f:a3:20:ee:d2:0a:b2:
         ad:a4:ff:7a:95:00:5e:6a:4f:59:79:21:b9:42:f9:1b:4b:c4:
         12:14:33:1d:3f:6b:bf:60:45:67:83:4b:ef:9a:00:aa:41:d1:
         e9:8b:7b:a0:79:ae:36:fd:8f:ac:2b:08:cb:23:1a:68:2f:17:
         9b:d2:fb:e4:d3:cc:51:52:cb:26:e8:ff:ad:42:5d:f8:52:47:
         2f:50:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:29 2026 by rpki-client