Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
File:                     mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft (raw, json)
Hash identifier:          z1MoSOy709HxnglKVw/H1yroi9/oNx5bysnf97ymhqg=
Subject key identifier:   DE:B1:3E:7C:FA:16:04:B2:5B:5C:21:18:9C:D2:97:EE:46:B2:7F:DA
Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
Certificate issuer:       /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Certificate serial:       019CAC46D271F07029864D90E8D12C6713E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
Manifest number:          4C
Signing time:             Mon 02 Mar 2026 02:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:48 +0000
Files and hashes:         1: 1oGTaM3zmtQJpGT_DCG0ZTFDaFE.roa (hash: ftY/djmIVMK9vgZAiTPC+/EhDKbjDLXFuK6i4nUE7p0=)
                          2: mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl (hash: Duq/Jj7HPjYdUJs8xCmcUU6/vL1ehsqXRAb1xDcSR+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:d2:71:f0:70:29:86:4d:90:e8:d1:2c:67:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
        Validity
            Not Before: Mar  2 02:00:48 2026 GMT
            Not After : Mar  3 02:00:48 2026 GMT
        Subject: CN=deb13e7cfa1604b25b5c21189cd297ee46b27fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:b3:ee:a6:48:6f:e5:ad:8f:0f:63:5d:4c:
                    c7:ff:e6:a9:81:64:dd:af:85:26:55:ba:3d:aa:2a:
                    77:9f:e3:7c:86:dd:3a:f3:b2:63:46:c7:6a:a0:f9:
                    0d:b8:da:0f:3c:d3:39:64:73:8c:11:b3:27:34:92:
                    9f:7c:96:fb:d4:53:8c:41:1f:32:3a:77:34:b6:18:
                    b6:35:07:5d:be:d3:00:d3:12:f0:fe:11:4d:2a:ce:
                    e2:4f:fd:93:89:0e:a0:a1:0b:47:0c:38:be:42:53:
                    91:43:7b:c3:c7:4c:ec:8c:78:66:55:de:2d:88:b8:
                    95:0e:16:9c:b8:b7:5d:ef:18:44:60:19:ad:12:df:
                    8d:73:a8:75:f2:1d:8f:55:3c:f1:52:4b:67:ff:14:
                    cc:d2:a8:83:08:b2:ea:6b:00:56:0e:1c:85:1f:68:
                    88:f8:03:b4:d5:ff:e1:39:62:12:af:06:9e:9c:46:
                    46:80:dc:79:c4:50:e3:e3:62:66:2f:14:d0:01:79:
                    72:41:52:e1:da:14:c4:c5:af:96:2d:90:e2:25:3c:
                    42:78:70:de:76:f5:8e:07:64:07:26:e8:df:dd:a5:
                    bd:b2:f0:5d:16:14:44:fb:7b:18:d5:48:74:9b:01:
                    7e:38:09:47:cc:6b:8e:72:76:22:88:eb:7b:54:48:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:3E:7C:FA:16:04:B2:5B:5C:21:18:9C:D2:97:EE:46:B2:7F:DA
            X509v3 Authority Key Identifier:
                keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:53:05:bf:43:54:43:81:90:ce:5d:d4:e7:f2:25:7c:95:
         d6:c3:9e:ee:4b:e5:7b:e3:6f:c9:05:e0:bc:16:d9:11:f6:6b:
         14:eb:e6:4b:60:68:4c:00:a8:51:45:bb:58:3d:2a:9e:42:5e:
         44:b1:ed:01:c9:32:6c:83:34:34:17:e5:c1:38:2b:c4:6d:a8:
         39:ec:96:bb:e4:ac:12:df:af:4e:da:fd:ec:72:c7:46:d9:b0:
         38:9a:01:63:88:3a:48:bc:2a:ce:c9:a4:37:25:1b:5e:1c:a8:
         c4:12:a3:a0:18:82:c7:d1:91:6a:38:95:1d:7e:cf:a0:8d:bf:
         4a:63:9b:34:26:74:27:e3:12:d6:ad:8e:da:94:94:56:0f:81:
         e4:08:c8:f3:f0:8b:de:a2:97:c3:d7:fc:bd:ee:43:c9:7e:2f:
         b0:07:3d:d4:c7:01:ae:fa:86:f5:18:39:e5:86:3a:38:a8:15:
         42:91:9c:28:71:8d:df:d8:02:2b:ae:b3:6c:fe:8f:e5:0e:2c:
         9c:b1:b4:68:24:a7:48:ba:42:36:d4:45:a3:e2:96:74:73:96:
         93:db:1a:2b:66:fc:04:77:00:c3:66:d8:bc:8f:20:dd:39:a2:
         97:b9:c5:fe:02:52:ee:22:fd:90:63:00:60:84:0e:ae:66:d4:
         61:f4:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:07:30 2026 by rpki-client