Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          TgD7Vpip35Eq5sIn2BLgJPjrVKoHD2K9x383HWF01p8=
Subject key identifier:   8C:D9:75:93:56:33:6F:45:99:A2:9D:02:30:62:21:2C:17:27:63:F3
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       019CAE35EB1EC83838EED97717BDE1E6FD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          031D
Signing time:             Mon 02 Mar 2026 11:01:34 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:34 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:34 +0000
Files and hashes:         1: T5e0TgseHoV5T0D1V0ELGlI9FBc.roa (hash: Q9H/hI7Y9VsQ4ugMF8ryTSl2yPuCfHdqE0UId9QIWbI=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: CwFfjf5IEAKviodKXNEBplk2EhukShKF4c3ZyARBWa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:eb:1e:c8:38:38:ee:d9:77:17:bd:e1:e6:fd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Mar  2 11:01:34 2026 GMT
            Not After : Mar  3 11:01:34 2026 GMT
        Subject: CN=8cd9759356336f4599a29d023062212c172763f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:42:62:9d:74:73:cd:d4:21:24:23:b1:6f:
                    b0:24:13:8e:5d:10:28:cd:ad:5d:d2:ca:60:28:c6:
                    80:75:a8:01:42:72:f4:af:0a:cc:94:9b:88:b7:dd:
                    bf:0f:52:f3:00:82:5e:cf:ba:54:49:47:03:3b:c0:
                    8b:a9:50:1c:50:0f:29:19:0d:8d:85:15:b9:54:98:
                    13:9b:4e:62:8d:36:fb:05:73:7c:56:33:bd:02:c0:
                    4c:89:89:89:44:6e:b0:6c:cc:fe:0b:68:c5:75:bb:
                    0e:f8:d7:8c:ec:3d:0d:7a:ef:bf:7f:e9:a6:81:7d:
                    57:c6:1c:08:19:c8:96:c2:48:cb:3a:b9:96:50:34:
                    fb:59:70:34:94:7d:f8:0d:44:15:1d:c1:d8:11:87:
                    d8:d0:40:1c:87:f9:a3:ab:8b:3b:d0:d6:1c:4a:06:
                    dc:40:68:c4:cb:af:ce:81:e5:4e:ad:f9:12:b1:20:
                    05:25:7e:c9:8d:d7:fa:b9:d5:43:34:b2:36:8c:a7:
                    60:9b:84:46:75:cd:7d:a0:66:18:a5:c1:e3:97:89:
                    73:91:f9:a9:8b:61:01:32:57:7b:9f:15:43:cc:90:
                    27:fa:c6:55:8a:b5:26:c9:c4:59:18:3c:a3:a5:79:
                    c6:3f:50:0b:7e:3d:25:f9:19:04:0e:11:90:7c:95:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D9:75:93:56:33:6F:45:99:A2:9D:02:30:62:21:2C:17:27:63:F3
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:04:be:1a:e1:3a:a1:e2:c3:67:19:2b:76:7e:76:fb:c2:
         d0:cf:67:1b:11:7a:aa:e0:ad:2c:2e:9b:7a:90:ab:4d:94:ae:
         fd:8f:1e:0a:ef:f5:96:a3:7d:17:b6:20:b9:c2:c3:9b:a4:00:
         19:4d:18:53:75:78:05:2b:1f:ab:64:b4:25:6c:08:1b:68:7f:
         a4:4b:de:3b:d7:18:77:53:fd:b3:97:26:14:bf:e7:c0:e7:8f:
         3f:cd:e0:43:73:2b:03:97:cb:6f:0c:8b:64:b2:23:db:38:35:
         76:b5:8e:4d:79:07:2d:e6:0b:98:a2:6e:1e:cf:0c:90:7f:96:
         33:d9:ee:8b:70:fa:df:58:92:dd:91:f0:c9:96:17:65:59:2b:
         d2:d8:81:88:0e:83:2f:5e:25:38:14:eb:61:f1:37:c2:e2:12:
         80:e7:41:11:ae:5c:89:33:36:99:ff:83:56:3e:16:17:3e:7f:
         e1:30:10:7e:d7:74:a7:bb:e3:7e:f0:d7:09:5e:49:4e:20:84:
         91:e3:35:ff:55:dc:da:dd:91:3e:8d:82:08:e2:25:20:75:be:
         bf:d3:bb:2b:1b:03:e1:57:71:54:39:58:d9:28:9d:9e:62:99:
         2c:43:46:94:aa:52:bf:fb:5b:49:c4:41:ee:4c:18:10:4e:72:
         37:df:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:34 2026 by rpki-client