Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
File:                     _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json)
Hash identifier:          y1GdjzS9nWx7m+x37A3qxSsuSG6cLde6ljrrbM2b8cE=
Subject key identifier:   D3:85:67:1D:B9:43:59:A1:D6:9E:43:FD:95:DE:4F:6C:C1:53:4E:66
Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
Certificate issuer:       /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
Certificate serial:       019CACB4986D5DCFF8BBC8FD4FE9E9A372C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
Manifest number:          0378
Signing time:             Mon 02 Mar 2026 04:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:42 +0000
Files and hashes:         1: 6DAFoolDl25b6CeU13ABi1gaKVY.roa (hash: hkQzlBV/4pKV31+WoeG1LCaAMIQqD6rzwMSDD2TcPzw=)
                          2: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: 2iMbHTsCylVctC5mPrf5+lYJETN+mvVYd9svHR1FtnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:98:6d:5d:cf:f8:bb:c8:fd:4f:e9:e9:a3:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
        Validity
            Not Before: Mar  2 04:00:42 2026 GMT
            Not After : Mar  3 04:00:42 2026 GMT
        Subject: CN=d385671db94359a1d69e43fd95de4f6cc1534e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:75:f8:cb:17:0b:d3:8e:b4:5d:35:63:87:4c:
                    ca:50:e6:d8:6c:8d:83:10:81:5b:d8:e8:e8:25:4b:
                    90:ce:8e:f6:6a:6b:5c:d3:bb:a9:62:cf:ad:a0:ae:
                    61:aa:52:d2:a8:08:13:19:ff:a6:4b:30:25:35:aa:
                    d0:60:62:a9:fe:b3:7c:c1:92:10:93:42:c9:08:48:
                    80:b5:8a:6f:95:75:09:16:fa:5b:03:8e:be:63:4b:
                    bc:6c:f6:51:f5:15:89:48:1b:9c:6a:10:68:3c:23:
                    0a:8e:1a:f2:cb:72:00:2e:8e:ed:fb:f7:ea:50:72:
                    d6:e7:ac:4b:3c:b6:c6:39:66:af:ef:f4:42:e6:9e:
                    ac:c2:7f:32:31:b0:6d:b4:84:41:69:34:2d:18:85:
                    8a:b1:61:6a:22:ec:e6:4e:9c:ab:5a:c4:cf:e5:6b:
                    02:ca:40:11:8f:33:90:bd:a7:68:2d:39:d9:e1:f6:
                    29:b0:4e:6e:7f:09:d4:69:06:d3:78:be:7c:3c:95:
                    2e:8c:19:f6:c5:3c:c4:46:26:0c:0e:26:82:06:24:
                    57:a2:18:8f:36:5f:b9:c9:d0:f0:11:d5:ac:ef:4d:
                    53:bc:72:6a:6f:a9:40:f6:6d:ff:58:6b:eb:4e:fe:
                    9d:09:c7:0a:10:93:d0:f2:0e:12:bc:93:24:cb:b4:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:85:67:1D:B9:43:59:A1:D6:9E:43:FD:95:DE:4F:6C:C1:53:4E:66
            X509v3 Authority Key Identifier:
                keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:c9:13:4f:14:bc:f5:18:62:01:46:a8:57:ca:db:63:07:
         9e:0b:da:f6:51:dc:a9:8d:f6:0a:aa:e7:a2:46:08:2e:0f:43:
         18:5f:44:26:55:40:01:0c:89:35:bf:56:e2:e7:6a:f3:28:4d:
         66:06:c5:1e:69:73:b1:04:f5:2a:c6:60:95:f7:a3:1f:d6:9d:
         5b:23:c6:e9:cd:51:ee:22:4e:d2:42:b6:3c:13:d4:65:1f:43:
         67:82:5a:6c:e8:de:c2:1e:f3:83:1a:68:8c:81:3d:48:ca:06:
         4f:5a:24:63:dc:8d:4b:81:7e:e0:f4:1b:9d:cf:81:54:57:ed:
         5d:68:1c:29:a4:72:67:0f:be:07:02:ad:ba:e2:9e:0a:82:6c:
         15:de:d8:07:17:35:98:5f:30:1c:4e:c5:b5:93:ad:ef:79:0d:
         77:46:c1:90:cb:27:e2:bb:89:b3:93:44:de:1e:a9:ca:1f:2d:
         d9:1e:08:c4:c3:83:89:70:3a:53:c4:48:41:99:fb:1f:db:63:
         3e:75:c3:df:cd:32:99:ae:93:c5:18:cd:5c:5a:e3:32:c7:72:
         78:ca:f1:cd:7e:03:ca:cc:a4:f2:5d:28:3f:2a:7c:00:68:1c:
         50:4e:c2:d1:c8:69:a5:2b:16:e9:85:85:b9:37:31:c3:1d:56:
         77:aa:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:09 2026 by rpki-client