Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          Uc1eDayQBfeXz+ecx/Q7Si1bFYOt6vPnwvwtfcZf9dI=
Subject key identifier:   59:BF:6E:16:B2:B3:0D:14:3F:DE:8B:0A:6F:50:32:E3:01:0F:D5:13
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       019CAA215EBC8B0B5588BCEB684840339457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          1870
Signing time:             Sun 01 Mar 2026 16:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:39 +0000
Files and hashes:         1: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          2: If-bDs5bsfd6ZQiGWil-kWbKDd0.roa (hash: o29JqRpcAVvASVbfqlx+K9rVrbrObE+wm1Xs0GU9Oc0=)
                          3: KaV7WQTmEBB5ElyfSkeRcdRkwVQ.roa (hash: TAioNVpbWMnrsDn8XziZCY+B4L1YFWRb17VHc9YZ38E=)
                          4: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (hash: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I=)
                          5: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: HBHIpJFsmsSQTpnKNFsG6f8YKiXRRiwmVs340wJUddk=)
                          6: Y6xPhAaGaUWtx8rNnI1dXYEj0aw.roa (hash: tm3dFmff/ON3GA1Vgz1QD4kPElsUnFwCa/m/O6fGpE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:5e:bc:8b:0b:55:88:bc:eb:68:48:40:33:94:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Mar  1 16:00:39 2026 GMT
            Not After : Mar  2 16:00:39 2026 GMT
        Subject: CN=59bf6e16b2b30d143fde8b0a6f5032e3010fd513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:6c:3a:00:2e:8b:ec:53:eb:d3:1c:6b:2f:
                    4f:7d:cf:61:a1:7b:fe:83:15:b8:63:05:9e:61:c8:
                    eb:5a:a3:8b:97:8f:f5:c1:bd:ca:7e:61:89:dc:56:
                    66:30:c9:97:53:f2:fb:14:fa:40:df:66:f3:f2:40:
                    c4:61:62:e7:71:b4:66:34:c5:5e:4d:9d:4f:30:73:
                    a0:b1:07:e9:50:bf:e1:2b:e7:6d:0e:db:4d:a9:47:
                    e7:57:91:df:93:97:24:b5:ab:f5:48:9a:1e:79:53:
                    cd:73:cf:94:b5:85:42:02:73:b7:b6:db:e1:fd:2a:
                    08:47:f8:34:14:04:91:6e:66:ba:db:be:ad:6d:68:
                    75:df:0c:df:ab:b9:a8:1a:0c:de:05:f2:62:07:0e:
                    7b:de:b3:b7:6e:23:cd:82:fd:30:22:4c:cb:da:d3:
                    d6:b3:4e:19:a9:8a:1f:15:44:49:a2:20:54:e7:d5:
                    92:1f:02:a9:4b:b4:a6:6a:c4:1a:68:9d:1f:9e:5a:
                    77:27:db:10:28:ab:dd:90:27:30:d4:12:9f:a0:44:
                    cd:3f:fd:0d:78:d2:42:db:5e:0d:a1:f3:36:3d:ab:
                    c4:95:b5:19:7d:17:82:ed:11:f2:6b:4a:32:a0:09:
                    24:4f:cf:4d:9c:3e:e3:86:e0:43:3d:8f:8b:0c:8d:
                    cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:6E:16:B2:B3:0D:14:3F:DE:8B:0A:6F:50:32:E3:01:0F:D5:13
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:10:b8:5d:74:10:8a:9e:54:3c:60:71:2b:d4:b2:5d:33:
         12:40:21:dc:7f:fd:82:01:fb:e4:1b:77:2d:b2:96:1a:ed:0b:
         49:4f:13:cf:b7:5d:08:6a:37:3e:c2:ac:b6:ad:64:66:1f:ac:
         46:f4:3e:b9:9a:be:16:f8:88:44:a1:9e:f9:23:4a:2c:f2:82:
         b1:2f:bd:e5:20:37:7b:e0:7b:0c:6a:2e:0d:57:65:38:14:52:
         15:03:69:c6:fb:30:54:a5:b5:f3:08:a9:f5:1a:6f:a5:4f:80:
         66:2e:2e:fc:64:ed:9b:66:e0:83:e0:ff:d7:c1:79:df:ff:37:
         bd:94:0e:cf:23:c0:53:66:1b:30:52:0e:5a:6b:1f:01:8b:64:
         ea:00:c9:e2:53:a1:98:9c:6e:e6:fe:a7:73:b1:8f:fb:8a:ae:
         6c:ae:67:6e:fd:fd:9e:7a:2a:c5:55:8c:79:c8:89:08:50:b6:
         cb:6e:cd:ec:e4:f8:d9:93:a6:5b:1c:15:60:e7:cd:e5:73:7f:
         1c:ce:11:92:17:0d:9e:ed:7e:bd:0b:64:d7:64:78:ff:67:2e:
         ea:70:8c:57:04:e4:6f:2d:75:be:3e:fb:99:aa:03:e2:17:9b:
         dc:0a:72:4c:af:ea:db:f0:84:bf:b0:c7:cb:2b:11:c5:9b:79:
         06:aa:af:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIV68iwtViLzraEhAM5RXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjYwMzAxMTYwMDM5WhcNMjYwMzAyMTYwMDM5WjAzMTEwLwYDVQQD
Eyg1OWJmNmUxNmIyYjMwZDE0M2ZkZThiMGE2ZjUwMzJlMzAxMGZkNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn9sOgAui+xT69Mcay9Pfc9hoXv+
gxW4YwWeYcjrWqOLl4/1wb3KfmGJ3FZmMMmXU/L7FPpA32bz8kDEYWLncbRmNMVe
TZ1PMHOgsQfpUL/hK+dtDttNqUfnV5Hfk5cktav1SJoeeVPNc8+UtYVCAnO3ttvh
/SoIR/g0FASRbma6276tbWh13wzfq7moGgzeBfJiBw573rO3biPNgv0wIkzL2tPW
s04ZqYofFURJoiBU59WSHwKpS7SmasQaaJ0fnlp3J9sQKKvdkCcw1BKfoETNP/0N
eNJC214NofM2PavElbUZfReC7RHya0oyoAkkT89NnD7jhuBDPY+LDI3PFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm/bhaysw0UP96LCm9QMuMBD9UTMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPcQuF10
EIqeVDxgcSvUsl0zEkAh3H/9ggH75Bt3LbKWGu0LSU8Tz7ddCGo3PsKstq1kZh+s
RvQ+uZq+FviIRKGe+SNKLPKCsS+95SA3e+B7DGouDVdlOBRSFQNpxvswVKW18wip
9RpvpU+AZi4u/GTtm2bgg+D/18F53/83vZQOzyPAU2YbMFIOWmsfAYtk6gDJ4lOh
mJxu5v6nc7GP+4qubK5nbv39nnoqxVWMeciJCFC2y27N7OT42ZOmWxwVYOfN5XN/
HM4RkhcNnu1+vQtk12R4/2cu6nCMVwTkby11vj77maoD4heb3ApyTK/q2/CEv7DH
yysRxZt5Bqqvuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:38 2026 by rpki-client