Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          ZO7FWJVApACJAfVxDfjqfcHT7NHvpDErsw/PHh2zpcU=
Subject key identifier:   F7:9B:7E:14:B1:32:55:2C:42:BA:42:B3:0B:CC:CE:3E:66:F2:C0:A9
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       019CABA1C71CF34E001051DF618750AAE356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          056E
Signing time:             Sun 01 Mar 2026 23:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:32 +0000
Files and hashes:         1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
                          2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
                          3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
                          4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: yqXFQgMRAmCfrBpuHZzoRQ4qwzNlxXTQryc3iZq1TuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:c7:1c:f3:4e:00:10:51:df:61:87:50:aa:e3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: Mar  1 23:00:32 2026 GMT
            Not After : Mar  2 23:00:32 2026 GMT
        Subject: CN=f79b7e14b132552c42ba42b30bccce3e66f2c0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:03:cd:ea:06:74:be:1d:b6:29:df:96:23:
                    a2:4f:2b:63:42:31:13:41:cc:37:3b:36:a4:7d:cc:
                    fb:22:43:cc:82:d1:1f:88:df:a9:8d:0b:b3:a2:18:
                    2f:e1:be:c1:20:d9:9b:e7:d3:af:52:8e:bf:5a:ab:
                    52:08:14:e1:fa:68:58:68:fe:df:b7:61:d9:ad:a9:
                    d3:6b:75:99:6a:e7:99:02:43:2a:2e:99:84:be:26:
                    41:de:ea:23:4b:4c:cb:8f:c2:95:a7:22:99:24:04:
                    db:75:bd:f5:b0:2a:45:05:73:3e:f1:b8:e1:01:19:
                    04:1b:5a:a9:36:c2:5c:64:d8:e4:a4:79:79:c4:ab:
                    15:39:37:87:d0:ae:1e:87:45:75:2a:5f:e3:5e:a1:
                    71:a5:3c:97:a3:0c:32:33:06:4d:0c:02:d1:67:a1:
                    e9:e0:48:7e:93:ff:67:e4:ea:8e:bf:ad:e3:8c:b2:
                    3f:6b:4c:79:03:72:2e:f6:11:32:64:13:2f:22:0e:
                    58:d3:5b:4d:bf:52:8f:ec:8c:50:3e:db:64:f9:5d:
                    dd:69:f5:b7:ec:4b:2b:a8:19:a3:87:1f:00:50:e4:
                    37:a7:d9:64:be:45:96:d1:0f:48:18:24:10:0a:35:
                    95:21:1f:06:4b:bd:ec:f6:dd:8a:bb:cf:cd:8d:85:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:7E:14:B1:32:55:2C:42:BA:42:B3:0B:CC:CE:3E:66:F2:C0:A9
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0f:7b:4c:8f:09:37:2d:d9:6c:33:dd:ea:3c:03:3d:d9:d7:
         7e:7a:43:71:a2:b0:d2:46:7e:46:2f:cb:f5:10:c3:8f:29:87:
         cb:25:1c:b7:96:d5:95:f3:fb:db:d2:4d:c1:b1:8f:77:23:0b:
         80:aa:60:f0:56:15:a0:6d:48:ae:89:4a:eb:56:2d:fd:7d:82:
         d1:8b:4c:6c:c3:3e:44:39:56:58:1e:8e:d3:ca:02:ff:ef:1e:
         5a:40:92:e9:33:d5:37:23:08:1c:b8:a3:c5:b3:d6:5b:e4:9b:
         3b:7a:51:c6:33:15:f7:1d:03:41:6e:a4:78:45:6a:b5:cb:18:
         91:14:23:f3:e0:a5:fe:5b:c1:62:dc:39:b3:ee:19:df:49:d9:
         71:6c:f5:92:3d:35:7c:68:d7:0d:05:b0:ce:9a:11:8a:14:91:
         39:94:48:73:d4:62:4d:3b:5d:5b:dc:a3:83:62:8c:51:40:e4:
         a9:d8:de:a6:f9:e1:16:88:a5:60:9b:95:29:12:7c:17:bd:5d:
         4b:35:49:ee:b2:51:a2:87:3d:71:ca:67:42:c0:06:9d:07:16:
         75:9a:5a:e2:03:00:aa:88:43:28:8a:72:30:3d:e2:b1:05:d1:
         fb:9d:2f:49:e5:09:d5:d2:45:c8:d4:52:49:67:c5:15:31:e2:
         d1:c0:db:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroccc804AEFHfYYdQquNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw
ODA2OGMwHhcNMjYwMzAxMjMwMDMyWhcNMjYwMzAyMjMwMDMyWjAzMTEwLwYDVQQD
EyhmNzliN2UxNGIxMzI1NTJjNDJiYTQyYjMwYmNjY2UzZTY2ZjJjMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhkDzeoGdL4dtinfliOiTytjQjET
Qcw3Ozakfcz7IkPMgtEfiN+pjQuzohgv4b7BINmb59OvUo6/WqtSCBTh+mhYaP7f
t2HZranTa3WZaueZAkMqLpmEviZB3uojS0zLj8KVpyKZJATbdb31sCpFBXM+8bjh
ARkEG1qpNsJcZNjkpHl5xKsVOTeH0K4eh0V1Kl/jXqFxpTyXowwyMwZNDALRZ6Hp
4Eh+k/9n5OqOv63jjLI/a0x5A3Iu9hEyZBMvIg5Y01tNv1KP7IxQPttk+V3dafW3
7EsrqBmjhx8AUOQ3p9lkvkWW0Q9IGCQQCjWVIR8GS73s9t2Ku8/NjYXazQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPebfhSxMlUsQrpCswvMzj5m8sCpMB8GA1UdIwQY
MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt
NjQ4MGMzZDFmNGU0LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0
LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ97TI8J
Ny3ZbDPd6jwDPdnXfnpDcaKw0kZ+Ri/L9RDDjymHyyUct5bVlfP729JNwbGPdyML
gKpg8FYVoG1IrolK61Yt/X2C0YtMbMM+RDlWWB6O08oC/+8eWkCS6TPVNyMIHLij
xbPWW+SbO3pRxjMV9x0DQW6keEVqtcsYkRQj8+Cl/lvBYtw5s+4Z30nZcWz1kj01
fGjXDQWwzpoRihSROZRIc9RiTTtdW9yjg2KMUUDkqdjepvnhFoilYJuVKRJ8F71d
SzVJ7rJRooc9ccpnQsAGnQcWdZpa4gMAqohDKIpyMD3isQXR+50vSeUJ1dJFyNRS
SWfFFTHi0cDb7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:48 2026 by rpki-client