Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File:                     pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier:          /Au2EeeHjRahzwLCThJ2tiOp5o1qy9ObvHf2CCYzSNk=
Subject key identifier:   97:43:F9:F1:F3:D2:23:5D:3F:74:AA:90:82:F5:72:65:EA:62:1E:76
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer:       /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial:       019CA945CC7AFAB6EDFF47861B98E265D3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 12:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:49 +0000
Files and hashes:         1: NMnvxW-fHpjvFBsGgVuK7nkogkE.roa (hash: cyPa61O40P16PWh/kNq0rEwVyVEH58xoXbBkkVu4NPA=)
                          2: c2vxh0TJId25IsYoKf4qE5r7y4c.roa (hash: rH400KAscIABX5VYsTzTY3UvtHPOb5oawftmDDbVwS4=)
                          3: hLSO_O6xaM7r05r3MxZf6SqUUFs.roa (hash: P+jaY+n9bXozEzc3ZwpWv16cXEXSmsjH0j6LoAlbUSc=)
                          4: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: LsdCf6IbQuFHjCf70VdVZ9yP+6KWqxdf8EPZ0LUA7P4=)
                          5: q_qYpFhmBQ8lhb7G0ETsROyhKrE.roa (hash: b/eMO0NX0hh7yZAOvwUKNYnJNdSAmYoYt5B3IlaWmes=)
                          6: zaGrkqbu8Gll08VVFhOdNAVBodQ.roa (hash: 5RXV1x3djGzhsIabpdBba1lsONVKoOFtpXCmtC7NEnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:cc:7a:fa:b6:ed:ff:47:86:1b:98:e2:65:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
        Validity
            Not Before: Mar  1 12:00:49 2026 GMT
            Not After : Mar  2 12:00:49 2026 GMT
        Subject: CN=9743f9f1f3d2235d3f74aa9082f57265ea621e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:87:03:20:59:78:7f:4f:04:db:85:1d:30:
                    fb:d0:f9:97:e0:c8:4f:3d:9e:37:17:a3:21:78:e5:
                    b3:0a:37:fe:e2:97:10:46:9a:cc:53:ca:33:c4:57:
                    5b:05:34:bc:34:fb:27:19:81:da:51:94:2b:d5:f1:
                    09:ae:4b:6a:c8:93:32:ed:bb:d7:73:ae:9a:e8:6f:
                    22:f8:30:a7:29:7c:06:e0:63:de:2f:2f:7d:10:a3:
                    d2:b1:7f:a9:33:99:3e:be:6c:5b:da:2b:52:cb:be:
                    5f:5e:d4:6b:6c:43:f1:b4:c8:bb:57:01:bc:62:de:
                    c9:7f:ed:10:ca:80:35:7d:ec:44:ef:87:5a:cf:a2:
                    f5:3d:77:62:8c:0e:28:08:80:a2:12:b8:ef:8e:2f:
                    ba:10:e9:92:5f:b1:45:1a:83:b1:16:1f:d5:2d:66:
                    eb:ce:60:96:25:0a:d0:06:fa:50:90:f4:a8:45:2c:
                    63:fe:ca:eb:99:b6:02:d7:75:96:fb:35:98:c0:2c:
                    51:30:39:db:cb:49:1f:67:bd:b9:f3:d0:65:50:45:
                    4f:63:fb:f3:c1:27:b0:67:36:c8:23:e7:07:d5:32:
                    6b:dc:21:94:0f:33:94:a2:69:ae:1f:82:85:c9:2e:
                    89:a7:c6:ad:34:f5:55:18:e3:44:92:62:ea:1c:b0:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:F9:F1:F3:D2:23:5D:3F:74:AA:90:82:F5:72:65:EA:62:1E:76
            X509v3 Authority Key Identifier:
                keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3b:3d:c3:46:d6:9c:f7:5d:65:34:c9:62:4e:db:8c:c8:a3:
         e7:9e:e1:4c:f0:da:43:82:15:71:4a:dc:3c:ad:1c:38:47:99:
         e2:33:39:f1:65:f9:dc:3f:53:3c:fb:30:96:6c:cd:1e:0d:cd:
         78:d9:df:97:9a:d8:d3:25:28:f8:6c:46:2e:ea:46:e0:e3:e4:
         72:0e:d2:d4:de:a4:79:f4:b9:f6:06:21:43:91:e8:7e:15:7d:
         14:c8:54:e1:4a:5f:48:db:8b:fc:df:61:c2:0a:ff:28:8f:ee:
         dd:a7:3a:e5:80:90:a4:f8:41:1e:97:de:f6:5c:fa:a4:76:dc:
         76:fe:ff:d9:5e:ba:29:de:1c:63:3a:3d:7a:ee:68:8a:25:14:
         19:63:8d:e8:47:18:31:fd:04:ea:d1:d9:34:3e:90:5d:3e:53:
         6d:fc:db:d3:14:24:8c:8d:3d:b4:31:59:79:56:56:f0:46:05:
         9a:5c:0f:ea:96:0d:d3:12:7b:64:b9:9a:9a:e5:a5:4a:73:2d:
         29:98:92:e0:0d:5f:85:ec:08:ae:34:7a:d6:d5:bb:fe:df:a9:
         3a:07:b3:96:71:ce:ea:6d:25:03:0c:1a:c6:e1:40:48:81:06:
         25:dd:59:b2:98:15:28:7c:54:37:63:fa:b4:ca:8a:e3:36:2c:
         7a:e9:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:30 2026 by rpki-client