Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File:                     x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier:          zl0NHpoLwRW8UI6mCj6v0iejGb8hwV7Oogj0Lo5w6RM=
Subject key identifier:   30:3B:D0:24:BA:6B:4C:85:3D:F3:F3:A5:A4:0B:FB:45:1E:BF:A2:03
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer:       /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial:       019CAE35FF9A0D954253690E064CB1E6AAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 11:01:40 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:40 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:40 +0000
Files and hashes:         1: bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa (hash: HBq1ZxOHL2v4vjCZS/Tly78qQg5nD5KUf65a7gSUtF4=)
                          2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: y3baqe9/gOr1LqAAVMGYVxxYDdOoC05YF+AFbd3ayvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:ff:9a:0d:95:42:53:69:0e:06:4c:b1:e6:aa:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
        Validity
            Not Before: Mar  2 11:01:40 2026 GMT
            Not After : Mar  3 11:01:40 2026 GMT
        Subject: CN=303bd024ba6b4c853df3f3a5a40bfb451ebfa203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f6:16:92:01:92:f2:9c:0e:7a:8c:ec:7b:da:
                    7f:2e:71:55:50:42:e2:2f:40:7e:2d:b3:87:42:4b:
                    1b:81:ec:e8:3b:ff:05:dd:1a:68:d9:16:01:1d:4f:
                    c6:53:e5:c6:12:50:21:15:6f:c6:3b:05:ad:4f:8c:
                    c7:28:91:b7:d7:38:10:cf:a1:37:34:c0:26:8d:f6:
                    95:97:ec:ef:4f:af:fa:d9:ec:e1:1e:2e:f2:24:f5:
                    b2:94:3d:54:f7:9f:c1:53:d2:d0:ee:cd:17:a8:b7:
                    ef:c1:1d:a7:55:be:0a:df:70:48:ca:a9:b2:45:05:
                    6c:fa:a7:e5:8e:7b:c0:d4:15:9d:e5:0e:0f:14:fd:
                    9f:8d:71:6c:a6:34:ad:6d:95:85:a7:ad:e3:fb:c0:
                    b9:1c:74:da:08:fd:5a:57:fd:bb:5e:e5:5a:76:df:
                    22:16:93:1f:ba:19:7b:7b:f7:af:06:70:f7:d7:f8:
                    1c:28:ba:be:0a:cc:10:6a:1b:30:ea:6e:91:3a:22:
                    c8:94:c0:85:55:f8:ad:b6:ad:4e:a9:fe:e0:d8:30:
                    99:c4:be:d9:a4:e6:35:f8:0a:ac:1b:ed:d0:db:e5:
                    6b:20:ea:6a:fd:c8:da:0b:c1:50:1d:0c:04:22:f9:
                    f2:78:7d:02:cf:a9:18:70:ec:3d:87:44:05:71:56:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3B:D0:24:BA:6B:4C:85:3D:F3:F3:A5:A4:0B:FB:45:1E:BF:A2:03
            X509v3 Authority Key Identifier:
                keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:e1:5a:e5:b7:03:8d:f8:b6:8f:89:c4:95:e2:dd:1c:b0:
         22:9a:09:3d:2e:6d:ec:63:8a:a3:32:15:d1:ea:c0:a7:6b:6b:
         41:93:f3:f5:84:34:f0:2d:90:6c:7c:35:fa:7f:9d:a6:d6:0c:
         ec:2c:83:70:a0:54:25:57:80:cb:ca:bd:a0:9b:92:d3:bd:79:
         93:4c:4d:1c:12:1a:02:f0:76:9c:da:37:ce:8a:0c:c5:19:ae:
         53:a4:fe:65:ed:f9:1c:7f:0c:39:2a:7a:09:42:e7:c1:ee:3e:
         1c:b6:6d:7b:79:5a:5f:f9:85:7d:b4:d8:67:da:b3:65:3d:ea:
         34:50:3f:9d:09:c6:fd:75:b6:7b:e1:10:c9:34:15:d0:41:a2:
         23:bb:d6:05:ed:5a:73:b1:b8:59:92:f6:21:85:d2:ec:8c:d9:
         10:64:53:d1:b3:21:d2:4e:36:dc:fc:48:5f:2f:f4:f7:af:ce:
         71:52:d6:0a:9e:1d:3a:8c:c9:3e:04:00:1b:bf:12:6d:be:a7:
         57:25:97:85:2f:61:d8:d6:24:69:ce:3f:93:da:03:06:cb:e6:
         6b:d9:c6:21:59:1a:62:98:0c:5c:5f:cf:06:2e:b2:13:1c:6f:
         e9:16:1d:b4:53:29:42:76:f8:ee:62:c1:e1:d6:00:d4:e0:15:
         c8:05:be:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNf+aDZVCU2kOBkyx5qrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NjVkNjNjOTE2M2YyY2M1YjU2MTRjM2M3ZjMxMTZlN2M3
MmY5ZjUwHhcNMjYwMzAyMTEwMTQwWhcNMjYwMzAzMTEwMTQwWjAzMTEwLwYDVQQD
EygzMDNiZDAyNGJhNmI0Yzg1M2RmM2YzYTVhNDBiZmI0NTFlYmZhMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vYWkgGS8pwOeozse9p/LnFVUELi
L0B+LbOHQksbgezoO/8F3Rpo2RYBHU/GU+XGElAhFW/GOwWtT4zHKJG31zgQz6E3
NMAmjfaVl+zvT6/62ezhHi7yJPWylD1U95/BU9LQ7s0XqLfvwR2nVb4K33BIyqmy
RQVs+qfljnvA1BWd5Q4PFP2fjXFspjStbZWFp63j+8C5HHTaCP1aV/27XuVadt8i
FpMfuhl7e/evBnD31/gcKLq+CswQahsw6m6ROiLIlMCFVfittq1Oqf7g2DCZxL7Z
pOY1+AqsG+3Q2+VrIOpq/cjaC8FQHQwEIvnyeH0Cz6kYcOw9h0QFcVbq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA70CS6a0yFPfPzpaQL+0Uev6IDMB8GA1UdIwQY
MBaAFMdl1jyRY/LMW1YUw8fzEW58cvn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQt
OWNlMWI0MTY4NzdkLzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQtOWNlMWI0MTY4Nzdk
LzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWnhWuW3
A434to+JxJXi3RywIpoJPS5t7GOKozIV0erAp2trQZPz9YQ08C2QbHw1+n+dptYM
7CyDcKBUJVeAy8q9oJuS0715k0xNHBIaAvB2nNo3zooMxRmuU6T+Ze35HH8MOSp6
CULnwe4+HLZte3laX/mFfbTYZ9qzZT3qNFA/nQnG/XW2e+EQyTQV0EGiI7vWBe1a
c7G4WZL2IYXS7IzZEGRT0bMh0k423PxIXy/096/OcVLWCp4dOozJPgQAG78Sbb6n
VyWXhS9h2NYkac4/k9oDBsvma9nGIVkaYpgMXF/PBi6yExxv6RYdtFMpQnb47mLB
4dYA1OAVyAW+CQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:19:27 2026 by rpki-client