Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          h1OxUXLUil1LcNb1lPceIimWDt83kySqFpOzNeOFeJM=
Subject key identifier:   E5:CA:A8:C7:B7:D4:97:89:42:FB:A9:86:74:51:0A:B1:72:98:2F:29
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019CAC472ECC6B702AE7A6C2500FFB3DD229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          1432
Signing time:             Mon 02 Mar 2026 02:01:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:12 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:12 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: /o76WBK/GTGcH0/Y1zcFA+wlCYycK/9mSGLf4M+qWpg=)
                          2: BM26WSHmDXrBxfTRXw9OBN2bB5k.roa (hash: eTiUZXSOWwdAMhtFe/lHUOC73ALIZLmrUjbnWfXVaNc=)
                          3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
                          4: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
                          5: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
                          6: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
                          7: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
                          8: eeTRJICIDgN4JkjWbGf7_URm99g.roa (hash: mj84Q1Duee66N33HSly1ihLOIjdwFTJC4fdawSWCPqQ=)
                          9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:2e:cc:6b:70:2a:e7:a6:c2:50:0f:fb:3d:d2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Mar  2 02:01:12 2026 GMT
            Not After : Mar  3 02:01:12 2026 GMT
        Subject: CN=e5caa8c7b7d4978942fba98674510ab172982f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:e0:12:66:4e:f0:7d:af:3d:0b:aa:dd:71:
                    fe:14:0c:50:e7:ee:ff:56:96:d3:44:c1:8a:4b:f7:
                    83:1c:60:d1:e3:4e:7e:af:60:32:8a:68:dc:47:e6:
                    d7:40:a1:db:12:6d:a3:db:e7:bb:eb:45:23:75:4c:
                    e0:1e:02:86:44:c2:11:77:82:da:d9:b7:d7:ef:65:
                    ff:22:c2:e1:7d:4b:93:9b:a0:bd:bf:79:b4:5a:97:
                    07:33:3b:6d:6c:93:0b:5f:c7:42:b4:78:c4:37:5d:
                    3b:75:c5:88:06:1f:d8:53:dc:80:46:3b:d9:7e:3c:
                    49:f7:25:da:1f:0d:14:bd:0e:3b:dc:87:8a:4f:1c:
                    5a:ef:88:63:b5:5b:af:d0:9b:20:cd:d3:8b:8d:57:
                    bb:f0:45:ea:ce:a2:26:7e:7b:58:8f:c1:84:66:20:
                    09:d0:df:a8:c1:17:88:9f:ab:12:cc:d8:fb:96:fd:
                    f1:f7:e3:3f:bb:e3:a9:31:25:2d:dd:26:f5:60:22:
                    84:27:9f:24:a7:47:1e:aa:31:50:16:6c:05:a9:5c:
                    88:d2:79:63:d5:71:f7:c3:d8:ef:47:21:c9:9f:bb:
                    4c:47:d0:e2:17:cd:50:2a:80:61:2c:64:25:45:0e:
                    ff:33:3e:38:5b:19:9c:89:45:9c:22:65:5d:ff:2a:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CA:A8:C7:B7:D4:97:89:42:FB:A9:86:74:51:0A:B1:72:98:2F:29
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e1:45:c0:76:a8:3d:02:44:df:12:d1:aa:8f:53:ee:1e:80:
         68:e1:af:5e:1d:b1:3b:8a:ac:e1:bc:94:62:83:7b:dc:b2:83:
         67:72:d8:9c:99:78:8b:69:17:a3:ce:f9:89:a1:36:2d:5f:9b:
         c1:44:92:23:63:66:df:2a:a9:7f:a3:93:bb:8e:a3:56:03:8f:
         bb:3f:70:10:1f:49:98:c6:fa:1c:63:cd:a3:cc:aa:89:3b:f5:
         1e:d5:18:13:7f:f5:21:ec:26:cf:e4:19:7c:24:df:50:7c:b7:
         e2:4d:27:ec:10:db:00:a6:b0:da:0c:98:08:45:2d:cf:ca:91:
         4f:8f:08:a6:44:9d:c5:d7:9a:0d:31:2c:42:35:0e:d2:2c:74:
         8c:f6:d6:fd:10:91:6f:a5:0c:ab:6f:b9:5a:5f:b2:86:62:3c:
         6d:1b:ff:0c:b2:b9:61:23:35:ea:00:b5:13:25:cf:57:a1:b4:
         92:c3:ff:7b:b4:09:93:d2:06:c4:f3:91:8c:78:d9:67:83:3b:
         d8:0c:8b:9e:81:bf:42:49:c6:25:32:58:7d:39:a0:0b:de:5b:
         0f:a2:77:1c:00:d4:92:85:6e:f6:d6:bf:e1:4e:b8:a2:f2:f4:
         2f:26:66:9d:05:cd:9f:6a:bd:eb:48:8b:1f:97:35:30:0d:a5:
         ed:63:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:49 2026 by rpki-client