Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File:                     h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier:          ELeW6haza7hSy0zQ5lvfGruZG9htNOVjWkN9Ad4vvHY=
Subject key identifier:   AD:C0:84:9A:F7:5F:9B:DD:9A:10:7C:31:B2:9F:B3:F1:0D:91:B1:D8
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       019CAC4785A19B0C44DE0DE752D96E0D8603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number:          0BCF
Signing time:             Mon 02 Mar 2026 02:01:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:34 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:34 +0000
Files and hashes:         1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
                          2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
                          3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: pKLot15UBMDYblJ5IzAHHZLlM78p/nLsnWma1LypWtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:85:a1:9b:0c:44:de:0d:e7:52:d9:6e:0d:86:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Mar  2 02:01:34 2026 GMT
            Not After : Mar  3 02:01:34 2026 GMT
        Subject: CN=adc0849af75f9bdd9a107c31b29fb3f10d91b1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:1b:d1:c5:d6:00:16:e4:35:fe:8e:ff:f1:
                    44:c5:5c:f4:6a:d4:bc:03:c6:37:2e:de:c7:a0:3b:
                    0e:c0:cd:51:ad:5f:9f:81:bf:f0:a2:6b:d9:b1:f5:
                    16:2c:bb:93:05:12:34:40:15:3d:9b:c2:0c:17:4f:
                    d6:1b:60:6b:f5:ff:8f:c4:a7:77:77:9d:6f:4f:cc:
                    b3:cd:8f:b9:fa:7a:ca:4f:30:a0:18:6e:d5:c6:2f:
                    c3:5e:67:18:bd:f8:c8:d6:ca:41:71:96:69:0b:20:
                    eb:0b:37:98:60:c9:d0:c3:22:ae:eb:8e:f7:aa:a8:
                    de:69:bb:e9:41:3e:3a:2a:75:82:d0:d8:0e:a7:81:
                    c0:cb:2b:9c:41:3d:a3:59:b5:4a:55:b6:5a:c0:5a:
                    95:2f:90:26:e6:9c:e8:d2:74:70:9f:86:e5:62:ed:
                    e9:a4:72:47:fc:cc:e3:73:2a:e0:e3:4f:12:71:75:
                    af:61:83:76:d1:97:2c:27:90:51:c1:8c:ca:1d:fb:
                    7f:b9:f3:19:b0:f9:a1:16:72:30:e0:f6:72:6d:7f:
                    6d:d7:3b:a1:65:f1:35:b8:dd:3e:d2:29:fa:72:94:
                    fc:f2:b6:cd:8b:70:21:35:70:e6:de:e8:62:dc:26:
                    57:91:34:3e:51:67:8d:7f:41:2c:50:a1:82:1c:b1:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:84:9A:F7:5F:9B:DD:9A:10:7C:31:B2:9F:B3:F1:0D:91:B1:D8
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ad:aa:c3:5c:ea:e0:f9:60:06:cf:4a:82:95:08:aa:15:62:
         3a:00:85:fc:c6:f3:a1:11:2d:3e:a1:fb:86:fd:f4:8f:a5:68:
         36:6f:64:a3:78:a0:bb:de:70:e6:e6:de:78:6b:b5:47:9a:26:
         01:08:e8:02:d7:ba:0a:78:16:94:49:a6:5b:b4:4f:37:8b:9f:
         f5:a4:fa:52:52:79:17:b9:39:7b:4b:c3:ff:a0:4b:ba:5f:33:
         47:b3:a5:b4:10:56:66:6c:45:33:12:3e:b9:3d:93:d2:36:98:
         0e:67:93:62:ef:ed:e5:6e:63:0c:82:ee:fe:d4:5e:82:c3:2d:
         1c:06:73:f2:9b:65:eb:94:61:3b:75:89:22:aa:4c:c9:53:15:
         86:ad:00:0b:a0:d1:47:72:fa:42:ff:c6:02:c4:11:56:76:31:
         b6:9d:6a:aa:c7:95:fc:74:a4:ab:c3:a4:52:32:b0:7b:ab:81:
         bf:e2:8a:37:82:c0:75:3b:98:d9:cb:55:46:d5:57:dd:d1:cd:
         92:f0:13:d8:97:25:2e:e4:c0:77:1b:38:d9:5f:3f:c9:e1:6f:
         12:33:53:50:89:6c:fa:db:c0:d5:04:36:88:a2:de:52:0d:3b:
         6a:61:dc:0a:90:c1:df:e9:ef:f3:4f:41:9c:f4:31:43:1f:8c:
         25:01:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:56 2026 by rpki-client