Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File:                     4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier:          YyrOXGnssBbm8ULhaQ20ZsXKg3AaiZF8VyrrtkVxSOo=
Subject key identifier:   E1:4F:39:86:B3:69:A4:AA:FD:A9:6E:BE:7A:4C:54:34:41:E6:8C:32
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       019CAC7E5CE5B8B5C39328EEE582C594BE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number:          0F38
Signing time:             Mon 02 Mar 2026 03:01:28 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:28 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:28 +0000
Files and hashes:         1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: cg+hTmbwxy4OEBimJGtbSQtPqo2qgFt16mce+mPvCvg=)
                          2: 5uh-9bmbFKl3mY9dQ-trlVcyuXw.roa (hash: 7VoUKco9uMR4votOVTE4cFdkMXMlmmD0Z2XuyuOwo54=)
                          3: D6gTiVO-9PFx1VXaAiVU2jihjro.roa (hash: cxYog1EZCaoK2oy6il6DzlbbblthBZpzQajZ4Iuz3ss=)
                          4: Go5O8u6koNHV7b7UoH00mholn8I.roa (hash: iLDBMtL7MeCo+uMKF6jUonWy9kHpSBrH0Ajuok1AP1g=)
                          5: RHtSPb_4urWRb_Me8JE-aMOq7ME.roa (hash: WYOOK4rHLtPNbsObjpbWYMyv+6VV44Z6DDVLnIDNy/c=)
                          6: faOrucFqifHg9ZQWslyFQV3sAg8.roa (hash: +17wes5PNs8b98M2LmcNOgvHcF8OBtgbRoMn5hJbWa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:5c:e5:b8:b5:c3:93:28:ee:e5:82:c5:94:be:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Mar  2 03:01:28 2026 GMT
            Not After : Mar  3 03:01:28 2026 GMT
        Subject: CN=e14f3986b369a4aafda96ebe7a4c543441e68c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:9f:3b:49:9f:42:7e:7d:6e:d1:9d:dc:23:
                    f2:59:fb:18:a1:69:94:2a:eb:0c:73:db:45:de:d4:
                    22:9e:eb:56:00:d6:c5:7a:70:5a:52:c4:b8:b4:a9:
                    cf:12:71:1e:12:db:be:2c:e2:4c:0a:44:db:03:7c:
                    18:f1:45:4f:a2:17:2b:a4:57:7a:61:91:53:57:d3:
                    2e:1d:45:e3:3a:c2:24:6b:04:7c:ee:24:df:00:f4:
                    e2:bf:f7:d3:64:ee:42:56:84:51:34:24:94:db:2e:
                    58:c1:3e:08:5b:66:d8:cb:b4:9d:7b:f4:8d:b0:f4:
                    85:67:df:e3:f8:e5:7d:8f:21:25:f5:8a:d3:dc:be:
                    e2:1f:39:7c:9d:a8:f5:be:71:58:8f:3d:52:bc:c4:
                    37:b0:99:31:82:a7:b2:9b:d5:8c:2b:51:40:31:03:
                    10:5c:91:80:61:0e:62:9d:65:05:80:09:f4:c6:4f:
                    59:6e:1e:eb:b6:66:d7:7c:81:e8:e6:81:7a:03:59:
                    70:ff:c6:89:bf:44:1d:5c:85:07:f1:43:61:c4:8f:
                    f3:da:31:80:fc:21:7d:b4:aa:8c:10:e9:f8:70:33:
                    12:54:d7:4f:8d:27:26:75:17:80:94:8b:33:f1:33:
                    9e:62:90:d9:a1:46:39:e2:57:25:a1:48:86:81:a0:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4F:39:86:B3:69:A4:AA:FD:A9:6E:BE:7A:4C:54:34:41:E6:8C:32
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:07:f5:db:c0:5f:b5:30:03:6e:72:b5:9d:01:c6:b5:b8:cd:
         b1:f9:48:38:5d:6b:32:0e:5c:57:72:1d:a0:a9:24:6c:6b:81:
         75:a5:1d:f6:dd:9b:c6:d1:de:4c:9d:39:40:78:0c:56:e6:46:
         5b:61:08:9f:a7:a2:74:46:79:6c:56:94:92:98:02:26:18:78:
         17:21:f7:66:ba:b8:78:d7:43:26:76:53:75:ad:b2:48:75:18:
         7f:af:a3:a3:72:7f:5b:30:1d:bd:93:4a:ef:d0:74:e0:b6:1d:
         4e:ad:5c:57:b1:37:f7:49:88:f7:06:83:02:be:01:c7:cd:6e:
         d1:a7:7d:9d:1d:c8:5c:99:75:46:53:af:c4:e4:b0:25:05:c8:
         8e:5b:e7:62:d0:1f:2c:70:19:e5:2b:d9:d8:f1:43:f2:f6:49:
         2d:45:9f:8d:7b:e8:db:d5:fc:f4:9c:1c:cb:41:33:4f:54:9e:
         34:45:dc:c5:64:ed:9a:47:44:39:cb:00:e8:a8:57:8f:2a:1e:
         17:a8:ab:f5:2e:e1:db:60:01:25:58:95:2f:fd:f2:6b:01:42:
         df:bd:62:6a:b7:04:02:84:41:36:c7:ca:6c:f1:55:1f:5c:17:
         d2:cb:1b:45:15:65:05:6d:dc:e4:94:ce:0b:b7:21:b1:76:fd:
         6c:a5:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:15 2026 by rpki-client