Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File:                     ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier:          xfpbt9/LcvLwc9jn4k19tpTwchOzNqf2jJx8Ws4cOfE=
Subject key identifier:   2A:3C:4E:34:F4:1E:72:7C:B8:8B:F1:A1:62:77:4E:D2:C5:FC:39:39
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer:       /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial:       019CAA8F4CF5930FBAC545D9A257D01265D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number:          0E76
Signing time:             Sun 01 Mar 2026 18:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:43 +0000
Files and hashes:         1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
                          2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: iQDdve5NM1qK0XjZXHCAKgO3EwNppDBKtvAegu7Ab3k=)
                          3: JfAxYSslNRgXCvxTlHkjURGg_tA.roa (hash: 1wkFd6nRFSOKqVQcfvyLq2KKje8vaNBC709RUWhAcGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:4c:f5:93:0f:ba:c5:45:d9:a2:57:d0:12:65:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
        Validity
            Not Before: Mar  1 18:00:43 2026 GMT
            Not After : Mar  2 18:00:43 2026 GMT
        Subject: CN=2a3c4e34f41e727cb88bf1a162774ed2c5fc3939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:b9:3e:8f:14:89:c1:63:fa:f7:5f:a1:0f:
                    c0:b0:8b:da:92:87:de:2b:e0:0c:8d:1d:a1:43:1b:
                    7b:ad:65:16:5d:6c:01:48:6b:e4:80:cf:eb:c5:fc:
                    0e:85:f5:66:2b:8e:bd:29:6e:0c:c0:06:c4:62:84:
                    b7:97:b1:18:01:2b:a6:5a:3a:a4:21:f2:f1:59:d1:
                    d5:75:66:28:46:98:be:3b:15:6f:ff:a5:24:a1:31:
                    36:6a:36:e2:58:e6:08:4f:3a:bc:90:d4:25:05:f0:
                    42:9b:19:56:b9:d7:71:5c:e9:d8:ff:63:b8:d3:23:
                    06:b2:f5:34:f4:4d:00:99:1a:fd:49:3e:26:9e:1c:
                    1c:ad:2b:ad:76:11:92:50:6a:af:52:ab:ac:8b:28:
                    60:3c:f7:76:68:6b:29:ea:53:74:90:9f:b2:0a:49:
                    f8:d1:63:0b:79:6e:7c:a8:ce:39:c7:f8:47:5a:d8:
                    e9:ea:d4:0b:f8:47:0a:33:33:8e:37:95:d6:02:13:
                    f1:e9:37:ab:a1:27:bb:21:e8:79:3e:1f:41:da:1a:
                    2f:2c:1d:d4:fa:76:c6:68:86:07:dd:77:74:38:59:
                    7d:c1:b1:db:52:91:a7:2c:1b:92:a6:cd:4b:8a:ca:
                    6e:95:6f:69:93:dc:c8:d1:4f:05:2e:65:e2:28:9a:
                    e1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3C:4E:34:F4:1E:72:7C:B8:8B:F1:A1:62:77:4E:D2:C5:FC:39:39
            X509v3 Authority Key Identifier:
                keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:38:a3:44:5a:31:b2:e4:4c:95:4f:ea:3e:2b:2b:68:28:
         03:3e:52:05:67:72:b6:21:b2:a0:75:d7:8e:e9:58:3e:f2:80:
         df:51:b2:e5:c5:85:31:df:3a:a5:cc:21:b2:75:7d:33:a7:72:
         13:e9:17:27:33:8c:43:fc:c7:73:d2:ba:88:2a:c5:16:2e:6f:
         80:d5:14:6c:38:4a:e1:5c:cb:d0:7e:d8:14:3d:f8:e9:13:08:
         c5:f6:95:ea:87:f4:38:66:c8:19:72:15:5a:97:f0:45:73:0e:
         71:0b:83:12:cb:45:bc:78:92:2e:07:65:53:49:03:c3:28:6c:
         0d:74:cb:80:52:bc:ac:3d:05:46:e3:ab:6b:fd:c8:28:5a:da:
         14:d5:9b:b3:9f:c4:7e:64:22:ca:55:e8:1a:24:39:63:d4:22:
         43:07:b8:c3:61:61:a2:55:c9:00:30:2d:c0:df:9c:e9:b0:61:
         ef:38:72:27:86:67:2d:93:dd:b3:cc:86:74:aa:14:4c:f6:11:
         54:6c:d2:55:d1:a1:6a:3c:c7:b7:f0:a7:16:3e:76:7a:41:e3:
         e2:cb:69:94:50:d0:f2:58:f1:19:11:6c:f5:5d:74:78:65:7b:
         57:3b:f8:3c:61:c6:df:c7:e8:c3:ba:47:44:84:a2:7a:26:30:
         22:f1:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:16 2026 by rpki-client