Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          Dmjf9QND2FFB5Lib9qT+cC8MXSMfqEsd6Y8iP65Il4E=
Subject key identifier:   CB:81:44:22:CF:99:43:8C:4D:E8:F7:DD:7A:B3:72:57:6E:17:B8:10
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       019CACB4B72F906FCCD5A3973CD1C8D884BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          1850
Signing time:             Mon 02 Mar 2026 04:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:50 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: u+VmIwuTfDPlm1Rof+QI952cpn3jvK6k3gHa5tGCS3o=)
                          2: A34_GTeXqKfeFieH-K6SMhQYDeM.roa (hash: kMGUuf+bmu2QhGj0B3VWZCeUdZ8iNJFffakS/R7WXBo=)
                          3: aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa (hash: sOa0dIn7uqNOrAivXJIEeikXKxFSaK1g51TxfgbbJB8=)
                          4: gJS4W1OlZX4qhqCfciLkY8-A4Yo.roa (hash: t2Rys77KJN1dnN93Baik0czPJYwk4ZAeQlLRAbQNSRg=)
                          5: j_fEcmRawhfQ335R07nuk6I9mKM.roa (hash: sLXREARPQv68UDdJgDz8RPpaZ0LxhTnDeQMZPazHH7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:b7:2f:90:6f:cc:d5:a3:97:3c:d1:c8:d8:84:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Mar  2 04:00:50 2026 GMT
            Not After : Mar  3 04:00:50 2026 GMT
        Subject: CN=cb814422cf99438c4de8f7dd7ab372576e17b810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:ae:5c:5d:1c:01:a7:40:d4:15:86:85:55:
                    87:34:d0:c7:86:51:64:46:82:ac:5d:e1:38:dd:80:
                    20:f7:d7:bf:10:8a:fb:03:38:a6:04:09:6e:de:65:
                    47:79:5e:51:1d:9b:3a:56:1f:0d:30:92:7f:0d:05:
                    1b:0e:d4:b2:53:fd:74:dc:7c:7d:29:14:b5:1d:fe:
                    9a:74:01:7a:e6:71:24:90:26:f2:cf:1a:c2:f8:40:
                    9e:f1:01:ea:90:43:81:00:e0:2f:f4:2e:ce:c0:bf:
                    cf:a5:51:63:29:09:bc:4d:82:b3:fa:65:c5:25:3c:
                    f3:a4:b6:ad:94:9c:72:6f:36:86:c7:40:b6:94:84:
                    bf:2c:f8:ff:c7:e9:fd:bd:0a:91:a8:59:d7:82:90:
                    b3:25:e2:23:45:10:36:94:5e:cd:7f:73:c7:51:3a:
                    92:5a:1e:b0:80:51:d9:1b:a3:e0:79:87:48:c2:00:
                    60:95:f9:2e:11:b7:cf:90:09:40:cc:47:bf:0b:db:
                    e5:53:ac:02:4b:1b:4a:f0:4d:fc:b8:a6:69:f5:b4:
                    fa:71:c3:ef:a3:7f:9d:f6:1b:c1:07:77:56:07:2e:
                    66:74:29:1a:ed:43:56:e1:00:d8:24:ac:e6:b8:ad:
                    8f:cd:f3:90:ba:2c:a0:63:90:22:e4:84:88:bb:0f:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:81:44:22:CF:99:43:8C:4D:E8:F7:DD:7A:B3:72:57:6E:17:B8:10
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d4:38:de:57:29:c6:8c:4b:f1:a0:00:9e:f7:4b:56:21:64:
         51:19:59:4d:f6:6d:48:a7:49:17:46:c3:e2:53:d0:fc:b2:f3:
         f7:f8:f5:ce:d5:2e:3d:c5:f2:cf:19:6b:f7:24:09:c7:09:b1:
         12:ee:68:63:c4:07:35:21:36:1e:fe:8d:7a:42:c0:85:68:3f:
         21:3c:56:24:99:90:29:ff:cf:93:f3:cf:4d:d3:ac:1f:45:e7:
         53:02:fc:68:41:fc:9d:a8:1c:77:85:01:ed:b8:70:9d:ad:e8:
         7f:96:e8:33:6f:97:a2:37:30:3b:41:e0:80:4a:fb:d8:f3:f2:
         ac:25:b8:11:d4:13:4f:da:ab:4d:44:91:a4:8f:a2:25:4d:2e:
         92:4b:fc:4b:b1:00:ea:b9:0f:32:94:82:14:fc:bf:2d:88:5e:
         fd:b3:34:52:fa:03:cf:b3:10:23:8d:c2:a8:c9:f8:c4:55:d5:
         3a:d2:cc:97:bb:ce:56:62:05:c0:d4:48:9a:6f:19:a0:63:3b:
         77:6c:9e:d1:fb:4e:f0:3e:ba:53:77:20:8d:ea:85:3d:ea:a9:
         45:40:81:b5:5d:5a:fd:37:12:9c:ad:25:34:13:45:b4:83:ce:
         9d:39:25:7d:7a:7b:b5:bb:90:66:57:df:68:51:cf:e6:2e:9e:
         04:29:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:24 2026 by rpki-client