Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          UN/kXBOZVnbF5b8L+3sAE9CrAIXoWSDchStphNegJws=
Subject key identifier:   E5:49:A4:45:5E:71:E8:15:6F:19:98:99:10:01:64:99:29:44:7E:4E
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019CAC10232312DD92575855276ABF1D5BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          05F2
Signing time:             Mon 02 Mar 2026 01:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:04 +0000
Files and hashes:         1: Hbb2tJo76oQa-wtw39RcEwlrnXM.roa (hash: zQKmQxHagrt8snJj/oZAtBi6Ifdl6mTU9nAZ70t8Osc=)
                          2: VNBOO8P6mkX9aew0cn-Kdehk6rE.roa (hash: b079DtAWi+r0sT4AC8Tk8haPaIa/jl6bQiwLRkAOdcE=)
                          3: evZm8lwJ83Ra2gzpHn4lhHkJDzg.roa (hash: 54FCOYYN42LEii2+4I3cfpiMUraNJ7gBfh9JPajAgpM=)
                          4: gvnOqyA9yS9fC_0IndVo0nLKxi0.roa (hash: YIdIEEO7s/IVaedtwWuT+dklb2cM9dk0cP8F29Lf9ao=)
                          5: hgzWYX75YIVr9-Fa-K5n1VgEzh4.roa (hash: Tyh/z0nHaYyQHgjz1bbuG9Z7KXkDQwBPffpAutwwQZI=)
                          6: iB1yqzobHZgkeYyjgD24fdDMrSI.roa (hash: zZkMxbemW0AGoPi/lyDYstjw3mF8p7nYB8fNtwbbBHY=)
                          7: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: M1YGr2VyhoP4TmekJRR4BWZSWLIKxmrYihtdgPflbGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:23:23:12:dd:92:57:58:55:27:6a:bf:1d:5b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Mar  2 01:01:04 2026 GMT
            Not After : Mar  3 01:01:04 2026 GMT
        Subject: CN=e549a4455e71e8156f1998991001649929447e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:58:5e:d0:fe:e1:97:f5:54:66:d9:76:6c:05:
                    5d:d6:55:57:4a:5b:9b:7c:11:45:62:c7:03:2d:3d:
                    60:3b:9c:47:28:ce:a0:fb:17:62:8e:0a:b4:11:ef:
                    e8:7e:20:87:8b:61:e1:ea:5e:7b:85:ce:05:48:42:
                    f2:69:03:42:fb:e0:0e:21:eb:9b:5b:c9:1a:7a:b8:
                    e8:5b:bf:2b:c3:f6:c7:87:65:ce:7b:05:d8:56:01:
                    5a:9a:2d:99:71:26:91:61:9a:79:80:72:28:fb:1f:
                    17:17:a6:bb:a0:9c:e5:13:ba:78:44:22:87:38:21:
                    be:99:85:8d:d6:01:50:1f:a8:31:b4:eb:94:7e:7b:
                    d8:09:fc:86:0d:66:82:c6:d0:5f:98:18:5a:e5:2c:
                    6c:b0:9a:4a:01:6d:eb:14:ec:c5:8e:dc:4d:fd:7a:
                    b9:33:d1:4a:d6:1c:c1:12:a5:69:24:0f:4d:4f:9e:
                    57:f7:bb:6c:ce:0a:f3:35:a7:01:6d:a9:52:73:c3:
                    a9:f9:e3:cc:1d:23:64:b3:de:1a:0f:fb:07:c1:fe:
                    c1:cf:ff:6f:6c:17:2b:8c:3b:48:03:74:cb:cf:49:
                    3a:6e:81:4a:b9:1f:e0:18:39:60:44:2e:ca:de:5a:
                    7b:35:25:a3:c8:0f:66:6d:bf:5d:4f:7c:75:26:21:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:49:A4:45:5E:71:E8:15:6F:19:98:99:10:01:64:99:29:44:7E:4E
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1a:f3:84:09:19:46:4f:ba:eb:56:0e:b2:f9:19:13:cd:91:
         d7:96:d0:4c:aa:42:9c:19:95:ed:2a:df:d1:1e:3a:12:0f:31:
         06:bf:69:60:5e:9f:12:fa:7e:8c:23:4a:82:28:45:3f:64:3e:
         a1:12:0f:fe:17:29:7f:0f:8f:09:81:44:8e:1f:8f:cf:a2:1e:
         d8:c8:cb:bd:c4:55:7c:dd:6d:6b:19:e7:39:82:81:50:a9:0b:
         23:11:6f:7f:81:41:ae:cc:d1:36:a1:25:b7:5d:a0:39:1c:f3:
         88:8b:96:3c:dc:9a:c7:d0:c7:a9:cb:96:90:ed:3d:6f:98:37:
         07:16:9a:fc:24:8e:f1:e9:91:df:10:e4:b9:27:0d:68:93:8d:
         94:7b:c0:d8:5b:fa:23:8f:34:d3:41:34:fe:c7:5b:07:e4:1e:
         11:4e:d6:cf:e8:5b:fa:77:dc:e9:7b:aa:00:3a:b9:5d:ec:f8:
         cd:c7:63:f2:15:5b:ed:46:fe:a3:59:ef:e0:a3:3a:51:71:fc:
         2e:06:a3:56:ff:1d:0b:50:31:49:f9:29:b7:20:80:8d:a0:7c:
         f0:80:fd:0b:51:22:82:d8:f7:d3:74:a5:bc:b7:9d:b0:5a:09:
         cc:fb:0d:ae:48:6a:f0:1f:25:48:4b:85:55:90:c8:c4:47:7f:
         ad:70:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:29 2026 by rpki-client