Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File:                     cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier:          jjIvyJzeTVMltXJfH+ZxXv0hgRMcsgmJBgRCvA0nqtI=
Subject key identifier:   97:CC:59:43:CF:78:0F:40:B6:15:E1:38:B0:B4:51:DE:F8:76:13:00
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer:       /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial:       019CABD982E23F6C497C68E7B8BEE3493060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number:          05C5
Signing time:             Mon 02 Mar 2026 00:01:24 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:24 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:24 +0000
Files and hashes:         1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: u9mr0l5xg5DEnMlE/W1QS3KsBOGlbrDBWbfmLhjXlgg=)
                          2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:82:e2:3f:6c:49:7c:68:e7:b8:be:e3:49:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
        Validity
            Not Before: Mar  2 00:01:24 2026 GMT
            Not After : Mar  3 00:01:24 2026 GMT
        Subject: CN=97cc5943cf780f40b615e138b0b451def8761300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:b0:69:ca:fb:0d:31:e2:4a:2f:1b:26:17:
                    b8:96:75:ee:1f:19:71:e9:f2:89:d2:1d:75:db:00:
                    01:e9:2d:6f:36:89:8c:23:81:56:96:c5:31:81:1b:
                    63:e2:5c:e9:56:77:b0:6a:a5:dc:30:20:3e:18:07:
                    42:38:2a:b6:54:db:01:5a:e5:70:52:66:24:b0:2a:
                    75:b9:fe:34:7f:53:47:1a:c9:f6:74:09:a5:93:5b:
                    54:e0:cd:7f:84:4b:08:88:40:70:cc:a0:af:b0:88:
                    dc:0a:04:5c:1f:5b:b3:ea:84:b4:f7:91:28:ac:30:
                    bd:25:0f:64:ff:c7:31:61:f4:b9:02:77:23:31:57:
                    0b:4d:b1:f1:86:4d:f0:03:28:ae:1d:9a:fd:b0:df:
                    30:8a:a6:a6:36:2b:af:4e:bc:a2:c5:c4:69:8b:e8:
                    b0:0c:ce:d6:c7:bc:fe:1d:a4:83:4c:98:e8:bd:1a:
                    f0:a2:81:a6:a7:4f:b4:71:58:dd:d7:7c:2c:b1:b9:
                    b5:4d:e6:6a:5e:be:e2:77:8e:6a:e5:a0:6d:df:f4:
                    7f:59:52:e3:8d:e4:f9:0a:e1:0a:7e:05:9c:d3:0f:
                    fa:69:0a:71:2a:aa:bc:b2:be:b3:73:e4:36:de:9c:
                    19:52:5b:6e:41:e3:da:01:10:bb:74:d1:f0:ba:d4:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CC:59:43:CF:78:0F:40:B6:15:E1:38:B0:B4:51:DE:F8:76:13:00
            X509v3 Authority Key Identifier:
                keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:07:38:db:22:ef:1b:76:d0:c5:1c:4e:c9:6b:6f:d0:3c:24:
         bc:c6:51:8d:5f:06:58:66:d6:49:2a:d8:87:e0:de:22:94:f1:
         7e:9c:b3:21:a5:99:f0:9e:d3:e4:a0:55:f6:c5:85:b0:29:e5:
         b2:27:37:d9:77:56:bf:34:77:58:3b:a9:e9:18:6f:60:6c:9a:
         4c:43:c8:dc:57:6a:8e:61:62:f0:ad:3a:8e:c0:fc:1b:eb:e5:
         4b:54:26:cd:7d:64:a0:5f:00:ad:35:aa:33:6c:1f:92:fc:35:
         6c:52:37:34:a3:05:89:90:75:a6:61:c1:f6:61:f5:e7:1b:6f:
         8d:f5:d1:4c:7e:19:26:55:62:47:c9:77:84:18:1c:bb:d9:df:
         59:40:c6:73:5d:56:ac:7d:02:fc:6e:86:70:f9:51:b2:28:5d:
         bd:e2:93:36:f7:a6:73:70:5f:94:ed:47:b1:73:ad:a7:bc:21:
         ab:eb:9a:00:7d:ff:56:ca:ae:f4:0d:b0:fe:f6:ad:a1:be:48:
         89:5e:6c:3d:15:3c:7d:6d:3a:46:dc:fe:11:0e:61:fb:7e:60:
         db:65:26:8b:58:35:cb:a5:32:6a:f4:5b:0d:0d:87:36:33:6b:
         35:73:76:7d:d5:d8:f5:df:49:12:52:23:4f:95:21:9d:02:7f:
         df:45:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:40 2026 by rpki-client