Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File:                     mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier:          UWsYUBoxmgxI+HSl+btlrbL9PyIyxGlwTK1067lYmo4=
Subject key identifier:   11:4E:C3:E6:DF:DB:8D:A2:36:91:C3:E6:47:ED:73:60:E0:BB:98:33
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer:       /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial:       019CAD5A2188497E2668703281F905E15FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number:          1135
Signing time:             Mon 02 Mar 2026 07:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:30 +0000
Files and hashes:         1: eQZKGZ2aBM0yBF905-r8c86PiNY.roa (hash: Ih70b8QzHB6XF9meZM8P6Y7eTavMkPPydbwU5tJHSkQ=)
                          2: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: s0uMAR4+5Ri8GsfkilgjNNHdjYq03F55mmbAmqEdJVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:21:88:49:7e:26:68:70:32:81:f9:05:e1:5f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
        Validity
            Not Before: Mar  2 07:01:30 2026 GMT
            Not After : Mar  3 07:01:30 2026 GMT
        Subject: CN=114ec3e6dfdb8da23691c3e647ed7360e0bb9833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:37:b3:ed:20:5f:3e:58:7a:cd:ce:ef:96:
                    fc:e8:b2:d4:53:eb:bc:07:d5:f3:a7:b0:ef:c8:1b:
                    9b:67:ff:ff:e0:82:d5:d8:88:bb:86:ce:69:0d:98:
                    e8:f5:52:5e:60:84:a9:25:42:a9:77:b6:af:a0:5d:
                    e7:86:ea:28:f5:4b:59:0c:74:15:70:0f:b6:3a:80:
                    b0:b9:b2:6f:2b:5f:70:88:a4:57:5a:49:78:ea:96:
                    33:e9:66:db:63:1a:50:d5:7b:aa:cc:97:0b:7b:26:
                    08:fd:2a:29:50:3a:31:d4:d2:20:16:3c:76:8f:a1:
                    e1:df:c4:5f:c0:22:72:fa:32:cc:7e:fa:f1:82:32:
                    70:e8:d4:90:20:3d:80:ec:3d:ac:fa:89:75:bc:f2:
                    eb:3b:70:c5:36:b4:f7:53:61:33:ec:d5:6c:8c:d9:
                    44:2b:97:64:2a:50:4f:bf:a5:1b:f1:44:44:dd:95:
                    ed:e0:44:24:8d:60:dd:69:33:58:52:fb:ec:34:57:
                    48:16:0a:bc:00:e7:3c:aa:d9:56:a9:f4:a8:e3:9a:
                    9b:70:39:b9:ef:31:d0:62:c9:50:b9:26:e4:fa:db:
                    7b:47:fe:4b:b0:45:e0:c8:03:0c:ac:1a:fa:e7:87:
                    f7:f5:68:83:92:54:ed:4e:ec:b6:47:7d:24:ad:3b:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4E:C3:E6:DF:DB:8D:A2:36:91:C3:E6:47:ED:73:60:E0:BB:98:33
            X509v3 Authority Key Identifier:
                keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:70:a5:85:9e:b1:61:51:9a:e0:59:4f:13:83:3e:a5:2a:
         ce:3f:9a:04:85:ec:ad:c5:e2:87:68:75:d3:9f:93:62:91:ff:
         f6:8a:ff:3f:a1:de:7e:b4:1a:0a:66:ff:e1:df:f0:cb:f8:52:
         7e:d4:73:68:fe:0f:a1:57:d7:24:93:af:bd:97:90:77:76:1d:
         04:59:a7:0d:4a:6b:55:6d:5d:09:12:23:1c:d5:e4:1b:3b:8f:
         ae:7f:92:79:8b:51:3f:cc:fd:7d:39:6d:5c:d7:4d:19:c2:f0:
         cb:8c:bd:06:64:a3:e5:f2:62:53:0a:c3:e5:34:df:70:9d:fd:
         f9:18:7a:ab:9b:b9:a3:05:85:f6:5d:94:66:bc:33:66:1e:5f:
         1a:bd:2a:1f:94:e8:27:86:a2:5b:f1:4d:48:51:e3:13:b4:ab:
         e6:dc:ec:b8:ba:b2:80:7d:a4:d7:e8:72:85:1e:9e:43:cd:28:
         9c:bf:29:59:f7:d0:6b:88:ac:8e:e1:8b:ee:f0:44:ce:58:ac:
         f3:46:78:19:bb:50:ca:c0:80:0c:43:12:de:ed:4f:3c:0f:59:
         b8:9a:45:74:dc:38:62:6d:56:01:a8:ce:1b:be:2c:fd:eb:b5:
         14:cb:45:18:11:6d:b0:da:2c:ce:0f:0f:d7:9e:1f:eb:e6:60:
         64:16:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:09 2026 by rpki-client