Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File:                     MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier:          vmihqF5DaicAm6Rn3XK/bqRpyriDBNb7P9+zMTuIUek=
Subject key identifier:   6A:29:21:E6:F7:18:F6:23:E2:44:95:54:DF:7C:71:CF:FC:CD:28:7F
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer:       /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial:       019CACB486C4F46571D3205B306471C3EE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number:          0A83
Signing time:             Mon 02 Mar 2026 04:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:37 +0000
Files and hashes:         1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: jeLaX0N+4UHQsArlRjdqqEzRKys6md4AannKMa9/qhg=)
                          2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:86:c4:f4:65:71:d3:20:5b:30:64:71:c3:ee:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
        Validity
            Not Before: Mar  2 04:00:37 2026 GMT
            Not After : Mar  3 04:00:37 2026 GMT
        Subject: CN=6a2921e6f718f623e2449554df7c71cffccd287f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:be:cb:72:8f:df:ed:bc:c3:7e:65:17:c8:
                    25:17:cf:20:d7:97:4f:5e:17:ad:c8:4c:d6:19:bb:
                    78:ba:95:72:1c:70:59:53:21:41:dc:4a:f1:3f:01:
                    c6:ca:22:4c:ef:66:79:c1:81:85:8d:1b:37:94:6a:
                    c7:12:bb:7e:e5:e9:7b:ae:c9:7f:56:66:1b:34:e3:
                    a8:c3:6d:d7:f9:fb:7e:ee:11:c2:90:19:15:ad:58:
                    b7:f1:d1:16:29:51:33:fa:24:ae:ed:8d:d6:d5:0b:
                    fe:65:a3:58:1b:d7:9a:b0:04:12:d1:04:7f:e9:04:
                    f4:4e:fa:0a:a4:26:a4:cd:1a:fa:e4:a6:c6:21:bb:
                    36:34:0c:ac:78:30:79:54:ff:de:29:cb:34:5a:a5:
                    51:82:8f:ca:e7:d3:18:53:e1:62:0a:23:14:11:b0:
                    c4:cf:16:01:c3:30:f9:30:5e:67:5b:71:8a:62:e8:
                    8a:02:07:0c:8d:50:10:fc:42:dc:4b:9f:bc:90:36:
                    60:d3:92:06:8d:f2:ce:2f:c4:eb:6a:65:cc:7e:4f:
                    11:6e:5e:61:0e:4f:d2:11:b2:41:a6:dc:37:93:b9:
                    09:fa:76:e6:30:ba:97:25:3d:2d:a3:46:80:8b:5e:
                    ba:ec:6a:ae:c9:a4:ee:e7:53:d9:e8:f4:14:65:33:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:29:21:E6:F7:18:F6:23:E2:44:95:54:DF:7C:71:CF:FC:CD:28:7F
            X509v3 Authority Key Identifier:
                keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:99:49:73:10:50:a3:36:fa:3e:19:69:f8:4d:a0:c4:72:
         7c:96:71:7c:7f:5f:4c:ff:91:d4:b6:16:d3:bf:ff:31:7b:cf:
         34:61:48:be:d1:68:91:17:3b:3c:fd:0c:b7:84:97:13:c6:e2:
         f4:e8:23:1d:f3:5c:c9:c0:02:07:d2:3e:0c:70:f5:1f:e3:57:
         7f:ec:6b:4a:92:96:20:ab:f6:de:13:5c:bb:cc:dc:ec:ca:8a:
         fb:0e:26:de:ee:f8:78:2c:b7:75:2f:f0:8b:c7:1e:60:d8:1c:
         9f:b6:32:aa:38:d1:1c:12:9e:4c:5b:e0:6a:5d:8b:87:dc:d1:
         63:fa:ac:6e:7c:aa:66:3c:7e:3f:77:07:cd:4e:be:19:e6:97:
         f1:37:a8:b3:2b:c4:f2:2e:f8:eb:17:cd:47:07:2d:92:62:a8:
         41:31:82:48:0c:76:72:e8:fb:ea:44:e9:d1:ce:c6:b8:60:0d:
         ba:9e:27:cd:f2:1f:f7:d9:5b:ce:de:c8:ea:08:5e:b2:55:c7:
         cd:a6:12:0a:35:f2:ec:cf:00:a6:e7:17:73:be:a8:de:5d:ac:
         52:21:ba:44:b0:07:e5:1f:bc:27:f6:d1:a7:20:d5:b9:90:55:
         b5:93:26:70:39:eb:00:25:bf:96:40:38:66:ba:a9:25:aa:4f:
         49:03:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:52 2026 by rpki-client