Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
File:                     _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json)
Hash identifier:          p4LUZuU+ekewIUmV3woDIAabrmT1eCjleqJOd1Urn6o=
Subject key identifier:   AB:83:83:06:A8:B0:B6:94:DA:00:B6:53:D5:3F:13:FE:AF:02:91:A3
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Certificate issuer:       /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial:       019CA945E5A60B9348C8CEBF6EEEE9C26E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
Manifest number:          1863
Signing time:             Sun 01 Mar 2026 12:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:56 +0000
Files and hashes:         1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=)
                          2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=)
                          3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=)
                          4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=)
                          5: HQZ8h0k5o98AkDATLinCxsRe43I.roa (hash: aSwjxHDuomJbPa6AGVBEyYNaJyQepEqbPTE9fjxbKqY=)
                          6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=)
                          7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=)
                          8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: q9FqZucy94rR2P3gc/L1Tfk9DhDg1rAvm61XUfeSIPs=)
                          9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=)
                          10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=)
                          11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=)
                          12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:e5:a6:0b:93:48:c8:ce:bf:6e:ee:e9:c2:6e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
        Validity
            Not Before: Mar  1 12:00:56 2026 GMT
            Not After : Mar  2 12:00:56 2026 GMT
        Subject: CN=ab838306a8b0b694da00b653d53f13feaf0291a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:ab:72:86:6b:af:02:60:e9:51:75:b2:59:
                    27:2d:c3:71:70:7b:e1:4d:9b:eb:6e:3b:71:cb:2e:
                    ef:f2:27:58:95:f9:d5:79:70:d3:c9:88:05:b8:6a:
                    05:e0:be:d9:f8:15:70:76:47:f7:21:bf:d4:6b:17:
                    cf:cf:e8:3a:97:7e:a7:7f:4a:ab:66:63:24:3a:47:
                    8c:9e:b2:61:b5:0f:7a:5f:62:ca:19:96:7e:17:df:
                    88:a9:0a:5a:96:52:b8:d1:82:1b:7d:56:a4:84:3d:
                    31:c4:6d:6e:c6:52:0f:28:c0:c4:16:5c:f8:35:45:
                    ea:09:7c:35:0f:ee:1a:c8:0d:bc:c7:f6:90:e8:09:
                    a0:79:b1:28:a2:50:97:9e:b7:b7:88:58:c9:5b:77:
                    70:4d:ab:8e:d9:d5:5a:d3:57:f0:76:5a:ad:f8:a9:
                    9c:ab:14:76:6f:20:0d:6f:eb:7f:8f:96:4c:56:57:
                    6a:20:c8:52:ec:c5:88:88:ac:dd:39:e2:94:08:06:
                    fd:e1:61:b2:21:f6:7e:db:52:ea:fd:d7:88:35:e5:
                    8b:50:f5:b0:ea:f9:b4:ce:86:d6:70:e1:b7:30:c8:
                    ee:0e:b5:4c:c2:ca:33:cd:92:29:11:f1:c1:f8:72:
                    90:49:fa:17:3c:e9:14:de:18:0e:a0:bf:cf:ae:c0:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:83:06:A8:B0:B6:94:DA:00:B6:53:D5:3F:13:FE:AF:02:91:A3
            X509v3 Authority Key Identifier:
                keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:dc:d8:fe:c7:67:b4:e5:9b:a2:19:a4:08:41:dc:47:1a:30:
         18:4d:45:c4:2f:d7:4b:a4:ba:d4:00:39:2c:f5:b2:01:5e:ec:
         b4:a5:f5:83:39:cc:d5:82:02:47:0e:f5:4b:a0:42:6f:bf:66:
         f6:2d:1a:8d:14:af:90:aa:97:0e:8d:a7:81:25:02:41:30:73:
         cb:54:d1:4c:0c:b8:a6:bf:f9:17:6b:33:83:fd:61:04:1f:5a:
         31:c3:15:92:fa:a1:da:85:30:73:de:f8:bf:3b:26:c9:3b:62:
         9f:03:d8:1a:1c:d0:24:5c:97:5b:e8:27:1f:f3:68:c4:6c:ca:
         e3:85:3f:8d:7a:38:92:c9:7a:db:e7:b3:8e:33:43:66:d4:2d:
         f6:3e:b7:e7:e3:64:c3:dd:bb:f1:20:d8:02:8a:f8:7b:83:bf:
         e7:db:ff:63:e9:54:b1:c7:de:4e:72:78:e4:52:6b:18:95:a6:
         ae:14:35:53:c3:c3:68:9c:26:cc:8d:a1:35:79:15:93:b0:d5:
         c4:aa:ac:e6:20:d7:cb:41:59:51:3a:ff:08:3e:63:1c:0c:c6:
         03:91:17:ac:0f:4b:49:11:11:a8:a7:21:e9:a2:ec:e6:09:f4:
         10:0e:63:4d:58:00:f2:e5:ed:d8:bd:b1:34:9b:38:8a:45:22:
         d4:24:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:13 2026 by rpki-client