Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          vt7nunxFDyaIXfWyKeZ7r9ZXugjOiCpzcVUJ2iFIloY=
Subject key identifier:   85:60:6C:DC:9C:8B:28:51:E1:57:65:07:C5:72:ED:FA:7F:4B:2D:7E
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       019CABA1C00758CA9B38EF1FC4DF93A43354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          111A
Signing time:             Sun 01 Mar 2026 23:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:30 +0000
Files and hashes:         1: CHYxKsoN6IeVA10L6kUmg387K4E.roa (hash: mPumrjNcFYvdRL5bdDvvsuVOxWBNEvLLvkR9dRXxG+0=)
                          2: HEYAnN_9hlNawT0gfEq7cBceqz4.roa (hash: I1MGXqqgieCZdZAjgnAyAg80Pf2U7lhaBnlyBhpIJso=)
                          3: SDoF-WCqCPjknLT2mM2_4GQ1V00.roa (hash: 9DCTVTfRoXNgWVh36MOAbrslGxs/tC2WsKyt8y4+r+o=)
                          4: uWtL-ZUWThEBX2Kk-wgOPUghIXk.roa (hash: 5DR/R0A/IU4wtB24PmXGRhwrZ3nwhIVVut65+Q4hkXk=)
                          5: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: lC1FzedE2GvirMaO7XpTf0oDPiXY9HBmblZsF1EEiv0=)
                          6: wshhYohjqXbtPI9N4_VP7v1zc_4.roa (hash: K9LIAOWThDljnJHgTvgI98ZZwaUx513/nLgNGKabvmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:c0:07:58:ca:9b:38:ef:1f:c4:df:93:a4:33:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Mar  1 23:00:30 2026 GMT
            Not After : Mar  2 23:00:30 2026 GMT
        Subject: CN=85606cdc9c8b2851e1576507c572edfa7f4b2d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:ec:c0:29:ab:03:42:5a:99:25:a9:2b:e3:
                    9b:65:8f:a0:49:d4:4a:54:ba:44:87:5f:9e:96:99:
                    f4:ed:71:5a:78:4b:45:30:b2:4a:49:e1:23:87:86:
                    75:92:36:19:5b:10:6e:4c:3c:03:26:72:e0:f5:53:
                    f6:b0:62:e3:3a:c1:ec:41:27:32:6a:fe:4d:5a:db:
                    67:b8:f7:ad:c2:ce:98:db:dd:58:32:c4:0d:23:5a:
                    ad:c3:5e:9e:bd:aa:f3:d5:ae:9c:9e:f2:f6:e3:36:
                    ba:e1:56:03:52:6e:ac:2f:0c:98:c2:e2:f4:9b:33:
                    65:ab:a6:76:5d:1a:fa:75:eb:30:86:92:90:86:fb:
                    1b:f9:2f:c0:97:7c:48:8d:90:4a:c9:2e:0c:d2:31:
                    9c:18:fe:a7:a5:ac:1c:5e:c1:05:f8:5f:c4:21:23:
                    27:88:5c:83:44:0f:f6:f5:3f:03:3e:0a:d1:bb:82:
                    98:8e:7d:cb:f6:1f:92:95:a0:c7:1d:8b:cb:d6:32:
                    b2:ef:8d:29:d2:e2:41:da:6a:6e:61:c0:48:21:5e:
                    b4:2c:dd:b9:59:c9:96:8a:42:4f:cc:ee:95:c4:06:
                    f5:b3:73:4f:8d:51:3a:85:3b:d2:29:0b:d0:86:83:
                    2f:cb:2a:19:5e:af:d5:9c:22:63:8e:e3:0f:aa:45:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:60:6C:DC:9C:8B:28:51:E1:57:65:07:C5:72:ED:FA:7F:4B:2D:7E
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:07:58:05:96:69:cb:d6:ff:77:16:d9:e1:21:a0:85:01:
         c5:25:be:6f:31:c7:e8:4a:aa:cb:5e:84:0e:28:f3:c8:63:ac:
         af:47:ed:fe:79:23:f5:69:c2:46:10:f4:fb:c7:4d:78:12:39:
         0c:77:fb:ff:95:03:64:aa:9d:c7:ec:4e:78:a2:94:6f:17:b3:
         26:2e:90:0c:e4:de:5b:cc:0e:2a:f8:ca:e5:70:43:0a:3f:54:
         e2:eb:3c:5f:af:c4:fa:1e:08:eb:95:d3:b1:15:3e:6c:f9:9f:
         c9:98:53:0d:06:34:66:44:b6:7c:63:5a:88:3e:22:cd:0a:a3:
         9a:71:ba:9a:b7:2a:22:9b:bd:91:88:c8:e4:d9:56:e6:60:44:
         7b:4e:04:9f:04:79:5a:e9:31:f6:c7:7c:56:32:e0:5a:85:91:
         05:45:9b:08:d9:2b:98:d0:8e:97:27:24:99:d6:92:90:c4:1b:
         1f:b6:c8:c9:cd:73:85:a1:d4:e8:bc:79:8f:91:bc:6a:ae:1e:
         94:e7:85:5f:2c:11:b9:80:43:db:26:69:12:d7:ec:10:e3:93:
         99:ab:15:1d:f3:e7:5c:9f:1c:03:2d:ad:05:76:02:c2:2a:ce:
         1f:90:1b:e4:12:6e:6d:76:3b:b9:71:69:69:3f:ba:0f:e9:47:
         7d:c7:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:52 2026 by rpki-client