Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier:          pDhDJcn8OnGSPPN3hiytFf+KnIZcktRzcaQ+8NtFqwc=
Subject key identifier:   4D:6A:5F:AF:E9:9A:28:1A:43:78:C2:BC:D3:F6:8E:26:2F:6D:BE:7F
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       019CAA58D31DAFDC9AE3DC75EE2519FC0F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number:          1218
Signing time:             Sun 01 Mar 2026 17:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:13 +0000
Files and hashes:         1: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: BmOMqS+KpvoDdRLsd8E61i7DuJWmNs9QVWHSflVBJzg=)
                          2: w56TnwX4cr4ATnThatgYvBivtVM.roa (hash: dXWFj+tUei1h+c7PDPVm46TSYPdBUygpPg5c6Zw98TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:d3:1d:af:dc:9a:e3:dc:75:ee:25:19:fc:0f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: Mar  1 17:01:13 2026 GMT
            Not After : Mar  2 17:01:13 2026 GMT
        Subject: CN=4d6a5fafe99a281a4378c2bcd3f68e262f6dbe7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:94:ee:4b:b1:f6:6a:dd:38:51:86:59:0c:
                    7b:60:18:86:4d:37:28:82:cd:38:f9:10:71:3f:27:
                    cf:65:54:e6:f7:57:07:b6:b6:27:a1:52:3d:aa:3c:
                    4a:9f:6b:6f:d0:33:13:f0:06:b5:2d:cb:18:f3:3c:
                    d6:17:de:a6:b9:85:18:7e:e5:5c:0c:70:da:f2:9e:
                    34:43:d6:f0:39:07:7d:f6:ae:0e:5c:19:70:e2:36:
                    f1:cb:16:0f:75:a9:b4:81:a3:c5:05:76:6b:ac:a0:
                    c6:43:f8:58:1e:ea:1f:2e:38:b2:88:36:93:8f:02:
                    5a:b9:13:b1:98:ff:f9:f2:b7:99:0e:46:37:93:74:
                    02:ca:4c:3e:89:63:e4:93:a9:ef:86:d6:be:fb:35:
                    9f:d4:f8:20:26:06:b7:6a:a0:1f:e0:36:79:b1:9d:
                    10:2c:c1:0e:f2:c6:aa:32:d1:24:b4:16:3a:65:01:
                    10:fe:b0:23:40:8d:d9:4a:8d:10:eb:c5:0d:12:bb:
                    f0:07:85:2a:3a:8d:e3:8b:19:d3:6d:27:2e:1e:20:
                    4d:ee:61:a3:fd:cf:be:97:cf:a4:eb:c2:55:94:3f:
                    30:1f:9d:fe:e2:7d:84:37:9a:7d:5e:8f:db:77:df:
                    b4:93:1f:51:ae:ce:85:0b:60:e6:57:1e:14:cf:bd:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6A:5F:AF:E9:9A:28:1A:43:78:C2:BC:D3:F6:8E:26:2F:6D:BE:7F
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:a6:b8:27:66:18:eb:4c:03:ae:fa:00:2d:59:fa:14:4e:
         68:86:7f:0c:12:cf:38:da:83:b7:f2:3f:0c:57:4b:40:2f:76:
         f6:26:d9:2a:eb:fb:22:e5:40:c8:30:e0:24:ff:a0:42:b3:1f:
         ae:6b:33:36:24:be:0c:cf:6f:f7:05:1a:7d:ef:8d:bd:fd:68:
         68:0f:98:dc:c8:4e:81:07:64:cd:bd:3f:67:8c:16:ad:90:de:
         38:b4:90:d4:22:57:18:09:29:a7:86:22:c8:55:19:ac:d1:b9:
         47:c1:9c:ca:a0:6b:89:b5:c3:57:e2:95:b0:1f:2e:e6:e4:c6:
         16:75:e1:34:4e:a0:d4:46:5c:fb:80:1d:ae:99:ca:85:41:02:
         0a:0d:93:83:08:4d:9b:e1:96:6d:1f:09:59:03:9e:db:23:d9:
         6f:a7:a2:2c:f6:db:76:f7:17:7e:74:ee:78:60:d8:10:2d:b2:
         83:88:1a:13:0e:32:1c:b0:14:18:82:81:13:d9:c1:9d:23:1c:
         b5:36:3f:09:71:4e:59:dd:3a:05:10:15:51:69:cd:88:27:80:
         4e:b9:b3:a3:04:c4:fd:e1:53:e4:9c:aa:88:c2:2c:d7:9f:72:
         ca:a4:ab:6a:84:d7:80:16:2a:88:dd:73:a6:a4:70:11:b1:f9:
         4c:ba:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:03 2026 by rpki-client