Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          Kim7MJ39PSa3CrvJnwJ1dJpwsR+abF7ZP4l5rzWYJVc=
Subject key identifier:   CE:6F:D5:B8:C5:D0:93:F2:77:27:DB:BD:58:CD:7E:B9:B1:71:20:B2
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       019CAFB6863A913CD9F1FE898C79E3E2F4DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          03B9
Signing time:             Mon 02 Mar 2026 18:01:40 +0000
Manifest this update:     Mon 02 Mar 2026 18:01:40 +0000
Manifest next update:     Tue 03 Mar 2026 18:01:40 +0000
Files and hashes:         1: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: HjUNpEUX2/aOu95y1EEdc3q0AMUKCwZsiJ0EFqUMrvc=)
                          2: X4f6FdUM7-oxmTPyJDPnSjOJQjc.roa (hash: G+8NGrdkwPv6Os9FA75QeRzjamvnyvobATUloFoNoiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b6:86:3a:91:3c:d9:f1:fe:89:8c:79:e3:e2:f4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Mar  2 18:01:40 2026 GMT
            Not After : Mar  3 18:01:40 2026 GMT
        Subject: CN=ce6fd5b8c5d093f27727dbbd58cd7eb9b17120b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:89:50:e9:a1:bb:a8:d2:fb:f0:cd:7b:07:
                    a1:db:c5:a7:2e:0c:77:4c:86:d6:1c:bb:d1:16:08:
                    75:49:33:a1:6d:e8:f4:d2:c4:a6:d5:15:1c:7e:a0:
                    7f:cf:90:f6:0c:12:51:7d:a2:99:70:27:a1:28:14:
                    46:81:6b:45:5c:05:c0:cf:2f:f3:2e:bd:2f:8d:c1:
                    92:11:d4:57:af:7a:93:6d:68:a5:b1:29:cc:e4:e7:
                    03:0a:b5:ea:f1:5b:b7:6d:d7:18:4b:b5:9b:de:db:
                    97:fa:06:7a:9e:c0:63:50:f5:b8:f2:cd:26:23:2b:
                    d6:b1:63:b9:99:16:1d:bf:01:01:bd:94:78:7e:56:
                    6e:f7:eb:51:dd:dd:58:48:d0:95:9e:b3:25:f4:29:
                    f0:4c:70:3c:03:3a:e6:e2:65:5c:57:e1:22:62:75:
                    2f:00:c7:0f:e8:f8:6f:d8:b7:52:38:bb:82:b2:2f:
                    6c:df:fb:a1:38:73:0e:6d:29:35:e7:7c:8f:ad:31:
                    19:4e:8d:19:b9:59:90:a8:90:5a:a4:65:bc:53:5b:
                    09:47:a9:af:d0:a9:05:5e:83:e1:d2:3c:fe:84:1a:
                    4f:2d:91:89:c9:a0:e7:4e:3d:d6:17:ac:8a:52:1d:
                    20:4f:d4:ce:dd:a2:fb:bd:76:dd:74:52:19:1f:bc:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6F:D5:B8:C5:D0:93:F2:77:27:DB:BD:58:CD:7E:B9:B1:71:20:B2
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:91:19:90:8e:ca:8c:d0:c3:89:29:7c:44:f8:64:34:ce:
         29:15:ed:8a:c6:91:fc:71:17:8c:90:9e:25:a2:68:e7:8b:43:
         51:77:d4:02:fe:f1:79:56:9e:30:36:01:ba:dd:89:1c:80:7e:
         61:4b:a7:9f:bb:bb:a0:29:b3:c2:f2:aa:87:ff:e4:5f:27:9c:
         ca:f3:0b:ca:2d:b0:0d:3c:14:b0:d3:5e:84:f9:f3:74:28:17:
         20:5c:11:bf:37:6d:9f:dc:d7:10:81:98:be:f4:bf:4d:bc:21:
         09:bb:ed:50:95:5d:30:e9:67:cb:bb:b8:67:5d:82:b4:40:90:
         d2:b6:ed:fd:b2:3a:7b:88:4c:89:2b:39:cd:4e:2a:48:f3:2c:
         83:24:33:fb:a7:3c:b9:4d:61:e6:cf:82:05:00:34:f8:89:7a:
         c5:fe:d3:ff:70:95:9d:b9:4f:9f:37:cc:dc:00:63:5c:3c:11:
         c2:a0:cb:81:66:8e:95:49:e8:96:8a:c3:87:7b:b9:8d:b9:9d:
         bc:49:05:76:f0:7b:00:5b:16:bb:4d:55:cf:db:c1:c3:28:11:
         5d:ad:f4:ee:12:2a:d3:93:28:20:c8:35:dc:e1:e5:44:a5:6b:
         42:82:f7:f3:1b:7e:27:49:7a:11:14:67:58:f4:b7:bb:d4:50:
         9b:56:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:30 2026 by rpki-client