Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          Hk4euCLGqK/vpLZB+XzX0IDPg18x/hoismM4IVL9u+A=
Subject key identifier:   F5:2B:D3:C2:21:8A:64:10:85:72:46:BC:E8:AA:5C:35:65:23:51:B2
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       019CAAC6D02A9B1B6A0B1C26FAE94D192F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          12A4
Signing time:             Sun 01 Mar 2026 19:01:21 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:21 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:21 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: WBKsDfIz3ocKs1p2t2ncRUxPvSmh4O6R/ENUEfxiFNk=)
                          2: Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa (hash: WjJASBXtMbMx6UjFd1CviKnEyJIaLn92uMYlDMFmvww=)
                          3: bmiicfROGlo9yf7zWdyA9ISaaIk.roa (hash: 1eggDeotMzuLMDhclZE88i2+/VDlsW1ydjGiJvLTfSk=)
                          4: lx-y9PtQp55g9e257pFIFA6PrMk.roa (hash: 3zWuaGtosieGRl8uoqyXPsU0RM4EJfQrxujvT6qUxD8=)
                          5: vOmtSoi-0VnTRfrdo0vo947Kkjo.roa (hash: YDH3N/wQDGDdiYRYpU2cCSEAou9IYJQNs0umXr6ibys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:d0:2a:9b:1b:6a:0b:1c:26:fa:e9:4d:19:2f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Mar  1 19:01:21 2026 GMT
            Not After : Mar  2 19:01:21 2026 GMT
        Subject: CN=f52bd3c2218a6410857246bce8aa5c35652351b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:36:ff:4d:f3:4a:64:23:45:24:6f:8b:4e:
                    d5:1f:43:ec:56:13:e3:5b:f9:e6:f0:56:03:d3:d8:
                    6b:01:9c:94:ef:0a:5a:b0:8c:c6:fc:18:ed:f4:19:
                    a6:ac:1b:76:32:a7:97:78:80:d5:8e:d6:27:07:5e:
                    d2:61:c9:dd:e2:79:0f:16:9e:bd:11:3e:ce:24:81:
                    d7:25:70:51:0f:c9:8d:f3:d8:c7:7e:95:2f:39:e6:
                    2b:e3:0c:84:a9:0f:72:7e:4b:03:61:d2:47:f6:b0:
                    c4:85:81:d1:d2:5b:51:dc:b8:34:52:26:17:22:03:
                    a8:2d:5c:c4:01:3f:51:dc:6b:e7:0c:a4:d7:f5:6f:
                    7f:be:90:a3:b6:b4:e1:3c:56:ec:39:18:00:d6:80:
                    c9:a2:5e:9f:51:17:03:3f:ce:21:11:03:87:03:ad:
                    13:79:75:ce:44:35:99:5d:08:f8:c0:fd:b6:52:b2:
                    84:cc:fc:fe:ca:f5:7d:d6:60:dd:b4:bf:4d:71:35:
                    3a:dc:01:8d:c0:fc:3d:69:57:8c:20:48:61:43:43:
                    43:75:06:dd:e8:a8:30:e9:d3:f1:88:56:2c:e0:58:
                    ed:45:83:f2:8b:9f:c2:54:db:2b:df:67:36:7f:95:
                    e8:e9:cc:a7:d1:23:c9:e2:02:09:05:95:89:f4:74:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:D3:C2:21:8A:64:10:85:72:46:BC:E8:AA:5C:35:65:23:51:B2
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:52:12:b8:7d:f2:b8:1e:f9:57:7f:fe:81:e0:75:1f:4e:46:
         2c:5c:99:b5:bf:51:09:3d:53:88:9d:a0:9f:18:63:fc:89:f1:
         f8:e7:0e:5c:13:b9:1f:d0:2e:27:bf:58:7d:2e:6e:a9:57:1c:
         30:48:5a:f4:60:14:ea:0c:56:97:ea:eb:00:81:64:b8:9e:87:
         cb:e7:a0:1d:9a:a0:66:9a:7c:fd:a4:4e:b6:cc:49:8e:43:75:
         b6:bc:23:b0:f7:59:15:a8:f0:b9:ec:98:1c:65:dc:bb:12:73:
         62:67:d9:ff:f3:7f:c7:5a:ce:27:80:ae:ed:55:90:68:03:40:
         12:67:85:c7:6f:ed:50:ef:f7:9d:a5:fd:eb:a2:ef:77:82:b0:
         ec:34:0a:20:50:e4:77:3c:17:2e:e0:dd:af:4a:21:a3:1f:fd:
         8e:60:d3:0b:b5:98:62:95:86:ec:2b:a4:7b:05:ce:7f:a9:57:
         e3:62:29:a5:45:aa:41:97:12:54:a3:26:f5:c8:e1:8f:a3:8a:
         ed:56:f8:72:fd:94:a3:be:75:54:38:ff:6a:31:3c:6a:62:a0:
         c3:77:7e:ea:48:12:7a:1a:32:7f:94:73:e9:38:b7:b8:f5:c9:
         11:f9:d4:e4:d3:70:0c:dd:4d:cf:1b:6e:f2:1c:a2:eb:1c:ae:
         8f:1b:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:55 2026 by rpki-client