Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File:                     c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier:          Ngm20whZwzDFEYm7t70p1mkezi3nka+3/j3ig0+gubU=
Subject key identifier:   75:3F:02:61:B1:1B:82:EB:D0:CC:31:FD:16:CD:E7:6E:5E:2A:FF:BF
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer:       /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial:       019CAAC65CD9593FE1C1EB15C8B3D7EEA0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number:          0C5A
Signing time:             Sun 01 Mar 2026 19:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:52 +0000
Files and hashes:         1: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: fdqarYJZpF02xHcwWadS6O+YaFedRi0uPbHh38Zrix0=)
                          2: xenNFJCmXjXG5F3kgOfPTRtR0L0.roa (hash: Rs1MjItgO+A6sueh9XicARxqQOJ7zkW0Gr1nwJ+Ebtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:5c:d9:59:3f:e1:c1:eb:15:c8:b3:d7:ee:a0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
        Validity
            Not Before: Mar  1 19:00:52 2026 GMT
            Not After : Mar  2 19:00:52 2026 GMT
        Subject: CN=753f0261b11b82ebd0cc31fd16cde76e5e2affbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:37:22:c2:b9:06:e0:31:2b:f5:3c:05:23:
                    b0:c7:15:0c:ee:b5:d8:83:8a:6c:45:76:19:eb:39:
                    63:86:a9:38:dd:04:ce:01:21:c7:af:7f:f5:0e:7d:
                    09:62:c6:b8:94:6d:cb:b3:7c:d0:00:4e:1e:7e:25:
                    c6:41:f5:b1:01:07:01:04:16:b3:c1:f7:5b:e1:05:
                    70:ee:ba:76:ca:5d:86:8f:65:7a:0c:d0:17:c9:c0:
                    05:3e:2c:e6:1c:42:08:77:95:ff:48:6c:dd:99:71:
                    6c:9a:18:83:db:2b:86:f8:53:0c:94:a6:46:33:7f:
                    9d:7e:59:14:c3:32:77:32:46:cc:38:15:22:65:02:
                    1c:4d:2b:63:49:a1:1c:51:0d:92:3d:55:97:18:b5:
                    2f:be:5c:1f:7e:05:00:c4:2e:bc:b3:13:99:ea:e7:
                    b4:36:7d:cd:f0:62:f8:97:7f:5b:7c:72:eb:45:29:
                    a7:2f:e4:bf:2b:17:35:7d:2c:af:ae:0f:f3:a2:95:
                    12:df:95:06:bb:62:67:08:53:8e:4e:de:49:66:46:
                    5d:14:ef:f6:5f:1e:4a:40:f7:7f:96:c9:39:8d:f1:
                    70:33:a4:15:a6:0d:9c:9a:dd:22:4c:50:97:59:02:
                    14:61:cf:47:42:66:4a:73:1d:3f:f1:d7:6d:d9:ae:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3F:02:61:B1:1B:82:EB:D0:CC:31:FD:16:CD:E7:6E:5E:2A:FF:BF
            X509v3 Authority Key Identifier:
                keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:23:03:6d:8d:64:e3:30:28:b5:91:56:f2:09:ec:b0:33:5a:
         8e:0d:e1:32:12:fd:79:72:c2:c8:ee:ab:42:49:51:da:d6:6f:
         9e:19:f1:ae:88:62:45:50:11:ee:2b:fc:b2:d2:8d:95:db:9b:
         06:3c:df:cf:19:84:ab:4f:45:84:de:d8:ac:b5:77:80:b6:4d:
         bd:a0:a8:5a:71:d5:e2:ac:81:a8:f5:65:c8:04:b6:6b:b8:87:
         69:e1:38:b6:6f:3c:22:ef:27:1b:a0:1f:1e:7e:44:1d:6f:0f:
         61:bc:c5:0b:29:d9:2a:58:b3:a5:dc:40:b6:10:dd:e3:a7:06:
         a3:71:d4:47:d6:a5:7f:06:8a:e8:af:4b:a5:e9:38:f3:a1:cf:
         06:43:30:be:47:35:f3:1c:1d:d5:e2:aa:ae:d0:d0:20:ff:fe:
         1e:28:18:c1:8e:46:48:c1:a3:0b:a3:e0:01:5f:36:ce:49:92:
         b3:b2:0a:3e:f6:49:93:ad:e1:c5:90:80:48:0f:3e:5d:45:ff:
         dd:5b:47:60:86:4b:8e:13:fc:85:1f:85:2b:c8:76:be:84:67:
         1a:50:34:0b:24:23:89:c2:87:74:86:72:df:a1:3e:ab:7c:bf:
         97:cf:50:2c:8d:0b:b4:2f:fc:05:a0:6a:09:e8:33:46:c6:9a:
         c4:70:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:40 2026 by rpki-client