Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          bsv5EjggZ2TBsAFEAbfwo6KOvmQpkRRdinf0xvSM7eU=
Subject key identifier:   42:3D:F0:FB:AC:2A:9D:34:EE:B3:F8:48:6D:0E:C0:A2:1D:7D:F6:C3
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       019CABD8F1B45416FA6F8476E08F818E4CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:47 +0000
Files and hashes:         1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: WTEg+uOcDE7fz63PWBiuIdqC0lytzbv43O5nOo9WqOY=)
                          2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:f1:b4:54:16:fa:6f:84:76:e0:8f:81:8e:4c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: Mar  2 00:00:47 2026 GMT
            Not After : Mar  3 00:00:47 2026 GMT
        Subject: CN=423df0fbac2a9d34eeb3f8486d0ec0a21d7df6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:9a:47:4f:14:16:3d:3c:5b:98:41:7a:48:
                    3b:38:90:01:5e:f6:9f:53:21:7b:7d:64:98:7d:d0:
                    57:d4:97:e9:ec:50:bb:92:fe:8d:93:ac:03:36:11:
                    4c:91:c0:f9:3a:83:87:dd:d3:d2:51:5f:29:58:a7:
                    a9:90:2b:83:7e:59:e8:30:e4:42:a3:44:34:1e:b4:
                    5c:1b:7b:36:74:80:01:ae:48:3b:89:5b:ea:a2:eb:
                    f9:f8:ad:59:3d:3a:99:a1:49:c1:ac:06:19:25:bf:
                    47:df:09:8a:b2:11:5c:60:c7:71:2e:56:0c:4c:5d:
                    8b:58:52:69:6b:17:3d:5a:c9:af:e7:8b:e1:b3:43:
                    13:97:92:75:23:07:a4:df:27:f9:74:ad:e6:e7:c2:
                    3c:e5:7b:2c:47:16:78:cd:34:84:4f:39:f0:c0:fe:
                    f2:26:ca:5d:ba:9d:cb:5a:bf:91:f1:a6:f1:d7:9f:
                    48:05:dd:09:47:d5:25:f0:de:a7:78:d9:47:5c:dd:
                    cf:87:35:f9:e6:85:96:d6:e3:96:b1:93:b1:fe:3a:
                    78:0f:95:9d:65:66:44:d2:46:d0:6e:ef:bb:b1:83:
                    90:a1:9f:7e:e5:99:01:f4:4a:0e:31:b4:6b:b2:10:
                    85:a4:80:c6:a8:25:68:4f:ca:2c:15:db:4f:57:fd:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:F0:FB:AC:2A:9D:34:EE:B3:F8:48:6D:0E:C0:A2:1D:7D:F6:C3
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:ae:67:20:b6:e0:42:b0:40:91:97:b0:70:86:cb:70:7d:
         18:5d:d3:52:31:be:ac:ac:00:ed:32:02:6d:3d:37:a7:5c:51:
         49:76:1f:0f:1f:f6:60:cb:c9:1b:93:57:fd:54:58:af:f9:ac:
         60:1d:5e:e8:59:41:03:3d:74:7f:0a:fa:a8:a5:87:26:19:47:
         3d:ac:32:62:1c:3a:d0:b0:2d:e9:d6:36:f2:03:b3:5f:e8:fc:
         a4:06:45:b8:08:e3:9a:e9:99:9a:12:a0:02:4f:5e:78:a6:21:
         db:f5:3d:9e:a4:be:26:d4:b3:28:bf:89:5f:2a:21:e5:ac:ab:
         8d:cf:3a:2d:42:9a:99:a8:30:54:7c:36:68:ee:da:d5:d9:53:
         8b:dd:72:81:03:b3:62:5c:6b:11:e3:40:93:ac:9f:17:a0:5c:
         25:fe:a9:ef:e7:39:7d:16:8b:f9:dd:ce:e0:73:ea:49:cf:cf:
         08:52:cd:83:92:2a:7b:fb:53:1c:e5:98:50:97:54:c7:2d:9a:
         b1:9d:c8:35:7f:4d:b2:d3:17:5a:39:53:6b:3e:fa:3e:22:0d:
         f6:e3:17:cb:3b:fd:f3:62:4a:83:f7:d1:54:c5:d3:80:17:ae:
         a3:d7:de:c1:64:e9:aa:1d:c7:9a:ad:fe:e6:7f:b7:2a:ff:71:
         9c:de:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:10 2026 by rpki-client