Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File:                     5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier:          d+bx59RQMFLW4K2Mw2n+mYzGwvPdX3V5k/ay06Iq8Bs=
Subject key identifier:   88:9A:80:FD:0F:14:7A:B6:E0:DC:70:2F:8A:53:9E:A4:E0:02:B1:64
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       019CAB6B188550EAC2B627382A0944E4B16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number:          11A0
Signing time:             Sun 01 Mar 2026 22:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:48 +0000
Files and hashes:         1: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: bVTM5RM540wj/YDk/rXxbuGuek5GOilKFGrAvWIlrak=)
                          2: OqFYhVg1Efiv3mat7wl-y0IWh0M.roa (hash: oKWk1mz8YCchnuM+fj+VOQNacesKLKH9rOD1QPPd9Pk=)
                          3: SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa (hash: rPpkOjYvnM4DCXuhdrHJgLwjmOB3eXAXFBoPZ/CIvH8=)
                          4: Ug9ynSBXJvbacZUCymyFegFwsdc.roa (hash: gneEDKy7z65cw82gMUszrjpGrKuBIM6nLytArcluJiI=)
                          5: btG2nJT4iaqSf2ka_3HJpZV-U3w.roa (hash: VP+IxLeiBTwTjl4LN6YqPGbYd8Q1JdjDhqR+iKRO1YY=)
                          6: bv3dWtZZY2LxTtEYmYudDoB39G0.roa (hash: tzxAb1/SE90OUDmzgetWaOiWEjy0yrEkp9StYURk0/Y=)
                          7: cgUyX51ni1S68djJwifB7g8e6Kw.roa (hash: 3dVMqfRP6yRNJLYCw4N0iFLQvnH08Iy8aWjLtSTCtyk=)
                          8: haTrs_5tpUyACklPcJ9fH1LslHE.roa (hash: PZyuQBgGj0U34RVF0awm9EujFdbexSECm7KqphEpSv8=)
                          9: iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa (hash: btcDN1EO2IkvpjFNTIzzJGr341Fzj5AkaE+wKJ7Jt0o=)
                          10: uzdBbBS3T-chT93z9aFklFPXceQ.roa (hash: 2HStjG1X7LnSDu/XK+LCJICQndfda0I58UATYz414mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:18:85:50:ea:c2:b6:27:38:2a:09:44:e4:b1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Mar  1 22:00:48 2026 GMT
            Not After : Mar  2 22:00:48 2026 GMT
        Subject: CN=889a80fd0f147ab6e0dc702f8a539ea4e002b164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:57:5d:c4:d6:76:8f:54:dc:e6:ea:06:dc:
                    d7:19:ff:0b:89:06:61:e6:72:fd:54:b0:3c:84:33:
                    5f:d2:6f:fe:89:9e:b1:05:9b:e3:8e:9a:f8:77:38:
                    f3:37:fa:3c:48:57:b4:e4:bf:36:19:4a:1b:7a:54:
                    c8:59:6c:4b:75:7a:e8:79:e1:7a:a5:7c:28:06:00:
                    62:6e:42:e3:3f:1e:f2:ad:14:59:cf:c5:a1:a3:e4:
                    da:e3:a5:44:0a:1c:38:d7:59:bb:c9:00:94:c5:48:
                    8a:d1:36:e5:19:a4:0e:6e:52:70:7c:1e:8c:3a:4a:
                    7c:15:4e:72:87:8e:2f:c8:f7:04:86:4e:26:95:66:
                    e6:9d:65:b2:18:12:0a:01:24:ff:6f:d1:e9:51:ba:
                    cf:f2:7d:1f:c7:c6:71:5a:8e:37:0b:fc:4d:33:db:
                    22:b3:2e:70:c9:cc:8a:a5:00:0f:5e:47:44:00:b7:
                    d8:62:79:56:8d:8b:33:53:4f:18:08:5a:5a:75:ad:
                    71:a1:bd:a9:35:04:40:95:cc:d1:07:42:b4:3d:55:
                    eb:53:a3:71:bb:5f:b1:ff:4f:29:78:43:d9:4e:f0:
                    9e:2a:fc:80:fa:5e:22:49:80:89:3e:67:40:10:61:
                    75:5e:0d:0e:1b:11:47:a1:55:45:43:c7:5a:e9:3d:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:80:FD:0F:14:7A:B6:E0:DC:70:2F:8A:53:9E:A4:E0:02:B1:64
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:00:87:e3:c7:e8:cf:c8:3f:27:5f:a5:b7:39:b5:a9:35:
         7d:a4:86:18:c8:67:62:70:e2:dc:d4:5b:ee:29:58:49:b0:0a:
         a8:9d:20:10:c5:9f:a3:88:6a:ea:1d:e4:35:20:02:23:d1:0f:
         9b:3f:95:1a:5d:75:fc:0b:0f:cd:6c:09:0f:87:be:c6:14:db:
         2e:ea:fd:9d:53:4a:e0:f0:de:aa:a0:e1:c5:05:f0:7c:7a:10:
         71:85:a8:d1:4f:4c:ef:9a:a1:6c:d8:26:8a:89:a0:b9:9a:48:
         64:6c:eb:8e:a8:ca:e6:51:bf:87:63:97:0d:ef:b5:db:da:1d:
         d8:17:8c:e2:80:6d:d3:25:fa:ca:a9:3d:69:19:ab:08:b3:e9:
         7c:c9:a6:2e:c6:86:3c:bc:26:e7:cc:88:22:53:f3:1b:0d:4b:
         aa:20:a6:fc:3c:64:8f:d4:8b:9d:86:51:d0:9d:50:56:f8:9f:
         87:1b:ad:80:3b:a0:5c:f2:58:ce:5d:38:0b:a5:79:41:21:30:
         26:93:f1:bd:08:5b:27:c9:3f:b6:f4:c0:ae:35:a7:10:3e:a6:
         42:67:fd:bb:c3:b9:16:0d:df:f3:9e:5a:01:4c:b7:02:2e:03:
         03:ca:af:6d:c8:aa:7f:84:ac:c6:c7:ba:e2:de:46:f5:74:e2:
         b9:79:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:53 2026 by rpki-client