Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File:                     mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier:          wlEj/3BXqbHJYu4/WbT9mtYbE42GBdoH2W2Z5ZYUwNc=
Subject key identifier:   C1:F5:C5:E7:EE:39:51:DB:C4:A6:C4:06:4B:8B:98:67:44:77:0A:4B
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer:       /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial:       019CAB341E2E609F4D8CB4B634630958656E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number:          13CB
Signing time:             Sun 01 Mar 2026 21:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:45 +0000
Files and hashes:         1: 4IlfLEz6dwzaqqqVlNjwuzwxN2I.roa (hash: U15PiIvVGRDdgusGxs9xqEZkfwuc1OoD5qhPjpSs+gs=)
                          2: PhTTJz0FttlNxs2CzSCRUqREma8.roa (hash: D50x7bmSifRjUE2OZFBLVyFI8eH87tk/GAoAAu+N+L0=)
                          3: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: OqpGcSXHJc68Q94Xvu6UMGfeuxG5QCjXUzSBZq/eL2c=)
                          4: uQs-ZJfKnsb459_bSKrUNmzfSB4.roa (hash: Mi8CPwabE4hTHrT6goEVCJdEWrAoZ6ttolmgoUc/pCQ=)
                          5: xTuc6UK9A4gZnxWW2S3npGWfiHs.roa (hash: gv+TgqVRuNuQuQ9MsAnfTnrMxqIjbm5uB+jO2MB/vu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:1e:2e:60:9f:4d:8c:b4:b6:34:63:09:58:65:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
        Validity
            Not Before: Mar  1 21:00:45 2026 GMT
            Not After : Mar  2 21:00:45 2026 GMT
        Subject: CN=c1f5c5e7ee3951dbc4a6c4064b8b986744770a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:a5:e7:41:41:ef:39:d1:8b:e0:7c:94:a6:
                    64:7b:bb:53:5a:e4:3f:c4:c9:36:87:ba:94:9c:0c:
                    50:5a:10:54:c7:5a:1c:2c:67:b0:48:94:fb:00:7d:
                    ce:b0:24:54:6b:08:a3:9a:81:c4:96:3e:55:4b:7a:
                    11:30:42:2e:3c:0c:c6:54:e6:4f:84:c7:e6:08:cf:
                    64:c5:08:60:a0:fc:b1:e6:ab:9b:19:d9:4f:85:93:
                    be:0f:56:ee:c3:c8:ed:7f:7b:06:58:75:1d:50:8b:
                    8a:16:b8:10:a0:0f:c0:39:e8:d5:6d:a9:4b:86:51:
                    e4:1d:32:96:39:a3:d1:0d:4c:6d:00:ac:a0:88:80:
                    15:c3:8b:39:2d:6b:05:96:8f:ce:ec:e4:a5:66:b8:
                    19:d0:f3:19:32:b1:2c:d6:c3:c3:63:7c:21:03:3c:
                    fc:22:32:f9:a5:2d:a3:73:5a:59:01:73:4e:9e:98:
                    e8:8a:6e:e6:8b:7b:63:f2:87:5e:b9:83:0e:df:cd:
                    0f:61:46:52:9f:09:b6:b5:9b:ab:dd:4f:9f:72:cf:
                    8d:5e:81:3f:ea:d1:b0:8f:03:8b:2e:98:3d:b5:3b:
                    32:cf:20:69:65:1c:a3:75:32:1e:b5:9c:c0:9c:12:
                    48:72:0a:03:11:b8:e8:cf:10:7d:6b:52:ba:c7:34:
                    9f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F5:C5:E7:EE:39:51:DB:C4:A6:C4:06:4B:8B:98:67:44:77:0A:4B
            X509v3 Authority Key Identifier:
                keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5f:4e:ed:c1:de:f6:b3:39:34:6f:f3:36:57:5f:21:18:35:
         31:37:4b:5f:e1:d7:6c:e5:1c:a1:bc:97:b0:93:24:ea:62:8f:
         12:d5:d3:38:28:fc:52:3f:bc:81:65:bb:51:e1:97:c3:3e:f0:
         a9:6f:48:0b:d9:82:70:1a:e4:64:de:e3:de:05:aa:43:7d:9c:
         ab:ad:6b:32:ba:28:38:76:29:e5:32:2f:0e:68:08:23:a1:de:
         0e:17:1b:6d:74:2c:2e:81:5f:41:bd:41:29:95:0f:c7:bf:4f:
         4c:9c:a6:91:64:0a:81:94:44:70:4d:a1:ee:9a:72:39:2f:e7:
         e2:d4:30:d5:58:c2:e0:4a:86:43:4e:7f:2e:f0:6b:c9:c3:5c:
         c4:42:40:21:b0:42:b4:0c:fe:33:0b:1a:cf:27:ff:23:56:7a:
         5b:d8:f8:bb:59:0f:67:b1:97:c2:b6:45:47:16:9b:6f:c1:a0:
         0a:e8:fc:fd:59:3f:6b:9a:8c:2c:26:e1:05:e0:ff:48:c8:3d:
         d2:33:c4:67:08:eb:a2:28:53:11:bc:d1:b3:97:5e:ec:e9:02:
         86:8c:6f:7c:70:e3:8c:78:95:7d:45:98:a4:1f:b9:31:0d:79:
         e2:3b:8b:b9:8c:ca:6c:c4:6a:83:3f:d6:bf:e0:99:84:d0:8c:
         85:b6:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:17 2026 by rpki-client