Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          yHueuePy0EKcDBALbsQWBj5udmVJIcDS8zK9dXrU0sM=
Subject key identifier:   67:5B:79:37:BC:E7:69:D4:B4:8E:70:E7:5D:F1:65:E1:F7:DD:D5:A9
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       019CACB5502A2A804EE620949F697DD2F3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          1854
Signing time:             Mon 02 Mar 2026 04:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:29 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: utvsI2M1ZRsEg4z4llM474U9TFQbT/57BhHBQ/3xO2s=)
                          2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
                          3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
                          4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
                          5: oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa (hash: g0N6pLY+sNIqbqq3i2xctEc69tyHJmh/CSOpC4j0mH4=)
                          6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:50:2a:2a:80:4e:e6:20:94:9f:69:7d:d2:f3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Mar  2 04:01:29 2026 GMT
            Not After : Mar  3 04:01:29 2026 GMT
        Subject: CN=675b7937bce769d4b48e70e75df165e1f7ddd5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fc:1f:da:cf:a4:15:0d:00:4e:45:bc:96:96:
                    33:06:80:47:22:67:03:48:67:45:e7:d5:2f:f7:b3:
                    48:ff:dc:3d:45:4a:77:e5:0c:34:a4:d2:96:64:c9:
                    7d:72:ff:43:af:d0:31:67:da:8e:b3:17:10:47:73:
                    68:9f:66:d8:d7:58:e6:1c:2f:ed:1d:6a:88:d3:3c:
                    9f:ef:3d:33:05:d1:f6:65:30:24:fa:63:4e:3e:c9:
                    f0:e6:c6:c4:6d:d5:b6:b4:ee:9a:42:48:73:61:4d:
                    fe:6b:4f:ad:2d:57:97:62:6b:dc:1f:ba:2e:c7:87:
                    00:f0:91:53:c9:48:7c:af:68:d7:65:26:ff:8d:30:
                    81:0e:a5:9a:cc:41:b2:d3:49:41:b1:f2:6b:ac:83:
                    b1:df:87:8c:d6:c3:b4:96:5c:1c:1c:80:9c:dd:3e:
                    c1:1b:bb:0c:c1:57:e8:cb:b3:5b:77:9a:5a:68:d4:
                    d4:ed:bd:3b:c8:a0:31:f2:bb:e1:83:ee:dd:ee:21:
                    ca:71:42:03:ff:1f:c5:f5:a3:e1:59:1d:5c:a6:59:
                    10:f2:f1:15:ab:50:a0:a3:ba:5e:0b:f9:43:18:79:
                    4e:0c:48:81:af:39:ec:ed:ae:57:63:7f:c7:9f:8d:
                    ee:6b:08:cb:eb:7d:fd:81:a5:f5:00:b1:0b:15:3c:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:79:37:BC:E7:69:D4:B4:8E:70:E7:5D:F1:65:E1:F7:DD:D5:A9
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:70:86:44:67:75:41:8c:6e:e1:ef:e1:7a:d1:28:20:c1:ef:
         fd:00:be:71:84:c4:0f:61:85:91:83:14:79:4b:6f:cd:45:48:
         8b:a3:17:c5:1a:48:26:46:70:41:cf:79:8e:0b:dd:00:64:27:
         55:ee:4c:4e:b2:f5:10:f2:a5:6c:70:1f:c4:d6:b9:d6:17:99:
         bf:0f:94:d6:b3:39:05:be:3c:4b:f8:7b:c5:3b:87:54:9b:55:
         2f:95:d7:7f:c8:62:de:c7:f2:06:ac:47:20:24:f8:3c:8c:e8:
         12:01:b3:b5:87:9f:b2:d9:f9:03:48:3a:4d:8e:05:f0:05:a9:
         56:fd:16:1b:f2:bd:06:52:10:56:e2:1f:0d:d8:ae:6f:74:42:
         ef:22:6d:ff:e9:ea:cf:b1:4e:0a:68:79:51:c8:f8:1c:df:cc:
         2d:be:9e:09:b2:7b:ce:8c:c7:a4:31:44:e5:cf:6c:87:a9:42:
         70:5e:8f:c4:85:98:48:5c:f9:b9:5b:cb:45:6b:a6:f8:f1:af:
         bd:3f:51:81:39:d7:33:fc:2a:4c:ba:08:07:93:59:76:b0:b4:
         85:e2:99:89:58:e2:99:2d:db:ad:92:0d:ac:ab:d9:29:3e:fd:
         59:57:95:66:cb:c9:a8:17:b4:55:34:26:03:63:de:43:91:85:
         4b:23:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:32 2026 by rpki-client