Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File:                     4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier:          +BPsRIpBWW2muy9ZDx8epiOJ2AXs1t1hsiRI+QSA8Ow=
Subject key identifier:   ED:E2:AD:11:22:C4:87:3E:CE:9F:6C:48:55:E8:69:12:96:20:4B:E5
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer:       /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial:       019CAB6B7D16DFC2D085B9B45071EC9A3CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number:          12C0
Signing time:             Sun 01 Mar 2026 22:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:14 +0000
Files and hashes:         1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: dFTohyQl09dNzT1r3s8sSXXn8OFnhbiS2sa+rR7fxBQ=)
                          2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:7d:16:df:c2:d0:85:b9:b4:50:71:ec:9a:3c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
        Validity
            Not Before: Mar  1 22:01:14 2026 GMT
            Not After : Mar  2 22:01:14 2026 GMT
        Subject: CN=ede2ad1122c4873ece9f6c4855e8691296204be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:01:6e:1a:0e:56:3c:44:e2:84:77:1a:18:
                    6f:6f:8b:58:e7:0b:7f:35:83:69:e2:bb:f7:a4:35:
                    ee:a0:5f:3a:b8:20:1a:b7:20:fb:50:0f:c2:dd:bf:
                    52:0d:6e:88:08:11:89:12:9d:5e:3e:f1:98:14:b9:
                    51:39:65:93:fb:d7:32:0a:ac:af:5b:d5:62:ee:59:
                    1d:47:46:94:a0:0d:d5:0d:19:3f:fc:41:0b:24:98:
                    b8:3f:08:6a:dd:c9:c6:50:5c:2e:65:d5:8f:de:70:
                    7a:d4:67:f3:e2:bb:b3:5d:c5:3e:65:9c:6d:e5:eb:
                    49:96:0c:1a:42:e1:60:09:a5:35:71:d7:bc:14:f3:
                    86:49:28:c5:1e:29:d7:0d:ee:b3:92:6f:7f:a6:c5:
                    4d:f7:6c:cf:de:9c:df:93:cf:9c:54:70:cd:d4:cc:
                    22:03:12:78:94:82:34:3e:dc:b6:b6:0b:8c:ae:8c:
                    b0:f1:af:4b:35:55:e3:01:bb:a0:89:0d:d5:48:a4:
                    86:cc:1c:6e:e7:94:f4:00:69:da:a9:92:23:a0:c5:
                    77:16:24:96:f3:d2:c8:21:29:02:78:ac:6d:89:cc:
                    bd:75:2d:36:01:d4:ed:24:6a:5e:c7:01:5a:2e:28:
                    38:df:13:bd:9c:cb:a1:31:93:aa:fc:eb:5a:1b:51:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:AD:11:22:C4:87:3E:CE:9F:6C:48:55:E8:69:12:96:20:4B:E5
            X509v3 Authority Key Identifier:
                keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:f0:08:14:05:06:83:a9:7b:c5:ec:32:bf:02:e4:a7:49:
         00:4b:f7:09:6b:d0:16:c2:70:c9:7b:29:8f:2e:dd:c0:56:d8:
         33:db:98:22:93:39:e0:dc:49:e4:8c:45:24:e3:49:aa:19:83:
         1a:ac:3d:5d:89:b5:84:97:37:c9:4f:0e:c7:0b:f2:d8:c2:32:
         21:2a:cb:29:a7:b3:6a:52:25:36:a0:f9:33:d7:ee:00:bd:c3:
         b6:e1:7f:07:bb:4b:6a:c3:b7:9e:9b:92:1c:c5:96:9f:5b:c5:
         7d:cd:0a:4a:51:c7:96:5a:83:4e:af:06:5d:53:59:5d:82:b3:
         1c:e8:58:f3:ff:b1:00:45:ae:71:32:3f:6e:c5:57:f3:6e:ea:
         85:ca:42:fc:a0:84:38:ba:0b:d0:76:37:41:69:96:26:85:91:
         b8:35:2c:81:52:1c:c2:e2:cb:20:46:4a:b8:eb:a7:4e:8a:76:
         89:06:41:69:70:02:9d:b2:73:71:ed:a2:22:db:30:61:7f:cd:
         8f:07:17:a7:68:ab:ae:e6:4f:21:07:44:4a:19:18:61:1d:80:
         9f:2e:c8:88:bc:3c:f6:dd:60:92:59:4a:c9:ec:ca:df:ec:6c:
         f0:dc:5b:51:e8:8e:78:3d:33:ef:7f:12:69:31:39:d8:cd:2b:
         3c:90:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:19 2026 by rpki-client