Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          dIj8+WMj/kaBEu6PyXVQljeIsC/8EwZZSgoSpRy3a5I=
Subject key identifier:   44:E6:69:EC:22:DB:52:73:A4:D6:95:C4:4C:1C:AD:03:C0:05:EA:5F
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       019CABA1CD923BC7606C27418B5CAD0FCE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 23:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:33 +0000
Files and hashes:         1: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
                          2: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
                          3: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
                          4: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
                          5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: Fe4+4pEP7BH+7e2bdosAGhw5vcR1gaOiaRIgmpkVXEk=)
                          6: v7DRMSksGTlDfhs744praVhJlnw.roa (hash: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:cd:92:3b:c7:60:6c:27:41:8b:5c:ad:0f:ce:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Mar  1 23:00:33 2026 GMT
            Not After : Mar  2 23:00:33 2026 GMT
        Subject: CN=44e669ec22db5273a4d695c44c1cad03c005ea5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:c4:11:b2:01:16:b7:7f:22:cd:24:dd:65:
                    95:04:0b:d6:8b:c7:72:dc:8a:cd:9f:21:b5:8d:d8:
                    26:33:6f:54:7f:01:38:03:15:20:98:44:59:fa:11:
                    57:20:ba:9e:9b:79:17:14:3e:45:f3:9f:4f:24:2e:
                    07:f6:b6:d5:e6:a7:c0:9c:02:fc:2f:84:1f:9f:c3:
                    d7:01:97:4a:fd:f4:f5:8b:84:7a:d1:34:36:50:a6:
                    24:a1:c9:ab:b2:be:cb:b2:29:7b:d2:75:d3:3d:24:
                    cd:3c:24:35:1a:03:25:e7:01:cd:51:b4:54:17:69:
                    f1:33:47:a3:e6:aa:70:40:ff:29:2d:1b:b1:a0:26:
                    80:56:f0:16:b7:21:4c:34:f1:db:67:44:7c:7c:23:
                    09:c6:9c:61:35:fa:19:64:bc:73:18:62:fd:54:39:
                    30:f0:1b:37:4b:47:b8:b9:b0:9a:5f:9f:d8:d9:ac:
                    89:2c:7e:2b:56:df:95:1a:aa:10:83:ff:00:e5:63:
                    55:1e:08:df:5d:46:8f:20:c0:6a:c2:d0:32:52:ca:
                    87:4e:9e:1e:3a:49:e7:33:32:2c:0b:a3:8a:f0:90:
                    12:6a:3a:f5:3e:ed:d0:c4:ad:17:38:d8:c5:31:2d:
                    c0:c3:ed:fe:f0:12:3e:a1:8c:c5:0f:a8:69:b2:35:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:69:EC:22:DB:52:73:A4:D6:95:C4:4C:1C:AD:03:C0:05:EA:5F
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9c:a4:56:75:59:f3:27:a4:de:10:fc:f2:e8:35:c7:9a:89:
         25:1a:7c:55:01:ae:64:18:9a:69:df:17:36:5b:c8:0f:b2:ca:
         30:b5:63:f5:87:75:c8:dc:4a:68:0f:38:19:3f:69:c1:c3:a3:
         0c:af:6c:3d:ae:6d:cb:92:3c:68:7e:39:91:f6:68:d7:84:49:
         e0:68:1b:38:01:6b:3f:3f:59:b5:49:37:f5:82:4e:be:20:48:
         39:73:19:d2:d7:89:ef:85:a9:e8:ae:a4:07:14:f3:9a:3a:3a:
         81:62:77:0f:7e:79:77:ce:b1:98:7b:ec:77:cf:13:f6:cf:34:
         d5:a6:9e:73:cc:60:bd:c2:75:70:c6:29:28:fd:18:d3:10:95:
         24:17:f1:37:fc:7f:fc:80:2a:f4:6e:61:64:8d:25:4e:c8:4c:
         91:e9:b5:d4:3a:13:47:64:34:b1:cc:0b:12:64:ff:c7:08:84:
         55:2a:9d:22:1f:cc:b0:70:09:a5:9a:ec:26:a5:ff:9c:c9:fe:
         68:d5:4b:83:45:b3:6b:05:1d:25:75:f6:98:71:c3:6e:d5:b1:
         21:0c:2b:97:f0:05:7f:c0:fc:c2:be:8d:f9:b7:97:dc:64:49:
         42:8d:28:da:10:37:8f:bb:82:07:7b:e4:48:8b:35:3c:da:2d:
         c9:a7:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:00 2026 by rpki-client