Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File:                     R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier:          XiFfCYIrF/MTUoo+PGBqJZXB9qH69pzqvQDAltivWH0=
Subject key identifier:   4C:73:9A:C4:7E:53:F5:24:0A:2D:01:B8:7E:BC:AD:CD:2E:18:B1:AA
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer:       /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial:       019CAA219AEAB5B36B89BAAC50733C3B44FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number:          07F2
Signing time:             Sun 01 Mar 2026 16:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:54 +0000
Files and hashes:         1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
                          2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: b+RPOfXNBVzS5klq+JMNHNAo708Ry02oTKypZ5RytZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:9a:ea:b5:b3:6b:89:ba:ac:50:73:3c:3b:44:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
        Validity
            Not Before: Mar  1 16:00:54 2026 GMT
            Not After : Mar  2 16:00:54 2026 GMT
        Subject: CN=4c739ac47e53f5240a2d01b87ebcadcd2e18b1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:30:d9:1a:45:30:e1:e6:73:cd:90:5a:40:
                    82:3a:25:0d:f5:fe:36:d0:c1:4c:19:be:35:2c:ab:
                    e3:7c:4b:12:37:db:03:1e:8d:81:1b:1e:13:e2:8e:
                    58:ef:ef:19:7a:5e:2b:da:0b:66:7b:67:c1:68:1b:
                    7f:79:97:b7:98:fe:a3:b4:89:52:9f:f1:0f:e4:eb:
                    70:d2:77:21:cb:f0:12:5b:4e:6d:f3:c3:13:62:6b:
                    aa:3b:98:af:bd:89:9c:d2:8d:55:e7:55:c1:2c:8c:
                    b3:0d:8d:01:cb:9d:d8:00:69:6f:b7:d6:41:b5:eb:
                    3b:e7:ba:e3:9d:a7:ae:ca:95:79:e0:d7:b8:90:15:
                    00:cf:3e:ed:3b:99:52:a2:e2:ef:f5:79:86:92:c3:
                    76:af:d2:c6:ed:24:67:75:9b:f0:2a:3d:e1:08:10:
                    ca:2d:92:d8:b0:18:c5:91:3a:70:ee:c9:2c:9a:8c:
                    66:18:63:00:2c:91:24:56:17:8a:5b:fd:f2:87:f3:
                    83:b4:95:c3:cc:71:1a:5c:dd:05:57:b1:41:0a:51:
                    fd:e6:ca:33:cc:bf:90:5d:b5:7a:e5:d5:ce:3a:a1:
                    c5:5b:a1:96:19:a4:5a:dc:0f:4e:1b:cf:57:bd:5d:
                    cc:80:1f:b1:87:a5:b6:3e:fb:c6:75:a2:91:ac:9a:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:73:9A:C4:7E:53:F5:24:0A:2D:01:B8:7E:BC:AD:CD:2E:18:B1:AA
            X509v3 Authority Key Identifier:
                keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e8:b4:59:5f:2a:59:31:00:da:5c:f8:0e:df:ad:14:53:93:
         f6:f2:88:b7:97:39:d0:db:24:b3:57:20:d3:fc:16:73:99:9e:
         52:b0:4e:af:91:51:bf:94:91:2a:af:14:3a:ae:f5:28:0d:33:
         81:2f:4d:e9:da:3b:eb:f0:d3:ea:4e:49:d8:78:b0:2c:ae:13:
         32:e2:5a:79:c5:2a:83:8d:18:f0:53:f6:ea:2e:54:a1:1b:1d:
         49:54:19:50:2b:60:ea:c0:46:87:6b:5c:be:d8:06:e0:ba:10:
         80:10:89:07:ce:5b:b1:d7:26:18:9e:24:1b:cf:b1:75:d2:46:
         e9:09:31:74:68:9c:c4:96:00:99:31:3c:6b:a9:0c:59:a7:ff:
         0c:f4:48:8e:89:de:23:13:6a:da:bc:8e:ff:ea:49:9e:af:b8:
         d8:9b:d4:9a:b2:cc:ec:7f:6f:4c:fc:15:43:61:31:96:66:6c:
         ed:de:ca:5e:bc:69:12:22:87:75:03:53:e9:e1:9e:95:1d:9f:
         a7:30:61:f7:86:01:8e:c7:0c:47:3b:97:71:bc:87:38:8b:9d:
         7d:5b:a6:05:01:9d:d9:98:f9:d6:02:ab:dc:88:c0:20:78:e1:
         ed:d3:38:7e:2c:73:19:7c:8f:46:d6:fa:a1:0e:d3:9f:13:12:
         dd:ba:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:22 2026 by rpki-client