Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File:                     m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier:          oqzFgk7zTEOTxwCZWAg0OEsM1qzm0yb5XxI53PWPDpA=
Subject key identifier:   C6:58:DD:56:CD:77:5E:07:5E:D3:DA:34:C9:53:CF:A7:81:81:F3:9E
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer:       /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial:       019CAA593738C4F04833D6201253EE9907D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number:          0AAB
Signing time:             Sun 01 Mar 2026 17:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:39 +0000
Files and hashes:         1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: LkZLE39FDof4XCmV80LpAW5DAlkRH3iJEc/XPAZmIyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:37:38:c4:f0:48:33:d6:20:12:53:ee:99:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
        Validity
            Not Before: Mar  1 17:01:39 2026 GMT
            Not After : Mar  2 17:01:39 2026 GMT
        Subject: CN=c658dd56cd775e075ed3da34c953cfa78181f39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:2b:b9:d8:3a:17:cd:35:c0:aa:47:5c:af:
                    75:f5:d8:11:55:9e:34:8b:ca:3b:84:1a:f0:37:ad:
                    c2:90:16:9b:b0:7a:4a:2d:43:83:5d:22:3f:db:64:
                    65:8f:02:cf:6e:f1:f8:5a:b1:07:ed:47:6a:78:ef:
                    8e:61:d3:9e:9e:e0:7f:80:07:0f:46:fa:6e:39:d4:
                    f9:78:1b:dd:0e:55:ec:3e:d6:63:18:3e:fe:1f:9a:
                    24:bd:6d:41:28:b2:41:4d:0f:40:ad:b7:57:bb:ef:
                    35:67:d4:db:69:84:a2:10:97:30:0e:85:5f:0c:ee:
                    b2:0a:0e:db:1e:2c:f0:ac:64:4c:f7:f0:e3:42:de:
                    cc:1e:13:7e:31:12:05:e6:52:10:09:16:ec:e6:2d:
                    5f:e3:2e:9a:20:1c:11:f2:e8:7b:8b:4e:76:0e:97:
                    60:20:39:87:b1:f9:3c:68:e4:20:5a:e5:01:03:5a:
                    73:74:8e:1f:8b:5e:ea:53:80:8e:0f:98:e9:75:20:
                    e8:e2:52:36:8d:f4:c7:56:c3:97:40:d0:f9:f0:ea:
                    e2:49:f6:9f:c6:28:f8:ca:b2:66:44:84:65:d6:82:
                    14:c7:35:86:c8:5b:7e:20:39:6c:c9:81:4f:90:53:
                    af:da:e3:3d:99:0a:cc:ab:e7:5c:4c:84:04:7f:93:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:58:DD:56:CD:77:5E:07:5E:D3:DA:34:C9:53:CF:A7:81:81:F3:9E
            X509v3 Authority Key Identifier:
                keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3c:18:5d:60:28:c2:23:f1:2a:44:0d:55:ef:4c:4f:23:0a:
         4a:42:90:da:65:bb:32:a7:54:7e:5b:0c:83:f6:b7:4e:02:fa:
         f0:1c:c1:d2:bc:21:38:eb:69:9d:26:ae:89:36:a2:ff:08:02:
         15:1b:25:a5:ef:2a:74:79:b1:52:0d:ae:2d:e9:c7:d1:d7:9c:
         eb:32:35:15:b7:8f:f6:64:87:0e:08:89:b2:bf:5b:15:0d:8d:
         08:c7:0d:75:03:a4:7d:95:e8:37:40:62:49:11:d9:c2:c1:6e:
         28:12:24:52:c4:c7:bf:39:07:4f:9a:ad:10:f4:cd:24:d0:9e:
         d0:84:50:03:44:90:49:f1:3e:5b:33:8c:7b:d1:df:24:45:d5:
         60:4c:46:79:94:b5:2c:9f:cf:ec:62:03:5d:70:3c:b9:eb:46:
         ce:97:41:b6:49:d2:72:4f:34:13:df:69:02:83:ee:cd:40:de:
         0e:59:74:51:c1:c0:74:e3:66:a9:3d:7a:61:00:c1:b6:04:13:
         06:0a:b5:42:7b:fa:6c:23:51:40:22:d0:4d:9c:3e:a6:2d:15:
         94:0b:82:aa:88:85:59:13:c5:43:cf:9e:cc:15:2d:32:d4:98:
         cf:1d:0d:a9:5a:e3:e7:4a:26:d7:ff:e9:9d:77:b8:4e:a2:02:
         7f:f1:98:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWTc4xPBIM9YgElPumQfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTdmODkyMmFiODQ2YTI5ODE5ZWE4MjRiYjFjNjFiMDZl
MzEzYjAwHhcNMjYwMzAxMTcwMTM5WhcNMjYwMzAyMTcwMTM5WjAzMTEwLwYDVQQD
EyhjNjU4ZGQ1NmNkNzc1ZTA3NWVkM2RhMzRjOTUzY2ZhNzgxODFmMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum4rudg6F801wKpHXK919dgRVZ40
i8o7hBrwN63CkBabsHpKLUODXSI/22RljwLPbvH4WrEH7UdqeO+OYdOenuB/gAcP
RvpuOdT5eBvdDlXsPtZjGD7+H5okvW1BKLJBTQ9ArbdXu+81Z9TbaYSiEJcwDoVf
DO6yCg7bHizwrGRM9/DjQt7MHhN+MRIF5lIQCRbs5i1f4y6aIBwR8uh7i052Dpdg
IDmHsfk8aOQgWuUBA1pzdI4fi17qU4COD5jpdSDo4lI2jfTHVsOXQND58OriSfaf
xij4yrJmRIRl1oIUxzWGyFt+IDlsyYFPkFOv2uM9mQrMq+dcTIQEf5PNhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZY3VbNd14HXtPaNMlTz6eBgfOeMB8GA1UdIwQY
MBaAFJvn+JIquEaimBnqgkuxxhsG4xOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2Qt
YjUzOTY3YTJjOTM4LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2QtYjUzOTY3YTJjOTM4
LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjwYXWAo
wiPxKkQNVe9MTyMKSkKQ2mW7MqdUflsMg/a3TgL68BzB0rwhOOtpnSauiTai/wgC
FRslpe8qdHmxUg2uLenH0dec6zI1FbeP9mSHDgiJsr9bFQ2NCMcNdQOkfZXoN0Bi
SRHZwsFuKBIkUsTHvzkHT5qtEPTNJNCe0IRQA0SQSfE+WzOMe9HfJEXVYExGeZS1
LJ/P7GIDXXA8uetGzpdBtknSck80E99pAoPuzUDeDll0UcHAdONmqT16YQDBtgQT
Bgq1Qnv6bCNRQCLQTZw+pi0VlAuCqoiFWRPFQ8+ezBUtMtSYzx0NqVrj50om1//p
nXe4TqICf/GYSg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:02 2026 by rpki-client