Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
File:                     e-714WwUZ9p6AvGSN2U65CsQllI.mft (raw, json)
Hash identifier:          /eW6uzJkD1mmcNtfMcBQkCavBe2S7EHpA5NlZ7qfLAA=
Subject key identifier:   01:8B:39:FC:F1:32:A3:F0:0E:DC:A1:05:E3:8B:DF:0B:AF:98:5D:AF
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Certificate issuer:       /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial:       019CAC469D38EAA2D579925A015F538A3695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 02:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:34 +0000
Files and hashes:         1: e-714WwUZ9p6AvGSN2U65CsQllI.crl (hash: TMDPQ+2j8lCXgI1o5Fw0O3xHWGGsFaj34lloZC0o+wU=)
                          2: y2uk9iTvYFQlsAkoQzXBKT1bW2c.roa (hash: UTt0RJbrpflFiPCnOTE+QQq6a+IabdHiXBu7z6m08C0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:9d:38:ea:a2:d5:79:92:5a:01:5f:53:8a:36:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
        Validity
            Not Before: Mar  2 02:00:34 2026 GMT
            Not After : Mar  3 02:00:34 2026 GMT
        Subject: CN=018b39fcf132a3f00edca105e38bdf0baf985daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:68:86:0e:06:77:e4:25:66:db:8d:18:a1:
                    9b:c1:2e:c3:37:60:da:61:1b:ad:6b:e3:bd:21:4b:
                    14:c5:29:80:ac:06:0a:9f:43:62:3b:0e:60:f0:04:
                    ee:1d:71:ee:24:cf:62:70:b8:4c:21:6f:f7:e9:37:
                    ee:71:a0:77:4e:25:56:62:84:f1:36:ba:62:c8:73:
                    16:00:b1:70:55:9b:40:ee:25:dd:01:72:c0:36:64:
                    7b:43:b4:72:68:34:bb:d9:8b:eb:cf:20:c2:1e:00:
                    aa:2a:b4:71:b2:a1:a7:96:78:6f:14:c3:71:2b:dd:
                    2d:fd:91:a3:1c:37:6d:47:aa:b5:86:65:67:c1:b4:
                    af:82:ad:3b:cd:e9:58:45:41:d7:ab:5a:96:93:a7:
                    da:df:76:dd:3e:17:db:44:45:09:93:12:cd:aa:72:
                    1f:96:49:2c:91:1a:ca:c6:16:09:5e:69:ae:69:5e:
                    4a:ed:c7:86:12:12:2c:7e:6d:ca:74:4f:ee:5a:6e:
                    58:a5:31:06:41:56:e8:56:92:52:f5:9b:52:20:9f:
                    5f:8c:bd:1a:c6:fd:18:22:0a:1b:69:ae:f2:5d:93:
                    52:58:02:a0:20:9f:6a:92:8b:f9:8f:7c:5c:07:df:
                    c4:ae:1e:3e:83:ac:33:ee:c0:6d:a5:d7:bb:c8:90:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:39:FC:F1:32:A3:F0:0E:DC:A1:05:E3:8B:DF:0B:AF:98:5D:AF
            X509v3 Authority Key Identifier:
                keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:df:f8:65:d2:9e:31:c3:69:d6:cb:fd:58:10:58:a7:57:
         8e:ff:59:59:70:e8:da:b2:25:15:dd:4c:f9:af:a2:53:23:d7:
         7b:fe:65:02:4c:87:14:d0:98:66:f0:65:94:a0:b3:54:18:c9:
         15:83:ce:a4:ca:90:b4:1b:b4:fd:79:f9:b5:ec:cc:34:3b:cb:
         94:30:55:96:1b:24:07:e1:45:d7:05:5e:24:f0:e8:be:30:b2:
         bf:90:4c:27:ce:ec:11:d9:13:7b:4f:40:f2:b7:26:a9:7f:8f:
         fc:c7:fb:91:d9:a0:46:c4:20:92:c4:43:93:b0:af:6b:25:84:
         98:15:d6:81:58:d5:59:2c:f3:0d:60:f8:2a:3a:e3:5b:68:9b:
         46:86:b0:46:22:f5:42:55:3e:3e:53:84:29:c8:b6:95:b1:21:
         df:27:2f:a8:00:ad:ac:47:ad:03:7e:27:91:99:1a:d5:8c:c3:
         54:c9:59:e9:cd:81:a1:4d:46:f8:64:64:55:b3:ba:c3:a4:21:
         e9:fc:2b:cb:6b:da:f7:32:41:e3:36:dc:bc:4b:b4:bb:55:2b:
         ff:eb:f2:75:a6:06:f7:29:f2:38:3d:76:29:cb:4b:ff:cf:d3:
         6b:52:b4:91:60:aa:37:24:6f:f8:56:c0:92:83:9e:bf:16:cc:
         a2:f5:3c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRp046qLVeZJaAV9TijaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZWVmNWUxNmMxNDY3ZGE3YTAyZjE5MjM3NjUzYWU0MmIx
MDk2NTIwHhcNMjYwMzAyMDIwMDM0WhcNMjYwMzAzMDIwMDM0WjAzMTEwLwYDVQQD
EygwMThiMzlmY2YxMzJhM2YwMGVkY2ExMDVlMzhiZGYwYmFmOTg1ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zJohg4Gd+QlZtuNGKGbwS7DN2Da
YRuta+O9IUsUxSmArAYKn0NiOw5g8ATuHXHuJM9icLhMIW/36TfucaB3TiVWYoTx
NrpiyHMWALFwVZtA7iXdAXLANmR7Q7RyaDS72YvrzyDCHgCqKrRxsqGnlnhvFMNx
K90t/ZGjHDdtR6q1hmVnwbSvgq07zelYRUHXq1qWk6fa33bdPhfbREUJkxLNqnIf
lkkskRrKxhYJXmmuaV5K7ceGEhIsfm3KdE/uWm5YpTEGQVboVpJS9ZtSIJ9fjL0a
xv0YIgobaa7yXZNSWAKgIJ9qkov5j3xcB9/Erh4+g6wz7sBtpde7yJB7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGLOfzxMqPwDtyhBeOL3wuvmF2vMB8GA1UdIwQY
MBaAFHvu9eFsFGfaegLxkjdlOuQrEJZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYt
MTdhNjliNzAyZTFiLzEvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYtMTdhNjliNzAyZTFi
LzEvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiN3f+GXS
njHDadbL/VgQWKdXjv9ZWXDo2rIlFd1M+a+iUyPXe/5lAkyHFNCYZvBllKCzVBjJ
FYPOpMqQtBu0/Xn5tezMNDvLlDBVlhskB+FF1wVeJPDovjCyv5BMJ87sEdkTe09A
8rcmqX+P/Mf7kdmgRsQgksRDk7CvayWEmBXWgVjVWSzzDWD4KjrjW2ibRoawRiL1
QlU+PlOEKci2lbEh3ycvqACtrEetA34nkZka1YzDVMlZ6c2BoU1G+GRkVbO6w6Qh
6fwry2va9zJB4zbcvEu0u1Ur/+vydaYG9ynyOD12KctL/8/Ta1K0kWCqNyRv+FbA
koOevxbMovU8WQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:34 2026 by rpki-client