Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          nysWnl/1A3SLU0SnGLqtpTqDfaKEeB8vMkg4oaxk4uo=
Subject key identifier:   F0:0B:FD:20:74:46:BE:34:12:A1:47:48:DF:29:76:71:D4:39:8F:F5
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       019CA90EB64BBC7414A917AA5F3018C8BD8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 11:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 11:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 11:00:39 +0000
Files and hashes:         1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
                          2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: jTWAY6S2xG0CVKScHH7U1YUUyM/w6SQkvk5LELWKw5s=)
                          3: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:0e:b6:4b:bc:74:14:a9:17:aa:5f:30:18:c8:bd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: Mar  1 11:00:39 2026 GMT
            Not After : Mar  2 11:00:39 2026 GMT
        Subject: CN=f00bfd207446be3412a14748df297671d4398ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:ce:f7:85:8f:d4:28:c9:47:d9:2f:8b:fc:
                    a0:0e:67:88:8d:52:69:eb:c5:fc:88:06:2d:6e:2c:
                    cb:ed:4f:87:e8:fa:e0:ac:43:d0:c6:9d:53:32:41:
                    c0:ac:41:55:06:1e:dd:d8:53:11:ec:f6:f0:61:6a:
                    dc:cd:90:dd:0f:65:d5:6f:b5:56:c1:9c:39:cd:1c:
                    fd:20:8c:1a:22:ff:4c:e7:fb:7c:1f:9f:d7:cc:24:
                    a1:56:09:10:13:d9:09:75:e7:91:f0:8a:0b:10:86:
                    25:2e:1f:61:2f:01:c1:bf:60:b1:54:97:5b:da:03:
                    64:17:95:5d:f2:c8:65:c4:5c:1d:0c:94:93:a4:a0:
                    03:b9:a6:57:ed:e8:43:b4:95:37:e9:2b:32:7d:63:
                    81:93:ca:d1:14:0a:25:61:d1:1e:3a:c5:58:8f:ba:
                    7f:4f:d1:53:a7:0b:ba:3b:7a:a8:02:91:53:a3:f4:
                    d4:db:ec:b2:37:98:14:80:3b:90:51:86:f4:96:fb:
                    22:14:0b:a2:a3:09:4f:50:86:2c:cb:d5:7f:4a:55:
                    3e:5e:1f:3a:94:22:ba:f8:c2:6e:e7:c4:3e:b0:59:
                    04:40:5c:22:15:77:35:a8:17:09:9b:5d:81:40:77:
                    d7:fb:e7:61:45:64:ea:ba:05:79:a9:b0:e6:3d:3d:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0B:FD:20:74:46:BE:34:12:A1:47:48:DF:29:76:71:D4:39:8F:F5
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:49:63:66:68:84:5a:bf:05:45:ab:65:2e:67:22:0f:59:
         4a:bb:2d:13:fb:1f:70:70:97:82:ee:5c:ac:06:6f:64:df:4d:
         2d:38:a7:fa:21:30:21:03:8a:95:00:c1:8d:51:fa:f5:a3:91:
         68:5b:21:b5:e2:55:c5:06:07:e7:43:c9:04:42:d1:66:36:bb:
         db:7f:58:74:b4:a0:67:1a:c3:ec:19:1d:2c:98:be:11:01:df:
         8f:63:e5:82:92:54:e6:51:8e:b3:95:49:92:7d:3e:a2:32:c9:
         c7:d1:5b:89:04:2d:02:b4:25:26:e0:68:5c:57:f6:ae:1f:24:
         97:7e:65:08:7e:c8:4f:e5:9c:5f:9c:03:b5:20:48:ca:52:16:
         2d:55:1e:a0:d6:e7:d8:a0:b1:1d:56:98:f9:45:64:8f:fc:22:
         5c:11:f9:aa:3f:5b:51:37:85:0a:21:ca:a2:cc:af:e3:67:9f:
         a8:bd:de:ef:1d:92:da:7d:38:af:24:66:2b:49:3e:b2:77:61:
         84:36:73:88:94:4e:26:34:bb:8d:a5:7a:4b:35:a9:cd:b4:bc:
         19:ed:37:09:98:b8:11:db:00:ac:dc:2c:9b:30:5b:8b:e6:fd:
         5e:52:fb:02:22:62:c2:cd:c3:17:53:ef:28:92:7a:ce:a2:ec:
         d6:b6:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:49 2026 by rpki-client