Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          7JzbQC9texj7caum/dX8ZGLVbfRQvDlihXU03BaU1Io=
Subject key identifier:   83:A1:6B:00:E7:DB:51:A3:B8:20:46:26:F6:E0:E2:6C:71:6D:0F:C5
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       019CAD223D3EA29A95D05BA546C31F48BFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          0FDD
Signing time:             Mon 02 Mar 2026 06:00:28 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:28 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:28 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: 1OKCxYgamNwCl7WNvVitaqOhX4okbpm7/PPIw+MyMho=)
                          2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:3d:3e:a2:9a:95:d0:5b:a5:46:c3:1f:48:bf:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Mar  2 06:00:28 2026 GMT
            Not After : Mar  3 06:00:28 2026 GMT
        Subject: CN=83a16b00e7db51a3b8204626f6e0e26c716d0fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:88:3e:ff:c1:87:4f:69:c1:17:ee:6f:e5:
                    40:e3:70:a7:6a:6d:4a:b0:17:2d:d3:27:ea:39:b0:
                    c2:11:bb:44:c2:24:4d:32:80:41:af:b5:3b:0b:59:
                    fb:82:5a:25:b8:c4:3e:13:3b:5b:3b:3b:aa:59:eb:
                    33:7c:7a:ee:98:eb:83:59:e8:94:2a:f9:ec:52:a8:
                    64:ad:47:48:45:fc:dc:b4:01:49:47:61:11:e4:15:
                    e8:e2:19:ab:10:be:13:15:72:00:b3:3c:5b:7a:0f:
                    91:f1:c5:98:dc:4a:45:f0:4f:8f:62:01:8b:c4:3b:
                    b3:b3:5e:de:9f:b6:79:99:2c:cf:a2:9b:0c:8c:1a:
                    04:74:bc:84:bf:56:df:97:6e:7d:78:08:04:39:5c:
                    9b:47:4d:44:93:c8:53:24:91:c2:ad:cd:60:ef:97:
                    22:65:29:fc:c8:d5:91:07:f7:3a:dd:3a:92:c5:c0:
                    bc:60:a5:41:b2:56:88:d1:82:6a:ff:ea:61:1b:14:
                    62:20:32:c3:9d:df:0f:86:2e:74:90:f7:c0:f3:07:
                    b5:21:9e:1b:2c:d0:f6:eb:bd:99:0b:f1:a8:e4:5a:
                    bd:1c:ee:7d:2f:5e:7e:ba:62:db:4e:a7:2f:fa:05:
                    5e:3f:53:b9:dd:d3:13:d7:f3:63:e4:fa:cd:05:a0:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:6B:00:E7:DB:51:A3:B8:20:46:26:F6:E0:E2:6C:71:6D:0F:C5
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:bb:a9:c4:f3:0c:a9:58:82:eb:ac:59:4a:41:db:22:d5:
         51:0e:a9:ae:ab:54:1f:88:e8:c1:53:bf:28:e3:ec:5d:74:79:
         dd:70:97:b3:dc:7a:7e:9d:0d:31:8a:19:bd:51:89:11:82:90:
         5c:11:e8:df:d6:38:0f:8c:96:f7:da:a3:be:ba:6e:1d:4e:e8:
         a7:13:07:84:a4:17:e5:3b:61:2d:8f:d4:08:1a:90:ec:5f:8d:
         7d:70:45:e7:8c:e6:39:24:a6:fa:73:2c:6f:89:f4:b1:e5:28:
         c1:98:0c:8d:ca:2c:6e:44:98:66:20:7e:74:ee:fa:4d:4c:a1:
         f7:76:da:9c:4b:1b:a0:7e:68:8e:15:0d:7c:3d:34:83:a4:f4:
         af:4e:f2:c3:0b:f2:41:d3:e9:1d:4d:1c:f5:e6:ae:d9:71:07:
         72:41:93:d5:86:0f:ef:33:5c:21:86:ce:7b:e8:1e:92:3c:ae:
         e8:ae:72:4c:7a:3e:12:dd:8b:ec:67:51:94:c1:c1:95:11:6f:
         9e:b7:f4:26:ff:b5:4e:7b:65:df:39:4f:07:16:c4:04:38:08:
         36:b3:86:94:0a:22:83:99:af:37:b7:61:a1:5e:4b:57:50:8d:
         be:a9:64:07:3e:2c:88:bb:36:3f:9f:ea:41:48:d9:9c:70:12:
         19:5b:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:36 2026 by rpki-client