Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          ModhRl3ZbkjPw2NwQ7ozAO3rJjlp0/xCaQ8sKARMpmY=
Subject key identifier:   F8:F5:C0:92:C7:1F:2B:87:83:4E:28:46:5D:26:D3:06:55:BB:9D:E4
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       019CAAC6730B2F099509502F47AFF539D174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 19:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:58 +0000
Files and hashes:         1: TrY6aUvOznEWPgwFCDr7RM2O3ms.roa (hash: DDvKuMgIkfq65IcNVG0b6/9Oq5NsQ98eHZFJJ6S6qiM=)
                          2: YddULzzqlHaijBKc45wV-2A9NRg.roa (hash: DJJK0mLKzBAwLMCbEIMtOEBhlQs/ecomUOMz09kFmzw=)
                          3: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: hq4ho+G165w/qQGhpQZfgFhQuj/6qYhyJgfHWi2+lU4=)
                          4: g4nCWXK_03YbprQHpph4RAU5af4.roa (hash: bja30FhVlRyFoYSsgn4yCXyL+dT+/OEpibcb3uOS2oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:73:0b:2f:09:95:09:50:2f:47:af:f5:39:d1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Mar  1 19:00:58 2026 GMT
            Not After : Mar  2 19:00:58 2026 GMT
        Subject: CN=f8f5c092c71f2b87834e28465d26d30655bb9de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:1b:23:33:65:ba:af:6e:8b:85:d7:9e:ed:
                    5a:a0:75:d4:8b:74:cc:25:69:52:0a:a1:58:01:bc:
                    66:ba:07:ae:7a:50:ce:30:27:73:23:fa:1a:0c:e2:
                    46:3e:36:10:09:ad:59:c7:44:df:71:5e:5c:df:89:
                    26:72:4c:e2:0d:f1:58:f5:61:df:83:a1:e9:4b:d7:
                    0a:f7:b5:ff:fd:58:8f:43:7d:6b:ad:59:a6:60:76:
                    f0:66:32:02:42:29:34:62:77:9e:92:f0:79:fd:ae:
                    8a:69:8a:15:bf:01:c6:95:b9:df:83:f1:62:a7:aa:
                    e8:d0:f4:6c:aa:67:ff:92:94:e0:db:b3:70:3a:5b:
                    98:85:f3:0f:8b:f1:15:a5:b1:6c:77:93:5e:74:e3:
                    cd:3e:92:5e:7b:a5:4f:98:71:95:53:29:64:35:8d:
                    8f:92:4c:0d:b7:3a:95:ea:4c:e0:17:f3:7e:e2:55:
                    e2:f6:13:6f:f9:31:bf:67:b6:b1:38:b6:d8:77:f1:
                    52:54:66:8f:23:6c:d8:b9:2f:29:7c:8f:49:77:e3:
                    06:48:cd:9a:e9:d5:cf:4e:7d:22:5a:84:57:30:74:
                    4e:8c:19:69:3f:4a:b8:98:fe:95:ce:d6:c4:d5:4a:
                    ea:3b:93:c4:7f:40:ac:19:f4:26:4a:41:4b:a4:fe:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:C0:92:C7:1F:2B:87:83:4E:28:46:5D:26:D3:06:55:BB:9D:E4
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:cc:c9:6a:c9:2c:77:b1:0c:67:6f:b7:06:cc:a5:55:f8:
         80:e3:48:86:e8:81:af:63:54:7c:69:aa:6f:52:48:a7:c6:55:
         8b:48:1b:b4:a5:2e:40:3c:65:17:51:c0:d2:1e:a9:bf:c4:a7:
         77:ae:5c:df:e2:78:86:af:53:cb:0f:3b:01:6d:14:21:33:b3:
         09:08:21:19:a1:8f:f0:68:df:7e:a1:88:7a:e6:25:14:5c:32:
         bb:28:e6:84:7a:60:28:90:d9:6a:4f:a9:71:51:1e:6b:e9:a9:
         0b:d5:bb:b5:7c:01:33:f0:02:86:3b:08:f0:8f:f9:17:22:ff:
         1c:dd:66:89:75:be:ce:77:cc:66:1a:be:f9:6c:4a:64:6b:93:
         cc:9e:6a:21:2d:0a:66:4c:c0:de:bb:20:6c:95:0f:af:b3:95:
         46:d5:37:28:a3:ee:c4:9a:2a:dc:86:32:05:d2:0f:f0:a4:61:
         d6:74:34:40:d9:22:55:34:6d:b2:70:06:82:92:5e:e9:7a:eb:
         19:20:c2:83:3c:52:d2:4a:53:47:84:77:96:45:18:e7:8c:32:
         e4:10:c9:6f:b9:af:3b:0f:93:df:a6:1a:b6:65:aa:a2:bf:cf:
         be:80:16:ce:8f:5d:b4:4a:67:6d:ca:05:8f:9c:90:26:08:8a:
         31:a0:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:54 2026 by rpki-client