Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          p95FEHMm/vUvqg0qcY/wPHVTsYmWrrldgFL7iGSj8D8=
Subject key identifier:   BA:5E:55:B6:5F:B8:B4:6C:A7:F3:A7:C2:90:5E:67:B8:6B:FE:A3:EE
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019CAAC6BE8269C7B2ED9A2C73F35E80095A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          02A6
Signing time:             Sun 01 Mar 2026 19:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:17 +0000
Files and hashes:         1: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
                          2: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
                          3: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
                          4: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
                          5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: +O1mxmFIMtr3K9dBRTg5XWLDrFVbQFSxpr6viu5Ocsk=)
                          6: njp42lmk79PcnKdSKL7dBNAF-pA.roa (hash: fNgEvWqAsrEHm2QEX+Q7tOEmushfbaHX+HahMzZ89W4=)
                          7: ty6QDaVODiYQLRspH3UycajMk0A.roa (hash: FtWFx0VsvTm7b4c9sjAieCXjIjfYkBipIpfvr2217ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:be:82:69:c7:b2:ed:9a:2c:73:f3:5e:80:09:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Mar  1 19:01:17 2026 GMT
            Not After : Mar  2 19:01:17 2026 GMT
        Subject: CN=ba5e55b65fb8b46ca7f3a7c2905e67b86bfea3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:c1:c8:32:cf:ee:2f:a5:56:bd:8a:fe:bc:
                    ca:9a:1c:24:54:3f:51:9d:c0:99:2b:29:78:35:cc:
                    49:ac:64:0c:62:a5:c3:9d:e7:71:e3:bf:da:90:39:
                    d9:d8:c6:5d:bb:c5:04:f0:c4:14:9e:b9:70:88:f5:
                    e0:df:80:dc:89:54:d5:dc:fe:6d:b4:52:22:73:a1:
                    54:11:53:0d:78:f6:d9:8c:6b:3c:61:8e:f2:45:07:
                    59:ac:e4:ab:73:bd:6a:8e:ba:d5:d5:e4:c9:27:26:
                    51:e9:fc:fa:47:cf:03:5e:bc:c3:ed:df:9d:67:84:
                    a8:b9:41:43:12:83:f5:65:9a:bd:1e:f1:b7:64:e6:
                    58:3c:a8:1f:ec:6b:8e:24:b3:6c:d9:f4:76:5a:73:
                    43:0d:4f:e7:0a:07:03:02:26:bd:4a:bd:36:4c:43:
                    cb:79:db:13:da:2f:9e:32:1b:17:8a:fc:7f:0a:c3:
                    3c:88:60:85:7b:92:0b:21:ee:bb:c5:94:a7:9d:36:
                    09:81:1e:51:7b:0f:5b:ff:ef:ec:96:5b:8f:cf:26:
                    ba:60:4c:3f:93:59:21:b3:ae:06:b0:2b:87:e9:e4:
                    dd:a2:ff:92:d6:96:ab:65:af:9b:0d:b7:b8:01:42:
                    36:9d:18:c3:05:18:ee:25:88:a0:c7:76:0f:58:c6:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:55:B6:5F:B8:B4:6C:A7:F3:A7:C2:90:5E:67:B8:6B:FE:A3:EE
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:62:b6:02:95:c3:56:df:28:43:c4:3a:9f:8a:85:24:e4:41:
         9c:a4:9d:f3:72:a5:a3:47:69:62:97:b5:69:20:e2:1e:8a:a2:
         60:3e:12:bf:98:16:af:4d:89:e9:19:de:f8:ef:4a:70:2d:25:
         71:59:0c:72:0b:9c:54:b8:8d:99:11:de:ec:ba:a6:52:52:e6:
         83:9f:d0:77:3f:6e:57:a0:dd:42:70:48:4a:d0:02:4a:1d:3e:
         7a:05:52:16:f7:a0:f3:25:a6:20:a2:bf:60:d9:d9:1f:00:05:
         5a:14:ad:c6:f4:5c:08:fd:d4:7d:fe:34:b2:ca:23:c8:f7:35:
         81:43:cb:06:ef:d9:4d:1c:37:14:78:5b:81:eb:64:de:bc:a7:
         7f:15:30:36:db:32:b8:9a:ec:a8:2a:09:38:c8:4d:50:57:1f:
         01:c2:02:eb:6f:f8:56:5d:b8:c9:9f:0a:ff:9f:f8:9c:3d:67:
         d8:70:c3:45:e1:37:07:e1:89:8e:b8:73:35:63:76:96:eb:61:
         f6:4d:7f:70:c7:c9:d0:60:69:eb:13:ff:b3:13:ee:10:ee:1e:
         33:ae:b4:07:35:56:c6:a7:98:b2:89:bb:41:f9:43:41:05:5e:
         1c:ac:35:26:a0:dd:f3:f5:bf:82:2a:8f:93:8f:70:04:a0:52:
         05:90:05:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxr6Cacey7Zosc/NegAlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw
OTg1ZjEwHhcNMjYwMzAxMTkwMTE3WhcNMjYwMzAyMTkwMTE3WjAzMTEwLwYDVQQD
EyhiYTVlNTViNjVmYjhiNDZjYTdmM2E3YzI5MDVlNjdiODZiZmVhM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwrByDLP7i+lVr2K/rzKmhwkVD9R
ncCZKyl4NcxJrGQMYqXDnedx47/akDnZ2MZdu8UE8MQUnrlwiPXg34DciVTV3P5t
tFIic6FUEVMNePbZjGs8YY7yRQdZrOSrc71qjrrV1eTJJyZR6fz6R88DXrzD7d+d
Z4SouUFDEoP1ZZq9HvG3ZOZYPKgf7GuOJLNs2fR2WnNDDU/nCgcDAia9Sr02TEPL
edsT2i+eMhsXivx/CsM8iGCFe5ILIe67xZSnnTYJgR5Rew9b/+/slluPzya6YEw/
k1khs64GsCuH6eTdov+S1parZa+bDbe4AUI2nRjDBRjuJYigx3YPWMbjQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpeVbZfuLRsp/OnwpBeZ7hr/qPuMB8GA1UdIwQY
MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt
NDk0NzEzYTk5NjNhLzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh
LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmK2ApXD
Vt8oQ8Q6n4qFJORBnKSd83Klo0dpYpe1aSDiHoqiYD4Sv5gWr02J6Rne+O9KcC0l
cVkMcgucVLiNmRHe7LqmUlLmg5/Qdz9uV6DdQnBIStACSh0+egVSFveg8yWmIKK/
YNnZHwAFWhStxvRcCP3Uff40ssojyPc1gUPLBu/ZTRw3FHhbgetk3rynfxUwNtsy
uJrsqCoJOMhNUFcfAcIC62/4Vl24yZ8K/5/4nD1n2HDDReE3B+GJjrhzNWN2luth
9k1/cMfJ0GBp6xP/sxPuEO4eM660BzVWxqeYsom7QflDQQVeHKw1JqDd8/W/giqP
k49wBKBSBZAF5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:21 2026 by rpki-client