Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          Q0sy/CU/i1o+yjwnnfZS05Zxy2bIC5Ot+JEHKyRcnYM=
Subject key identifier:   2D:3D:2E:A3:B3:AF:32:A9:AA:8F:68:85:12:81:F0:9A:E5:0C:DC:30
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       019CAD5973E5E8CF066D1D1E95CC6D8AEB72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 07:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:46 +0000
Files and hashes:         1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
                          2: F09300GwdMIta1lj7Ul3pmpo6e8.roa (hash: ajcgZbaCsRlZup9MjYbC/n7SyiZtpZ4+r47ylzeWUgk=)
                          3: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
                          4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: 4AlQfqAr+FJ2GTXjDFPoDROOb+oVpA8RZ6LZC/SpWeQ=)
                          6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:73:e5:e8:cf:06:6d:1d:1e:95:cc:6d:8a:eb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Mar  2 07:00:46 2026 GMT
            Not After : Mar  3 07:00:46 2026 GMT
        Subject: CN=2d3d2ea3b3af32a9aa8f68851281f09ae50cdc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:09:30:f2:9c:77:04:a4:85:ea:82:a3:7a:
                    fd:28:d6:fa:3d:f9:3c:7c:35:4f:10:60:d0:bf:54:
                    65:a4:e0:b6:8d:25:2b:86:8c:60:b1:16:44:e6:75:
                    0c:fe:27:bc:52:cf:bd:e6:1e:91:1f:d5:82:8e:9d:
                    57:91:c6:3a:0c:71:99:ef:f2:16:63:3c:12:37:28:
                    fc:bd:4c:b0:6d:9c:b2:36:84:1d:8e:82:c5:c3:16:
                    03:20:17:5c:80:48:b5:73:5c:02:55:e8:7b:37:87:
                    b4:dc:9b:75:e8:29:dc:8f:d9:a4:d6:5f:1d:69:05:
                    5d:58:61:f6:d9:fc:50:d6:6e:fb:c3:44:9e:da:4e:
                    ef:f0:e7:8b:ad:6f:36:db:73:cc:40:6a:5d:1e:2b:
                    d3:4e:02:b0:78:11:03:83:0f:b3:0e:36:d8:54:a2:
                    7b:cd:d4:6f:94:24:de:0e:a7:12:f3:05:07:33:83:
                    e9:14:11:0c:52:eb:8e:05:86:ed:79:ac:68:20:d5:
                    58:98:48:ba:b5:c8:05:4a:5d:b4:c8:e3:6f:90:14:
                    17:77:a3:84:84:45:57:25:c0:47:16:27:7b:b2:0a:
                    d1:f9:8f:c6:54:77:4b:9a:8e:52:b6:66:e1:1a:ea:
                    18:da:9c:2d:76:35:cb:6f:74:43:1e:94:11:ee:d8:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:2E:A3:B3:AF:32:A9:AA:8F:68:85:12:81:F0:9A:E5:0C:DC:30
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ca:2f:a8:e3:eb:7a:69:57:cc:b0:6e:0e:3b:63:00:dc:48:
         f6:2b:be:1c:3b:07:fa:42:9d:29:5a:f1:eb:d3:29:37:b0:b0:
         c3:e2:36:be:e4:80:7a:f1:d6:69:72:7a:fd:71:08:6a:bc:5f:
         31:9b:95:5e:7a:e3:40:0d:ed:02:84:0c:3d:6f:ab:ca:c3:06:
         5f:2b:0f:1f:49:28:6f:09:4c:bd:06:70:cc:a7:46:7e:b9:29:
         c3:2a:87:52:d1:ca:2f:ac:2d:b3:6f:15:e1:42:e9:7f:47:7e:
         5b:1a:52:dc:ee:05:31:d9:23:3d:3f:e1:d6:15:78:54:a8:cc:
         bf:32:a2:b2:1c:0a:72:4a:fb:a4:d1:a2:f1:c0:98:71:65:eb:
         d7:c0:b4:de:f7:aa:2c:d6:82:7c:c6:42:20:01:35:e3:6a:5f:
         c0:e1:56:e7:a3:5e:f0:e4:ff:71:df:0f:01:eb:15:4d:c4:01:
         3c:4d:4c:81:41:17:51:48:9c:38:5a:e7:74:fc:99:ee:b7:45:
         d2:a0:9a:2b:62:77:0a:5e:e9:8d:14:ad:bd:67:5d:dc:f2:a9:
         31:ec:45:4d:ed:0b:a0:91:0f:0e:0d:cd:12:61:f7:86:db:1b:
         68:cf:9d:a2:8a:69:b7:85:67:c8:2f:2e:79:e1:a9:09:50:aa:
         53:dd:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:33 2026 by rpki-client