Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File:                     Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier:          lx7eo1AeEAbvInNUNExulvDdtugI4dWUEb1X0e1fryQ=
Subject key identifier:   C0:E2:EA:25:73:5A:EF:F0:6B:39:06:C5:07:09:93:8A:D8:AD:7E:10
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer:       /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial:       019CC44F8B5513FC0746E543BC6D787055A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number:          1856
Signing time:             Fri 06 Mar 2026 18:01:13 +0000
Manifest this update:     Fri 06 Mar 2026 18:01:13 +0000
Manifest next update:     Sat 07 Mar 2026 18:01:13 +0000
Files and hashes:         1: 2UPTAgiJvUFj9KxwMHk_neJV1Ts.roa (hash: chaCLnBUf8VW3Cyy0U4Y2DmReJ/YoQuLRxfoEk9G/Zs=)
                          2: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (hash: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c=)
                          3: CIsoBMnJ1HH2_kjCOniPyHt_zdo.roa (hash: rIsVKuNDzl7s31Uqv2wlQw7E8fHntXl7uQadNq2LiGk=)
                          4: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (hash: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc=)
                          5: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: B75wk68rimnY9Z05CdTIHsNhb38db0VIsOmKkBJk0og=)
                          6: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (hash: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA=)
                          7: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (hash: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4=)
                          8: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (hash: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY=)
                          9: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (hash: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:4f:8b:55:13:fc:07:46:e5:43:bc:6d:78:70:55:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
        Validity
            Not Before: Mar  6 18:01:13 2026 GMT
            Not After : Mar  7 18:01:13 2026 GMT
        Subject: CN=c0e2ea25735aeff06b3906c50709938ad8ad7e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:49:ba:ba:13:08:ee:ad:4d:af:47:50:bb:
                    d4:ff:2d:e7:0f:49:f3:f7:bc:a1:50:ae:df:89:f8:
                    2c:fe:19:31:22:16:58:f9:02:7d:f0:4d:e7:0f:d1:
                    34:97:09:cc:ee:73:b4:5f:08:e6:0f:5a:47:16:d3:
                    a3:14:58:b9:c2:bb:70:bb:15:e8:36:ae:a5:c7:7b:
                    c6:c8:d9:8d:99:a4:3e:fd:f2:57:7e:5a:66:f4:cd:
                    ae:a7:9e:d4:78:82:46:3d:f7:68:27:3d:55:6a:c7:
                    e2:a2:f6:a8:dc:95:5c:25:de:2b:d6:ce:10:e3:58:
                    c4:5f:ee:5e:b6:18:7c:4d:bf:cf:f2:91:e3:2b:fa:
                    8a:94:d1:99:e6:ad:24:5f:ce:63:c6:87:82:90:56:
                    75:59:c4:8f:1f:e1:a1:af:3a:c9:e4:5e:ae:4a:07:
                    f2:bd:97:0d:cd:3a:a2:6a:9e:ec:5a:c2:cd:d5:7e:
                    ca:c0:25:d5:d7:62:fc:28:7d:43:00:da:fe:de:7a:
                    9b:92:7a:e0:e0:61:b6:ba:06:ba:37:90:ba:0a:d9:
                    4d:ec:33:42:6d:18:dd:58:89:09:04:53:a0:8a:83:
                    79:de:ed:a9:ef:d5:16:09:55:fd:58:41:30:de:09:
                    a6:b5:e9:2f:3f:2a:af:8a:ca:b9:a6:7e:cf:2c:cc:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:EA:25:73:5A:EF:F0:6B:39:06:C5:07:09:93:8A:D8:AD:7E:10
            X509v3 Authority Key Identifier:
                keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:4c:fe:ea:96:e5:bb:92:3b:36:10:49:81:a4:9f:70:c3:
         ce:7f:e5:12:66:a7:24:52:44:ec:5a:43:c1:1a:86:41:f9:72:
         d8:49:7f:3c:76:cc:18:b8:ea:85:27:d2:94:d7:d9:cb:90:ee:
         66:19:eb:d9:d2:71:8d:1b:b7:59:fd:1f:8b:35:ff:49:60:48:
         aa:74:fd:08:b0:69:a9:6b:b3:5b:5d:6d:a6:89:78:12:0e:ca:
         84:17:f4:df:d3:83:eb:78:38:c3:40:75:35:f0:6a:c4:47:d9:
         e2:f8:af:19:f7:6d:f1:a9:bf:cf:2d:5e:75:d3:3f:dc:88:f5:
         0d:3d:e9:a3:c6:8d:a4:e3:f2:f7:1c:9a:cb:49:63:c2:dd:ca:
         ef:de:f0:70:96:69:88:c9:24:ea:2d:c4:20:bf:2a:90:12:53:
         00:9b:2e:27:da:64:86:9c:27:81:87:2c:09:87:19:97:b7:c7:
         95:ce:34:5a:e0:44:6c:1c:2a:c6:0d:a2:e9:24:91:e2:79:38:
         54:47:fd:8c:b2:12:44:7f:22:bf:a9:cc:c8:b3:20:c4:ed:b5:
         e4:b8:f5:78:b1:d8:e1:29:a9:39:57:c6:47:a1:d2:1e:b1:1f:
         13:e5:f7:7f:66:da:17:d4:a4:c5:63:76:a9:6e:8d:08:d4:e0:
         71:7b:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:23:38 2026 by rpki-client