Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File:                     5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier:          nnni5Ed8OUSrvdmc0VVJUuKm1YnCH6zlZJpvUQHv1O0=
Subject key identifier:   40:B2:EF:8F:87:77:FF:DD:46:A4:13:B3:C0:FA:1E:E1:5A:FD:7E:76
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer:       /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial:       019CE85C2CF8ABFFA8EA9D92FCEA7817475A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number:          0316
Signing time:             Fri 13 Mar 2026 18:01:20 +0000
Manifest this update:     Fri 13 Mar 2026 18:01:20 +0000
Manifest next update:     Sat 14 Mar 2026 18:01:20 +0000
Files and hashes:         1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: SSUJXnZj3U+IVPv9XVDp4aMva5EYS2jT7SUu0JSYGQI=)
                          2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e8:5c:2c:f8:ab:ff:a8:ea:9d:92:fc:ea:78:17:47:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
        Validity
            Not Before: Mar 13 18:01:20 2026 GMT
            Not After : Mar 14 18:01:20 2026 GMT
        Subject: CN=40b2ef8f8777ffdd46a413b3c0fa1ee15afd7e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:0b:49:6c:29:a1:b3:7e:ef:7f:73:cc:5d:
                    30:d5:65:8c:a7:8e:1b:bd:61:32:be:d6:51:96:b8:
                    0e:a7:67:6b:08:04:c3:c0:6d:cb:13:bd:f5:8c:eb:
                    af:99:fb:c9:c9:17:c2:26:79:c3:de:86:c9:95:de:
                    e8:30:9a:90:d3:aa:80:58:76:b3:0f:13:b1:14:ae:
                    82:c4:13:3d:48:22:de:b3:14:e5:80:1f:7c:a0:ca:
                    26:93:88:e1:e2:fb:ea:89:95:8e:10:60:6e:48:88:
                    a2:01:30:b3:71:68:f2:51:bc:d1:e2:ac:a1:b0:62:
                    34:37:2c:1b:bf:55:e7:77:61:84:9c:9a:5b:5d:62:
                    0e:5f:01:61:05:1e:3d:24:b7:7c:4d:a9:8f:56:dc:
                    03:73:27:af:35:09:18:85:18:59:59:41:99:64:08:
                    34:c5:50:eb:9a:21:2f:0a:1c:82:db:66:bd:16:60:
                    1b:35:ae:c7:4e:89:53:18:3e:22:77:0a:58:53:e5:
                    b4:cf:9e:a3:c4:9d:35:af:15:cb:ea:3a:7a:88:07:
                    14:d7:20:8a:77:81:ec:99:be:4c:40:e5:ac:65:c7:
                    0c:a0:bb:ab:4a:4d:5b:06:37:07:cb:b1:3f:40:f8:
                    6d:56:e9:b9:78:c2:9b:6d:50:4f:ec:96:fb:5e:e7:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:EF:8F:87:77:FF:DD:46:A4:13:B3:C0:FA:1E:E1:5A:FD:7E:76
            X509v3 Authority Key Identifier:
                keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:0a:7c:13:51:ae:ff:8a:ed:40:a7:af:61:38:ad:d9:7c:a6:
         5f:5c:f0:22:7f:71:db:51:bf:a2:c4:a1:cf:1e:30:ef:33:32:
         25:2b:ea:da:1e:74:a7:7c:ca:4d:d1:fc:2e:d3:c9:3e:4c:1e:
         15:59:fc:62:eb:16:06:74:76:bf:cd:26:d5:0c:37:3c:0d:c9:
         41:71:62:7f:2d:1d:75:88:49:f0:a5:a4:9b:e2:61:db:d8:e2:
         c6:4d:d1:a3:38:65:f3:e6:13:60:37:e6:92:e6:28:d3:53:b3:
         68:44:00:4b:2b:b3:3e:5d:04:ff:13:ef:5c:68:59:da:01:92:
         aa:43:db:1f:9b:2a:21:a6:e3:5e:f0:df:32:1e:f5:6d:ca:8b:
         7b:7f:5d:ed:14:dd:62:c2:e3:b4:d9:ef:09:b4:d1:f6:9e:51:
         20:48:43:a2:98:16:b8:54:81:8b:68:62:b3:49:4b:64:04:ab:
         db:8b:6e:5c:8b:31:93:27:39:32:e3:bd:54:7c:b7:56:0d:1b:
         fa:a4:0b:8e:5f:01:c9:a3:db:bc:6b:50:78:59:05:09:c2:be:
         16:3b:2f:8d:30:6f:e8:25:1f:e5:c7:98:38:f8:61:af:32:58:
         8a:68:a8:24:a6:26:0d:56:17:58:82:cb:82:2f:12:56:8f:4c:
         6c:a0:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:08:54 2026 by rpki-client