Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File:                     rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier:          EkAiBbA6AJ9FnzsNLfAsOAXHpQ5FZ+2tkfddFiKqd8A=
Subject key identifier:   61:9F:73:B8:DB:5B:79:D4:C6:A2:2E:D0:79:02:88:A5:73:56:F5:79
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer:       /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial:       019D33E43EC284D3C99CB62112842B2BD80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number:          01F9
Signing time:             Sat 28 Mar 2026 10:01:29 +0000
Manifest this update:     Sat 28 Mar 2026 10:01:29 +0000
Manifest next update:     Sun 29 Mar 2026 10:01:29 +0000
Files and hashes:         1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=)
                          2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=)
                          3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=)
                          4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=)
                          5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: Rm47/uRer2wxxaZpswnZFM2Al+MCooH/5b1aF33wdJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:e4:3e:c2:84:d3:c9:9c:b6:21:12:84:2b:2b:d8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
        Validity
            Not Before: Mar 28 10:01:29 2026 GMT
            Not After : Mar 29 10:01:29 2026 GMT
        Subject: CN=619f73b8db5b79d4c6a22ed0790288a57356f579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:64:c6:d2:c2:2f:28:78:c8:5b:91:5a:7c:
                    e4:d7:10:7a:35:8a:4d:02:25:57:a8:4e:9f:1d:17:
                    c2:e7:ff:c4:b8:fa:d4:37:cd:6b:59:f9:c3:25:c6:
                    7f:cf:c9:e5:38:fa:bb:1d:62:c1:36:70:c6:89:72:
                    a4:4f:9f:b1:79:e8:0d:ae:b1:f3:83:0c:bc:5e:38:
                    10:a3:42:cd:47:f8:79:c6:52:40:39:85:1c:e8:93:
                    20:3c:9c:fd:c2:14:f0:c0:b0:a7:a5:c9:8b:3b:21:
                    63:85:f8:26:8c:e3:c3:20:cd:6b:d7:b1:16:59:a1:
                    6c:65:f5:f2:af:fa:3b:ef:8e:0b:7a:74:6d:4d:f2:
                    2d:ae:5f:ff:64:0b:dc:36:26:24:d9:9f:86:45:6b:
                    1e:7e:9b:a2:a7:06:ca:63:a3:18:62:84:bd:e1:e9:
                    49:9c:f7:37:38:8f:61:39:01:05:9a:8d:6d:f1:b5:
                    49:3f:9b:56:2a:04:42:d1:a3:84:97:d9:08:f5:6b:
                    aa:61:32:0a:f4:93:31:6e:36:34:a1:b7:33:67:9f:
                    91:1e:46:c2:f5:20:ef:17:38:01:4e:7e:6f:01:61:
                    10:2d:9b:0a:97:8e:f6:e9:1c:27:41:4c:ba:3a:eb:
                    a9:28:9b:fe:d8:28:ef:c4:c5:82:9a:43:ab:d9:3f:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9F:73:B8:DB:5B:79:D4:C6:A2:2E:D0:79:02:88:A5:73:56:F5:79
            X509v3 Authority Key Identifier:
                keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:7e:a5:39:0e:4d:0e:f7:c6:85:74:c9:e9:bf:fd:23:64:
         85:a1:9b:f0:69:9f:9f:08:14:f1:98:9d:66:db:b8:9f:eb:da:
         83:53:be:88:23:0e:b2:c3:8a:53:d4:4c:0b:e5:e1:e4:46:3e:
         19:0c:2c:4d:78:09:fc:7b:ef:e2:fa:ee:d1:fc:13:64:ee:ec:
         26:52:7d:90:9e:74:81:ce:36:9c:f9:85:ae:32:f8:40:17:dc:
         ad:fb:a0:35:c2:0d:09:28:f9:e1:37:b1:1d:c5:2b:e4:9e:64:
         a7:62:99:6b:7d:13:38:f8:65:5b:93:58:ef:5a:98:74:1b:33:
         19:49:3d:e0:56:75:0c:89:92:40:57:a0:6d:b3:da:6f:6c:c6:
         d1:a2:3c:00:18:2d:ec:de:c7:32:9f:e7:1e:46:32:25:db:20:
         1d:f8:f1:ae:29:de:3c:c4:e1:f6:17:39:50:05:2b:27:28:bd:
         c5:fa:69:91:09:11:38:36:48:81:ff:bc:11:75:81:c9:ec:76:
         dd:54:8e:c3:89:05:6f:44:93:80:d7:54:b9:3b:74:1d:23:a5:
         40:87:ba:05:46:89:f8:ea:27:ec:08:a0:bf:d1:e4:98:6b:12:
         36:02:94:47:62:a5:03:de:22:ad:fc:43:9c:ea:52:15:d7:64:
         28:40:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:43:16 2026 by rpki-client