Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File:                     A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier:          Wrbc26c6NFfssLzxSt5ycnxKwYRfoG5YX/deebP4O8M=
Subject key identifier:   91:F5:B4:14:A4:39:A0:4D:7B:C1:17:21:9F:98:DC:C9:DE:EA:7E:76
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer:       /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial:       019CBEF20DB94AB87E87183137BAA13D7EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number:          0610
Signing time:             Thu 05 Mar 2026 17:01:00 +0000
Manifest this update:     Thu 05 Mar 2026 17:01:00 +0000
Manifest next update:     Fri 06 Mar 2026 17:01:00 +0000
Files and hashes:         1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
                          2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: U4aOSESE65MNa7FH1XjPUApSN244cLzO2S2e9qccvI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 17:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:f2:0d:b9:4a:b8:7e:87:18:31:37:ba:a1:3d:7e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
        Validity
            Not Before: Mar  5 17:01:00 2026 GMT
            Not After : Mar  6 17:01:00 2026 GMT
        Subject: CN=91f5b414a439a04d7bc117219f98dcc9deea7e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:d2:78:a3:74:38:ae:e6:08:23:b9:3b:5b:
                    3f:42:3f:72:c4:ce:49:09:90:52:68:0f:03:95:02:
                    29:6c:1c:67:b4:16:a1:d4:bf:22:fc:89:4a:eb:5f:
                    a9:fb:5a:e8:44:2b:fd:09:7c:6a:75:c7:67:7d:0c:
                    d4:a4:03:12:79:98:08:77:8a:ac:47:ad:fa:07:2e:
                    a6:2a:04:75:dd:3e:51:a6:d4:31:c7:18:04:b2:5e:
                    ab:a8:4a:89:00:a8:3c:e6:79:e5:6b:37:49:70:45:
                    28:f2:96:c1:98:49:5b:51:5e:ce:80:25:44:43:a7:
                    d5:03:4a:2d:46:64:4d:27:74:f9:ec:21:85:5c:1a:
                    97:e8:25:74:06:70:03:4e:89:a5:48:c9:42:9c:4b:
                    e7:eb:47:16:75:59:07:cc:81:6a:66:8b:af:ee:1f:
                    7a:a3:6c:30:36:5f:f5:56:5b:43:c1:24:6b:fb:f4:
                    35:3a:d1:51:c1:41:14:0e:e1:fd:f7:74:bc:92:58:
                    c7:8e:ac:47:79:18:71:3f:24:eb:62:99:b0:76:cd:
                    df:5c:58:83:1e:83:2a:42:61:ae:72:c8:d1:c1:6d:
                    91:cf:61:b3:03:cd:27:f5:73:c0:2b:fe:ca:e0:8a:
                    46:d7:51:94:27:00:9e:42:a4:6d:12:bc:81:b6:aa:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:B4:14:A4:39:A0:4D:7B:C1:17:21:9F:98:DC:C9:DE:EA:7E:76
            X509v3 Authority Key Identifier:
                keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:ac:63:4d:19:d8:29:dd:47:74:74:94:d0:4d:d4:f0:d7:
         38:18:e2:61:df:27:db:42:a1:c5:fd:09:e4:f1:35:d2:46:6c:
         d6:73:5b:33:0a:c0:3a:f0:dd:e3:ea:71:88:a0:e7:0d:e1:ae:
         c3:bd:b1:3e:2f:0f:92:ba:7b:18:ea:10:8b:ac:c1:55:aa:18:
         72:d6:c2:96:a7:68:f4:c6:52:6c:90:09:7b:38:39:83:91:54:
         31:20:76:5d:ff:d2:b0:57:d7:e1:2d:74:f0:8f:3b:b9:8c:5d:
         10:f5:42:31:45:fe:36:06:6f:e4:c8:2e:82:b4:7f:46:ff:b1:
         ac:32:9f:07:37:6d:ba:a8:a7:52:72:18:df:93:9f:36:1e:0c:
         80:35:b2:2b:0d:47:7c:23:b5:30:23:a6:00:23:f1:38:22:d2:
         cb:c1:6f:2c:4a:5b:23:83:d8:38:3d:f4:8d:e9:5b:9c:ca:e8:
         6c:f7:31:c8:12:2c:9f:6f:e5:31:20:82:7c:93:d2:ff:92:e1:
         ff:ac:8d:60:fd:7e:11:2f:eb:e1:11:ce:df:c2:1c:b8:19:de:
         66:cc:de:51:7c:98:78:f5:d9:1b:a9:6d:38:75:93:20:42:e6:
         8f:f5:0f:68:c4:a5:52:c4:22:c6:f7:35:34:d4:53:16:5f:47:
         e6:c5:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:38:53 2026 by rpki-client