Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
File:                     B1n2rBc_de2eWF7H2HKlhlzvKDU.mft (raw, json)
Hash identifier:          /BaCHaDPU1GI4mFS8YSRSm6i3J2WZAT3m8IYavnIdh4=
Subject key identifier:   D0:E0:21:AA:22:6C:9D:E0:27:AD:45:CE:61:00:EF:9F:C4:A8:AE:11
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Certificate issuer:       /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial:       019CE3D9FD46330311DC3B42CEB248ACD4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
Manifest number:          1870
Signing time:             Thu 12 Mar 2026 21:00:39 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:39 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:39 +0000
Files and hashes:         1: 7sslS3RUIuhf5Zaqe2lYWrmi-zg.roa (hash: vaQFknxSj3T9Lsw68a9dNOcrY1wtAS0N77E0Dy/WJXw=)
                          2: Ah16mLLdh0qTIWTu4DElnGt6Rf0.roa (hash: +2AS4JmYTZXXzzonBU9RhWYzUC8DPPlap0ns3j4LJZ8=)
                          3: B1n2rBc_de2eWF7H2HKlhlzvKDU.crl (hash: Mcg3Yf9c8Z1bpxoQTQKnA8xZAqyJnWjGdKSRgd4d0xs=)
                          4: TP2YSwqVyfqUIy4MvNgVm92X3cE.roa (hash: ZjMe7Najk1MfjHandVTL1SRsCu1fPTQIQjdH4Ut4rpM=)
                          5: bgwAATh9CUO7xiOucQ6npGFxHx8.roa (hash: T9bimoTkLBlvWZuKy6AOXF/8PICrLV1Er8M52jbgMpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:fd:46:33:03:11:dc:3b:42:ce:b2:48:ac:d4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
        Validity
            Not Before: Mar 12 21:00:39 2026 GMT
            Not After : Mar 13 21:00:39 2026 GMT
        Subject: CN=d0e021aa226c9de027ad45ce6100ef9fc4a8ae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:a6:63:4d:ec:f3:63:58:dc:ca:dc:b0:01:
                    5a:34:f1:b4:09:ab:4f:08:b9:2c:dc:4d:9c:af:68:
                    06:10:ca:6c:ba:67:24:19:cc:1d:9e:8f:65:08:6d:
                    5a:61:93:0d:b3:47:6e:af:19:15:b6:34:41:ef:8f:
                    30:e8:25:bf:9e:2f:c2:0a:3e:be:26:99:49:75:d0:
                    fa:a2:88:dd:a0:7e:f1:e3:3a:36:c7:6e:55:2f:7c:
                    0b:10:e2:c9:d8:8c:3f:f8:5a:23:57:c4:00:c3:27:
                    de:4d:ac:1f:ef:7c:52:a9:96:60:8b:82:b0:6b:48:
                    3e:18:af:63:c5:fc:b1:5d:7d:ad:da:15:4c:b5:13:
                    db:51:96:82:7c:8e:dc:da:b0:fe:ca:3f:9a:3a:9c:
                    bc:c4:06:81:a5:3e:f8:83:cb:27:7a:ee:71:fe:fd:
                    e0:63:87:45:9c:6d:7c:af:78:c8:94:69:14:f3:b7:
                    88:b3:20:70:e5:b4:42:fc:10:7c:e2:9f:4e:56:3d:
                    8b:df:66:95:8b:fb:cb:26:0e:86:e7:da:dc:23:d8:
                    40:82:a3:86:60:42:d3:76:b5:c2:c0:40:ad:82:be:
                    3d:72:f6:e4:b6:f1:fb:b0:d8:fc:bc:ff:ed:7f:2f:
                    ba:65:84:06:47:a0:59:d8:e4:82:25:c7:52:e2:bc:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E0:21:AA:22:6C:9D:E0:27:AD:45:CE:61:00:EF:9F:C4:A8:AE:11
            X509v3 Authority Key Identifier:
                keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:94:91:27:71:be:58:7f:5d:ca:72:36:b8:81:20:9d:8a:ed:
         fd:49:60:e0:c9:a3:70:db:98:a0:2f:5b:1c:99:9b:a1:d8:f9:
         ed:78:15:a3:98:b5:b9:45:c2:16:04:f4:2e:be:af:70:cc:58:
         d1:cb:c9:35:b4:88:2b:da:3a:69:68:29:a6:be:d5:9c:ec:c8:
         b6:97:28:b0:8e:bf:70:2f:a7:e0:0c:6e:24:40:23:39:fe:d0:
         90:be:c6:f0:c9:89:d1:fd:e6:1d:f0:b0:38:16:97:e3:ce:56:
         79:5d:a5:44:b1:a2:43:1a:0d:1a:63:56:02:21:c5:aa:8d:a6:
         a7:f5:f1:21:87:32:c5:b8:4b:dc:1e:06:61:78:b6:b0:93:5e:
         66:f6:e4:fc:eb:a0:a8:9e:7f:5c:d3:09:de:f5:db:39:e1:ce:
         fe:87:dc:b3:0d:04:7a:d9:a9:21:84:f4:97:0f:df:02:c2:c7:
         05:f4:ec:8b:41:5e:1a:07:6f:38:c1:44:19:eb:8c:a7:ec:83:
         ce:c2:cb:c2:4f:1c:f1:2d:3b:6f:b1:16:25:c1:27:8d:c7:31:
         23:8d:ba:b9:55:bd:3a:cb:6a:76:87:76:c9:70:06:21:25:69:
         34:8e:d2:26:ec:e3:89:cc:e6:b3:a7:91:31:e3:77:a2:c1:eb:
         de:97:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:38:47 2026 by rpki-client