Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File:                     lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier:          wxAe3/j3hM02GARnaFT4un/NdWhQzFhf0sYIUMB6WPw=
Subject key identifier:   4D:E7:40:20:A3:DB:2A:A8:96:9F:69:A7:AC:71:92:D5:98:35:C2:5D
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer:       /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial:       019CCAF5EA418EB72124C287A35BF9311E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number:          0374
Signing time:             Sun 08 Mar 2026 01:00:39 +0000
Manifest this update:     Sun 08 Mar 2026 01:00:39 +0000
Manifest next update:     Mon 09 Mar 2026 01:00:39 +0000
Files and hashes:         1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
                          2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
                          3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
                          4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: x4xvuCCI3/okHbiGrdgDz1R9+yLBMbBWvM5ehV+d/v4=)
                          5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:f5:ea:41:8e:b7:21:24:c2:87:a3:5b:f9:31:1e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
        Validity
            Not Before: Mar  8 01:00:39 2026 GMT
            Not After : Mar  9 01:00:39 2026 GMT
        Subject: CN=4de74020a3db2aa8969f69a7ac7192d59835c25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:c7:9e:29:7b:e6:78:ae:4a:81:e6:ce:31:
                    a9:ef:5e:89:51:f0:53:82:2c:33:47:db:ee:3b:52:
                    bd:8a:66:64:e7:4f:a9:d4:13:93:b8:59:ae:16:10:
                    62:1b:de:39:3b:13:50:d5:0f:ad:19:44:6e:94:c4:
                    9e:dd:8a:e2:bd:3b:00:44:bd:f4:4f:cc:61:6d:6f:
                    16:78:c8:b8:d0:0c:31:da:0d:f9:16:0f:0e:9a:95:
                    8d:be:e9:5d:c6:a1:cd:25:fe:a5:0a:b3:d3:6c:ca:
                    3e:d4:3c:32:50:ef:1e:4d:bd:91:09:36:35:12:fc:
                    4b:8a:e3:bb:94:35:24:df:a2:c1:26:73:55:b8:c6:
                    ba:6d:ad:fc:4a:1d:70:91:9e:26:63:6f:09:81:a1:
                    78:c6:79:dd:70:39:a4:55:11:bf:8d:1a:39:39:50:
                    c2:2a:3d:4c:a9:2f:f6:95:1d:02:2c:c9:d5:89:8f:
                    f1:0a:61:92:c3:34:14:cd:8f:e9:ab:15:3f:b1:f6:
                    25:4f:c4:24:0a:8d:4c:96:88:76:00:3f:18:db:a2:
                    4d:2d:64:26:25:da:26:d2:0f:d6:f4:42:86:6c:6a:
                    f6:da:54:4f:d0:2b:20:f9:b1:67:eb:54:90:95:37:
                    1e:ac:fa:be:85:4a:c6:07:ef:d9:6e:38:47:c2:f9:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E7:40:20:A3:DB:2A:A8:96:9F:69:A7:AC:71:92:D5:98:35:C2:5D
            X509v3 Authority Key Identifier:
                keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:1f:87:e3:b9:fb:fa:26:12:48:66:05:cb:d9:15:f2:5c:
         5e:5e:8e:d7:5b:9a:7d:b8:af:8c:4e:26:cc:6b:1b:2b:65:f9:
         2b:7b:86:d4:f1:bf:5b:08:66:a4:63:10:03:07:04:37:12:26:
         f4:0a:d8:2b:00:72:f7:be:f0:7f:06:00:8f:b1:f3:bb:7f:00:
         86:f4:17:c6:a5:26:2c:87:ca:11:84:e1:75:0b:f7:84:f2:bf:
         b2:ca:12:2a:ec:39:8b:0f:e9:ed:b6:fe:73:b8:4d:f1:70:63:
         d6:54:16:a2:e5:b7:f2:1a:15:52:20:49:c5:f3:9d:36:7f:cd:
         bd:48:f1:83:36:ff:60:a6:30:09:eb:c1:37:a2:f5:40:8c:e5:
         f7:81:a9:cf:9d:88:5c:64:52:a0:ec:dd:68:14:fb:46:06:cf:
         08:95:20:5b:3a:54:04:36:13:14:70:56:ee:eb:a4:30:2c:69:
         29:04:c2:f3:73:93:85:1c:2a:b7:72:3d:17:c7:92:e4:bc:f2:
         41:56:04:5d:f1:f8:4f:28:62:bf:92:eb:a4:1a:31:02:a9:30:
         ae:27:bd:9b:c6:97:04:17:9f:12:38:21:8f:e4:46:4b:69:8f:
         8a:cf:d5:22:a2:98:97:23:6b:c8:e7:03:67:9c:19:f3:3d:07:
         93:da:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 05:00:39 2026 by rpki-client