Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File:                     fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier:          udsMrIc0EOhBPZXUCufDgh8I8sgt+/d1qCy+uoWohF4=
Subject key identifier:   DB:2B:7E:25:61:2D:7A:84:A0:27:7C:4D:45:A4:81:C3:A7:97:BF:A2
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer:       /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial:       019CC93F191E698BFB328FC17AC877FEDA69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number:          1880
Signing time:             Sat 07 Mar 2026 17:01:21 +0000
Manifest this update:     Sat 07 Mar 2026 17:01:21 +0000
Manifest next update:     Sun 08 Mar 2026 17:01:21 +0000
Files and hashes:         1: c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa (hash: ezdtKJHH/isz/wjoYibJVODc5GKSAIgaQT3pgWHH64M=)
                          2: cA7qo8b7Nox5Eg3ETDI0GHB8bQo.roa (hash: hqs/XnPjGsbh3NQlfcv5MT/Lsf4omMXxdpDxcmlIJnY=)
                          3: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: 9ZYDgt3Bfi9+iKlUMHLi0Moe9+EwPItyHtcDDojMCDI=)
                          4: szVJW4BISgtYuolAiNZFY_y2rbI.roa (hash: eLZ4AaO5OF9gS2a9pYE4naluJAqNXcxUNGLK/HZPDBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:3f:19:1e:69:8b:fb:32:8f:c1:7a:c8:77:fe:da:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
        Validity
            Not Before: Mar  7 17:01:21 2026 GMT
            Not After : Mar  8 17:01:21 2026 GMT
        Subject: CN=db2b7e25612d7a84a0277c4d45a481c3a797bfa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:c3:59:fe:a8:fe:cf:40:57:c3:95:76:5f:
                    65:19:58:b4:99:f0:c0:52:e3:42:0c:d9:6b:df:69:
                    90:e1:67:73:96:c5:fa:62:48:82:ba:07:fb:84:eb:
                    84:97:46:4d:b2:c7:d8:50:61:94:94:d9:ef:c5:36:
                    ce:fc:ae:0b:de:6c:7c:81:63:50:e8:32:df:bc:29:
                    d7:d0:84:b6:5c:99:b6:70:e6:56:3a:b3:70:58:8d:
                    51:08:9f:ac:e8:a1:ff:da:ab:21:07:8f:cc:34:be:
                    7e:76:43:9d:7f:19:da:db:28:c4:44:bb:92:d2:30:
                    3e:47:8e:78:40:68:75:3e:cd:44:bc:17:06:73:8f:
                    c8:5b:62:e0:ac:df:1c:cc:09:2c:ab:14:63:8f:56:
                    60:d4:db:c4:11:88:78:8a:32:b3:2e:f9:c5:5c:70:
                    41:e0:f3:cc:79:fe:77:ac:82:81:5c:e7:6b:9b:ec:
                    34:35:b4:ed:46:56:8a:2b:be:2b:76:c8:c3:5c:67:
                    47:1e:d5:2f:72:80:0b:9c:aa:b9:df:74:55:81:b8:
                    a7:ba:21:22:61:11:a6:42:b3:d1:87:dc:89:bd:54:
                    3f:45:45:6f:c9:0c:4c:2f:b0:14:96:78:1a:30:4a:
                    21:ff:06:a6:4c:1d:05:58:ae:28:7c:cd:a7:10:2c:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:7E:25:61:2D:7A:84:A0:27:7C:4D:45:A4:81:C3:A7:97:BF:A2
            X509v3 Authority Key Identifier:
                keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0d:72:43:8a:bf:1a:bc:3b:ea:ca:c8:46:a7:4d:cd:ec:e0:
         d1:2f:ca:2c:dc:b8:da:1c:18:0c:ad:8d:35:28:b3:8c:db:29:
         a9:9d:3f:1c:75:4b:08:fa:8c:75:c0:45:7e:1b:84:89:d9:81:
         43:94:ae:6f:7e:ae:ce:d9:4d:4e:1c:c2:1e:3f:a2:7d:a4:6d:
         ec:8d:b3:88:c3:d3:67:c7:c6:85:ce:a1:9c:66:ba:ad:a6:a9:
         39:c0:cb:7a:bf:4e:a4:d7:b1:ac:e4:30:85:76:b7:3e:3e:e6:
         b7:c0:9e:bc:91:5f:30:6e:9f:73:a1:45:f1:34:08:36:49:b0:
         a8:b7:d8:8d:5c:6c:d9:4e:9a:6e:95:f3:f0:32:44:f2:19:02:
         56:fd:aa:b4:fe:65:48:07:01:b9:cc:23:96:85:98:68:62:71:
         3f:b6:eb:b4:a8:4e:a9:de:95:66:77:93:97:0c:bf:88:53:d2:
         f7:fa:3c:a8:2a:fc:fe:63:d0:bf:72:07:d6:ab:59:33:23:e8:
         f6:be:5e:ce:7a:71:64:99:87:46:12:5e:f1:a8:cf:b6:2d:b4:
         31:ef:d8:c3:5c:6a:61:79:8d:89:6d:4e:8c:46:1a:68:84:94:
         27:9b:51:f2:63:a3:9d:05:b7:ac:9a:f7:02:f6:a9:44:37:a4:
         e0:93:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:02:03 2026 by rpki-client