Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          giX3fyAcewU1dWK6oC38Z3h5WB6zm3AhBoiwm8EShYg=
Subject key identifier:   93:92:12:31:3A:F8:C9:84:50:77:55:5D:65:9F:4A:C8:D4:75:13:52
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       019CDFC5DB658F6950BE5492D5DE24A136D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          0769
Signing time:             Thu 12 Mar 2026 02:00:11 +0000
Manifest this update:     Thu 12 Mar 2026 02:00:11 +0000
Manifest next update:     Fri 13 Mar 2026 02:00:11 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: Aw9/bIazD0ndwDS6M0TxhVMhA1ZYYH3+vFR/vVC7fY8=)
                          2: LHIeUVA9wsCM7bmZaVgrPaNNziw.roa (hash: NBcTepDFdXpBgX4qPundU4bCWFb04yiAHriwN4bBQ7M=)
                          3: LvfTa413By2E_F6yYl2dyQqtQ6g.roa (hash: r8Aaf6zbkZr6mR+oKR2km59CiVJuLPU3L/XJZeMBCjE=)
                          4: ZdKh3a8XEvF05LVjsi9wkRymFVg.roa (hash: NE20D4V8pCaAFdHiKB+G1Vp2zobKDlYDSABykJAJbXM=)
                          5: _vmewA9W8DyxXaiP_EZ3cz5dROk.roa (hash: SjnU2OshL4XrUnyu6qZvohhXfN1UkCVyA6v9bEVIxns=)
                          6: fyIb0V5JX6E2tpy_vgKc70A0lK8.roa (hash: wDxZOpTMpfURcZbXhtIPr6kc1LLTPvdz01nZUdR/Qy4=)
                          7: wmVWvi9LFM_1oIUpxrvxMv6hAgI.roa (hash: hSBrwEq4pKXZOmKjFY4p3+D6mzIcmXDbJLyGmD3u4sQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:df:c5:db:65:8f:69:50:be:54:92:d5:de:24:a1:36:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Mar 12 02:00:11 2026 GMT
            Not After : Mar 13 02:00:11 2026 GMT
        Subject: CN=939212313af8c9845077555d659f4ac8d4751352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d1:48:12:7c:2c:c1:cc:50:13:21:63:53:19:
                    a4:eb:8b:65:5d:d2:f1:39:d2:b7:14:07:28:93:15:
                    16:68:0a:26:9e:d3:c9:3b:ab:1c:d2:ab:9a:d8:22:
                    af:5f:45:bf:b4:06:82:f5:f9:7a:d9:92:00:f1:5d:
                    3e:cf:a3:7b:08:4f:00:d0:ff:a7:a8:56:c4:75:f5:
                    de:94:7f:54:d0:8c:be:c5:1b:81:2f:56:6c:81:7c:
                    85:44:4d:b4:f7:a2:87:ef:60:1d:44:a8:79:14:37:
                    64:ed:0f:fa:70:86:9b:dd:83:69:bb:d9:7e:6f:6e:
                    8f:43:31:30:45:71:ed:9d:55:82:ad:86:41:47:70:
                    2b:d5:84:0d:75:ed:9f:0b:8c:3f:d2:2b:4f:ae:87:
                    a6:91:f2:5c:7a:a9:79:0a:5e:4e:5f:d5:b8:f7:38:
                    35:dc:2d:e1:2c:c1:83:10:cb:23:ef:dc:77:53:fc:
                    74:39:57:09:18:1c:d9:68:71:bb:98:a2:13:8f:22:
                    66:f6:3c:48:4e:73:cc:de:10:c7:6e:6a:99:fe:76:
                    3e:fe:4f:0a:61:c3:be:29:46:7a:c3:4e:c2:8e:91:
                    6f:52:56:73:39:38:c3:03:83:10:56:8d:83:c1:75:
                    fa:85:d2:70:37:c9:8f:d5:78:7d:97:29:6a:6c:4e:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:92:12:31:3A:F8:C9:84:50:77:55:5D:65:9F:4A:C8:D4:75:13:52
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:13:e4:08:5b:06:ec:60:9d:4c:17:da:86:20:d0:90:56:60:
         69:23:7e:6c:af:67:e4:38:16:97:06:51:e2:48:7c:6f:1f:94:
         e3:c4:e0:3d:1f:88:0b:33:19:89:55:35:1c:87:ac:da:ef:08:
         11:0e:b5:d1:12:c0:36:53:1c:ae:4a:7d:b9:a1:a4:18:f4:3e:
         6f:a3:1f:12:82:12:cc:dc:c3:46:53:1e:3e:da:69:79:7d:d8:
         a0:41:48:ae:52:25:b9:eb:e0:5c:fa:a2:b2:3f:8f:49:0e:97:
         93:bf:0f:f5:10:69:f1:3e:64:09:c9:ac:e8:3e:5e:47:48:f6:
         86:13:49:6a:30:a0:8e:5a:b4:7e:0e:1a:89:8d:96:71:07:ac:
         ab:24:d9:2c:d4:ba:24:9f:30:de:cd:7f:d3:54:d5:0e:07:ee:
         c0:f3:ac:4f:34:79:1f:32:b7:f0:8e:a6:a2:a3:d2:cc:5b:ad:
         ef:c1:b5:c6:df:d6:3d:55:93:a3:e4:75:e4:f5:27:95:75:d2:
         d3:d8:ad:f6:71:06:b0:7e:6c:a2:d2:c9:eb:aa:7b:33:11:06:
         c3:37:44:94:01:b5:22:66:de:ba:5b:44:04:a4:5d:4a:eb:ec:
         ae:c2:1b:cb:c2:57:c0:de:da:6c:15:32:b2:6f:bb:bd:1f:5e:
         f1:10:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:25:38 2026 by rpki-client