Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          f4GkYWxCJqkfFcu/JmyHW+FrmJp/XdYgkhpFSdK0bK4=
Subject key identifier:   BE:9C:BC:C8:0F:3D:79:9A:BA:42:7F:8F:39:29:6D:70:A4:F4:16:00
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       019CE5FF67D880B9147E1D33E8FE6CF41C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          1864
Signing time:             Fri 13 Mar 2026 07:00:46 +0000
Manifest this update:     Fri 13 Mar 2026 07:00:46 +0000
Manifest next update:     Sat 14 Mar 2026 07:00:46 +0000
Files and hashes:         1: M5qVt7ae34kVphAk4iYjA_sXTVA.roa (hash: DNenw0maSTGL31Gai50q1uXUB6YmtJsec2G1+61e/LM=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: 7JJznPZyb3kPgrjrSKgMuWcxQxtNH8F4wcQ1SDgc0V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:ff:67:d8:80:b9:14:7e:1d:33:e8:fe:6c:f4:1c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Mar 13 07:00:46 2026 GMT
            Not After : Mar 14 07:00:46 2026 GMT
        Subject: CN=be9cbcc80f3d799aba427f8f39296d70a4f41600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:c3:e1:f2:54:11:be:4a:aa:3b:4f:78:ff:
                    45:8f:95:8b:61:e1:80:74:61:e3:a6:bd:cf:cd:d1:
                    26:22:eb:1a:7b:08:5a:bc:05:3a:41:2a:9c:fe:88:
                    8d:82:0e:f6:38:f1:29:5a:e7:ee:dd:38:1e:88:00:
                    f5:7c:48:2b:65:1b:79:49:37:76:61:fb:b0:d9:2e:
                    71:87:cb:a6:40:75:a8:86:8d:b2:f9:f8:b2:c2:73:
                    cc:d1:85:fe:0b:d4:4c:ae:20:93:eb:b1:e7:33:f3:
                    af:2a:f0:d5:99:38:ad:fa:fd:b7:62:63:e7:27:87:
                    f9:d7:ec:05:e0:78:92:e5:c3:e7:5f:04:7d:51:d1:
                    f2:91:39:65:39:c9:94:b8:f0:26:59:1a:e5:6e:c0:
                    66:c4:19:1b:59:bd:fd:1b:98:f0:80:20:73:28:f9:
                    e4:8a:a1:09:09:13:77:80:11:f4:11:59:98:dd:15:
                    43:e3:6f:d5:86:8a:ed:49:04:3f:e1:57:60:41:20:
                    f3:89:c3:f6:2a:3f:7c:31:24:a9:b0:f5:1d:30:34:
                    1b:f2:5a:d8:3e:a1:ae:c6:ef:97:f8:ca:64:d4:c1:
                    d4:75:ee:13:cc:e7:99:6a:8d:a4:c9:f4:7a:53:67:
                    63:4f:f0:51:30:58:d3:08:04:06:dc:e8:e2:13:fb:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9C:BC:C8:0F:3D:79:9A:BA:42:7F:8F:39:29:6D:70:A4:F4:16:00
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:10:e6:14:11:d0:31:2d:64:36:d0:9a:ab:8e:55:8b:a4:06:
         ba:f7:28:28:de:88:51:04:4b:9a:6f:2a:b5:b1:8f:2c:f3:f1:
         97:5a:ad:f7:9b:dd:b1:51:49:ae:ca:5b:3a:a3:eb:db:36:ff:
         1e:ac:09:6e:cd:82:ad:93:a7:d3:93:d1:60:28:fc:25:75:0b:
         73:f5:9b:30:09:f8:1b:99:d6:40:bb:1e:af:6c:c4:54:e8:a3:
         cb:8b:40:1a:3f:07:02:f8:aa:7c:af:3d:f8:02:65:cd:5e:e7:
         d1:d1:44:61:59:78:f6:8c:49:19:05:50:e5:c4:6b:98:48:6e:
         aa:03:09:01:07:b0:54:63:eb:8a:e3:b6:8c:2d:f9:6e:b0:d7:
         aa:94:17:cf:4a:99:ad:f0:33:d1:2b:c5:0b:74:dd:03:1e:b6:
         64:56:34:83:c3:5c:95:76:76:be:fe:8f:1c:ff:8b:31:4d:02:
         3f:6c:b8:1c:ca:ef:6a:95:05:ba:e0:ae:3b:45:9f:92:2b:c2:
         c3:43:86:7d:04:d7:aa:2f:d6:0c:d5:39:15:ac:d3:b7:a9:e2:
         56:30:43:ec:2f:cb:1c:0e:57:d6:d5:5f:d0:93:df:d1:94:82:
         e4:f7:7d:ce:74:85:e5:04:fc:c0:0c:ff:ec:d4:d5:29:36:fc:
         aa:b1:d9:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/2fYgLkUfh0z6P5s9BwWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjYwMzEzMDcwMDQ2WhcNMjYwMzE0MDcwMDQ2WjAzMTEwLwYDVQQD
EyhiZTljYmNjODBmM2Q3OTlhYmE0MjdmOGYzOTI5NmQ3MGE0ZjQxNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBHD4fJUEb5KqjtPeP9Fj5WLYeGA
dGHjpr3PzdEmIusaewhavAU6QSqc/oiNgg72OPEpWufu3TgeiAD1fEgrZRt5STd2
Yfuw2S5xh8umQHWoho2y+fiywnPM0YX+C9RMriCT67HnM/OvKvDVmTit+v23YmPn
J4f51+wF4HiS5cPnXwR9UdHykTllOcmUuPAmWRrlbsBmxBkbWb39G5jwgCBzKPnk
iqEJCRN3gBH0EVmY3RVD42/VhortSQQ/4VdgQSDzicP2Kj98MSSpsPUdMDQb8lrY
PqGuxu+X+Mpk1MHUde4TzOeZao2kyfR6U2djT/BRMFjTCAQG3OjiE/u/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6cvMgPPXmaukJ/jzkpbXCk9BYAMB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhDmFBHQ
MS1kNtCaq45Vi6QGuvcoKN6IUQRLmm8qtbGPLPPxl1qt95vdsVFJrspbOqPr2zb/
HqwJbs2CrZOn05PRYCj8JXULc/WbMAn4G5nWQLser2zEVOijy4tAGj8HAviqfK89
+AJlzV7n0dFEYVl49oxJGQVQ5cRrmEhuqgMJAQewVGPriuO2jC35brDXqpQXz0qZ
rfAz0SvFC3TdAx62ZFY0g8NclXZ2vv6PHP+LMU0CP2y4HMrvapUFuuCuO0WfkivC
w0OGfQTXqi/WDNU5FazTt6niVjBD7C/LHA5X1tVf0JPf0ZSC5Pd9znSF5QT8wAz/
7NTVKTb8qrHZ7w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:14 2026 by rpki-client