Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          HJOR85BFUzblrJJrPA9YjsorEVcPDeaKzQIHrlJSSDw=
Subject key identifier:   0F:A9:12:40:13:D6:7E:F1:E2:4C:AC:1C:2B:67:32:8D:6A:43:CE:F8
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       019CD4D49CAA31B0BD185D03F8B9B353EBC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          185C
Signing time:             Mon 09 Mar 2026 23:00:29 +0000
Manifest this update:     Mon 09 Mar 2026 23:00:29 +0000
Manifest next update:     Tue 10 Mar 2026 23:00:29 +0000
Files and hashes:         1: DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa (hash: J9f3+3+bZCVO4pdaXJk73MjSTfHDh7PUS0/X3EifbYI=)
                          2: FVHHHiStYazQcaMR-6kWtYOxbzs.roa (hash: pJULO84lcrM/sFgnoFFGZDLPLbAu3bVxvObeTRPi3ds=)
                          3: H8dMsf8QtugmggF2iMoFflOsZM8.roa (hash: PZPW581Oe5q4Dva6P0wu0eLhLStSSj+Ttl8NhZ/xkvU=)
                          4: Y4k6hZFhvCoHiB7h05680H5APKM.roa (hash: BGmp+q30ZAASUmPPXR43EIv6VKKM1vrOmCdZ6rG6eeg=)
                          5: ZX0valTvB4XUFb2t2MvkLevuS6o.roa (hash: mqjFEPpJKWkFc8eYY9RB4MA5DD2L0uPMPEokQ0eKgy4=)
                          6: eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa (hash: S3PsF2cp96qNKXQpWngG/gA+/rgdkiompOBnIfGv5D8=)
                          7: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: qcm5NIHZBYmzkt94L08WLmsPo+D1ZwmLQXz9ovolZRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d4:d4:9c:aa:31:b0:bd:18:5d:03:f8:b9:b3:53:eb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Mar  9 23:00:29 2026 GMT
            Not After : Mar 10 23:00:29 2026 GMT
        Subject: CN=0fa9124013d67ef1e24cac1c2b67328d6a43cef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:6d:7f:a1:35:fc:13:16:1c:b9:7a:e8:1f:
                    36:68:8f:51:7f:dc:70:6e:e8:ed:c4:eb:65:68:b7:
                    19:35:d9:43:d3:75:1a:77:57:39:bd:b4:e5:69:e1:
                    cb:85:cc:fd:c6:4b:89:81:98:a2:f9:9e:05:f4:b5:
                    c4:3b:1e:bf:c3:85:c7:70:a4:a8:72:94:7c:d8:b8:
                    83:c3:e2:37:bd:96:69:1e:2f:0c:93:29:50:28:99:
                    1e:0a:42:f6:58:c1:22:df:da:7e:b3:3a:f0:62:a9:
                    31:ea:7b:4a:4e:78:57:3d:91:97:20:ee:ea:66:c4:
                    87:49:54:ab:9e:8c:99:84:88:3e:d6:6a:6b:f8:a4:
                    88:3a:37:07:69:23:7d:6b:95:d7:4c:15:0c:f8:73:
                    8b:2f:47:fb:4b:3f:0b:19:82:f2:1f:d2:05:79:ab:
                    3a:44:fc:09:a8:07:9a:3b:a7:59:1b:04:88:88:06:
                    55:70:f5:aa:3c:77:03:d7:97:0e:12:f0:9d:45:e7:
                    c3:90:ad:d7:2e:ba:cc:1c:7b:e2:42:d7:1f:b7:e7:
                    99:0f:a1:aa:42:04:3d:6a:63:97:23:cc:99:b2:7d:
                    d4:be:ff:2a:26:6d:83:ce:d5:55:6d:5d:34:a9:75:
                    71:7f:c1:61:d8:7b:b2:e5:56:73:2b:29:b7:03:90:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A9:12:40:13:D6:7E:F1:E2:4C:AC:1C:2B:67:32:8D:6A:43:CE:F8
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:86:71:46:44:7a:fc:40:bd:91:fc:1b:c6:3e:77:42:73:67:
         d4:a7:58:ac:25:bb:43:db:15:5d:d8:fa:09:dc:47:c1:f9:d7:
         5b:47:34:a6:74:dd:9f:45:19:fd:17:e2:f2:bf:2e:b6:01:fa:
         fc:5e:86:92:07:80:09:27:96:57:35:e1:97:e0:15:ba:8f:81:
         09:bd:d8:2a:c5:55:56:83:e8:38:37:76:31:3d:11:57:74:72:
         81:98:b2:b1:0e:09:86:92:72:22:60:65:87:9b:f6:ef:d1:04:
         2f:8a:84:cd:0f:6c:3e:77:82:7b:d4:73:c2:f2:2c:57:79:a3:
         e4:30:6f:9a:6c:c0:dd:bb:b5:f9:f7:da:f0:d8:7c:7f:68:5f:
         b2:0b:79:40:f9:aa:ae:18:d3:9d:cf:0f:ef:8c:21:a5:1c:92:
         30:0b:0d:a6:e8:c2:d4:1f:1a:bc:1b:0e:95:c8:07:d2:16:69:
         24:e1:71:fc:ce:06:c1:0b:b0:3d:85:e4:1f:30:c1:29:f3:fb:
         fe:4d:a2:42:5a:8a:e5:c5:9a:98:bb:36:2e:e4:99:00:95:67:
         e4:b2:68:a3:d1:ff:d9:51:ac:86:f4:45:ac:86:3f:d9:65:e0:
         0b:b7:7f:59:01:4d:c8:10:c6:2f:eb:3c:be:40:83:cf:0d:f8:
         45:c5:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 07:08:11 2026 by rpki-client