Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File:                     85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier:          EHUDZ5BQmuNeZPwtLqKNdJRefNlhVycl9U8q/a8gUUA=
Subject key identifier:   15:D9:15:90:78:95:8D:BA:DF:CE:9B:B2:F8:CD:FD:70:C1:66:CD:95
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer:       /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial:       019CC750ED7759092956730042B5617F28E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number:          1854
Signing time:             Sat 07 Mar 2026 08:01:35 +0000
Manifest this update:     Sat 07 Mar 2026 08:01:35 +0000
Manifest next update:     Sun 08 Mar 2026 08:01:35 +0000
Files and hashes:         1: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (hash: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ=)
                          2: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: rhd+cYqmc5ROa50zInTWsIHjvQyMdwZsWP8AhXQLuq4=)
                          3: tZjW0PJX2KzKZhqd-IvCr2S66XA.roa (hash: 7bMA6kUNG6YTWVlD3a7zH0NzQxfAjb1JxS2t14+Bg1s=)
                          4: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (hash: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:50:ed:77:59:09:29:56:73:00:42:b5:61:7f:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
        Validity
            Not Before: Mar  7 08:01:35 2026 GMT
            Not After : Mar  8 08:01:35 2026 GMT
        Subject: CN=15d9159078958dbadfce9bb2f8cdfd70c166cd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:e8:0a:d7:d3:56:92:c6:44:f9:66:f9:d0:
                    d1:4f:1e:f6:28:b3:cb:df:11:46:87:c8:97:f7:3d:
                    a6:d1:ab:4d:1e:ed:74:e8:f0:6c:07:28:7a:3e:a6:
                    b5:3e:9e:81:ca:e3:86:64:3c:0c:96:13:b9:81:76:
                    ff:39:da:30:46:1c:2f:92:fb:7d:80:4e:b1:13:12:
                    f3:4f:a1:61:bd:38:75:a8:ea:d9:05:9c:0c:11:68:
                    37:69:dd:4b:b3:35:68:3b:e2:ba:61:a7:81:88:40:
                    67:9d:83:cc:24:9f:af:2a:a7:bf:c4:16:bd:f0:43:
                    18:9f:7a:cc:7e:8f:9f:4a:72:01:4d:7a:13:11:30:
                    97:58:5b:5f:15:16:67:b4:04:bb:32:6b:4f:b2:70:
                    cc:ac:1f:77:21:a0:5a:79:09:4a:47:80:8e:cf:2f:
                    d0:a0:39:75:c3:b0:99:88:70:2b:b4:86:b0:ab:f3:
                    dc:e0:63:d1:d0:72:63:75:b0:48:d2:4b:0f:72:9f:
                    f2:73:91:58:2c:8c:b2:75:6e:e1:ec:86:13:6e:46:
                    5f:59:14:5e:f5:81:a9:61:8e:d0:d9:47:ee:6c:f7:
                    d3:0c:67:87:42:3d:97:51:72:33:de:34:c4:21:ec:
                    09:12:9e:0e:b3:3c:94:5a:ca:21:8d:94:02:f5:17:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D9:15:90:78:95:8D:BA:DF:CE:9B:B2:F8:CD:FD:70:C1:66:CD:95
            X509v3 Authority Key Identifier:
                keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:9e:36:ba:84:2c:cd:96:9f:d2:62:40:7b:9d:42:c2:30:
         b2:d5:27:b1:ef:bc:77:cd:4c:24:61:a4:b0:3e:8e:06:55:48:
         91:5a:79:26:0a:ba:8f:06:c7:cb:0e:db:a0:11:f4:ff:ac:66:
         99:7d:4e:d0:6b:ff:57:d9:56:ea:30:03:81:4f:8e:71:82:a7:
         45:f9:7f:70:e5:45:75:26:ef:d8:05:7f:70:27:00:54:70:da:
         19:91:14:fc:cc:44:b8:50:fe:81:60:cf:75:75:db:bd:ba:69:
         a3:7f:2e:af:90:0a:28:88:f9:0f:9c:51:3b:83:75:bc:97:4f:
         7f:f9:bf:20:91:5c:50:e3:d5:01:fb:2f:33:e4:87:47:25:5b:
         df:54:6c:61:ca:44:22:27:07:5a:76:aa:e2:be:37:16:c2:e8:
         0a:bb:3e:23:ec:62:78:85:f2:62:8c:54:21:fa:ce:92:dc:a7:
         26:8f:6e:31:20:3e:75:0a:59:bd:27:5f:12:a4:d0:d9:03:5b:
         45:17:3d:74:42:fd:b0:35:89:2c:40:d7:d8:b0:63:30:2b:ad:
         90:82:aa:a0:10:37:f5:df:ac:60:78:21:69:d4:c3:ed:ff:fd:
         22:20:c5:1d:e4:c6:87:a9:7b:a5:2f:ee:4a:32:c8:12:54:ca:
         52:4b:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:58:54 2026 by rpki-client