Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          jVWKygn4HjUOyOX0U1HPlvM03iGQd16s6EtbSjt3Dnc=
Subject key identifier:   76:20:BD:54:21:39:05:63:87:71:EF:2F:55:02:D0:51:95:F3:42:E2
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       019CEC6F82757B11285CB71EFC817D85CC59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          1875
Signing time:             Sat 14 Mar 2026 13:00:56 +0000
Manifest this update:     Sat 14 Mar 2026 13:00:56 +0000
Manifest next update:     Sun 15 Mar 2026 13:00:56 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: 8rwY2ZWrDKU1RzZ3y+uiRjWXLu5LCnOrvEBGKp1oBew=)
                          2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
                          3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
                          4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
                          5: oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa (hash: g0N6pLY+sNIqbqq3i2xctEc69tyHJmh/CSOpC4j0mH4=)
                          6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ec:6f:82:75:7b:11:28:5c:b7:1e:fc:81:7d:85:cc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Mar 14 13:00:56 2026 GMT
            Not After : Mar 15 13:00:56 2026 GMT
        Subject: CN=7620bd54213905638771ef2f5502d05195f342e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:97:ad:c5:c2:24:43:b0:af:de:3f:60:28:
                    0c:dd:ee:1b:21:a1:66:67:15:39:5e:de:0a:58:c5:
                    54:26:a7:cd:d9:00:89:ee:1d:a0:f7:bd:ef:c2:78:
                    78:39:1f:91:b7:77:41:03:3c:9d:fb:7e:61:23:59:
                    8b:3b:13:82:46:3b:ff:6b:a7:b2:86:a4:4b:df:2e:
                    b6:f6:4a:67:ed:c7:68:47:14:e6:62:f4:22:4d:a4:
                    17:6f:b1:2f:02:98:e6:98:63:95:7d:93:31:70:7f:
                    67:e8:d2:04:a0:c8:c3:a4:ed:c3:de:f6:6b:a1:63:
                    b9:01:f4:c9:43:a1:ec:81:df:bd:18:65:88:66:7a:
                    74:06:eb:37:e8:af:31:72:f6:21:d9:de:87:7b:f6:
                    74:80:ef:71:a6:64:96:b9:ff:52:4e:9b:1e:c1:65:
                    57:7c:9c:34:cb:ec:fe:ea:3e:33:3c:72:ca:59:72:
                    04:7b:78:b5:e7:42:fb:73:c0:a1:7e:a0:28:b3:c4:
                    c7:c4:ff:4a:af:ca:5c:7f:db:48:c1:17:79:66:d7:
                    91:44:a6:79:50:ac:83:25:ed:d2:78:d4:b0:36:4d:
                    50:e2:e7:11:2a:af:6a:6b:82:4e:44:44:39:86:04:
                    de:5e:ae:72:71:8b:4a:c8:92:3a:cb:fd:06:2f:25:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:20:BD:54:21:39:05:63:87:71:EF:2F:55:02:D0:51:95:F3:42:E2
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:38:87:0d:0a:7c:b8:2b:ab:86:c5:52:25:af:74:6a:86:88:
         fd:9c:8e:be:7d:b2:f8:98:6c:d4:bd:88:1e:72:e1:2b:5c:23:
         cb:7c:7f:e6:51:2b:81:e4:40:a1:fe:55:fe:c8:0d:83:3d:95:
         e4:d6:7a:cb:46:f4:81:48:48:b0:9c:1d:27:dc:3b:8e:8a:56:
         38:b6:9d:65:92:bc:06:0e:37:df:41:0c:e4:fc:b0:fa:39:4f:
         95:35:9b:3b:20:02:a2:28:c3:5a:a5:90:33:63:d5:59:63:66:
         7a:83:8d:e4:eb:09:83:88:38:c6:9a:74:c1:24:59:19:13:79:
         dd:1b:73:88:ac:7a:33:61:a0:16:eb:05:df:a1:c7:ab:b3:e3:
         31:88:18:fa:3a:48:f5:cb:fd:23:de:19:5e:19:c8:f2:9c:13:
         8b:04:13:85:99:b9:5c:70:bf:c0:77:e4:ce:69:12:30:03:f8:
         b5:65:ff:bf:5a:36:c1:b8:bb:0a:c4:78:af:e2:f0:93:fe:b1:
         84:4f:27:ae:04:0e:7c:2b:71:21:fd:fa:94:91:3b:9a:e4:df:
         44:bb:06:ff:22:ac:9e:de:e6:61:5e:24:9e:59:ea:19:9f:03:
         ea:7c:9e:9d:d1:1e:f6:43:25:6c:38:c5:e6:66:d6:fa:ab:58:
         5b:15:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:17:36 2026 by rpki-client