Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File:                     sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier:          xdnK5PUnfskxeDxnxZVcFEFIIywbMS+x7ebOG+Org0w=
Subject key identifier:   8C:EA:B0:FB:C7:E6:79:A3:73:41:E7:74:A2:1C:75:3D:CD:C6:70:54
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer:       /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial:       019CE636C7D49BE5A5D7B67CEC62AB466C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number:          069F
Signing time:             Fri 13 Mar 2026 08:01:15 +0000
Manifest this update:     Fri 13 Mar 2026 08:01:15 +0000
Manifest next update:     Sat 14 Mar 2026 08:01:15 +0000
Files and hashes:         1: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: eErzYPOQKK2zBeJWrLFzw491CoRnyoRXstBeF48MeP0=)
                          2: y0urSuZI8k80qDTQJ3kG5eohDE0.roa (hash: Y9liF5XubPckrTgkSr37iUFqjTSMFsZSlRvzu6Hk6eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:c7:d4:9b:e5:a5:d7:b6:7c:ec:62:ab:46:6c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
        Validity
            Not Before: Mar 13 08:01:15 2026 GMT
            Not After : Mar 14 08:01:15 2026 GMT
        Subject: CN=8ceab0fbc7e679a37341e774a21c753dcdc67054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:37:e3:58:6b:a6:aa:f1:54:2c:7e:1e:d6:
                    3e:bc:42:c4:a3:a9:2f:59:44:8b:0f:e7:03:8c:da:
                    9d:fb:82:55:bc:37:91:e4:47:8c:8a:dd:1e:68:74:
                    40:77:a4:f6:75:07:7a:a9:95:66:e5:37:a7:29:23:
                    14:b9:a3:08:bb:72:64:78:3c:dd:ad:ab:61:89:6c:
                    01:f4:92:88:22:4a:3e:87:a2:6c:f3:12:b9:ee:d7:
                    cb:ca:cb:2d:31:6f:6d:78:2b:7f:3a:5a:7b:47:ef:
                    9a:14:56:06:58:db:fd:f4:c6:6e:d1:c1:3f:5b:0a:
                    28:a6:16:d3:fa:20:d8:7d:29:fb:ca:3e:a2:82:71:
                    bb:63:fc:61:31:61:55:7b:42:68:fe:99:f1:90:f9:
                    66:39:0f:f1:e5:08:b3:95:56:ba:37:8b:87:05:0e:
                    fe:1f:ab:68:82:d2:7a:dd:47:9f:7c:59:26:3b:0c:
                    e4:5f:00:12:84:11:8d:b5:c3:b2:71:ac:5d:97:86:
                    f2:4a:bd:fc:cf:3c:76:a5:a5:54:4a:db:96:6d:3a:
                    02:73:10:9d:73:a1:53:9b:e9:4e:d6:2e:b7:cc:fd:
                    b1:34:75:1e:2d:f7:93:1d:9a:29:33:75:27:ad:a0:
                    e1:37:94:85:9e:44:3a:67:2b:35:fe:6d:25:98:fa:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EA:B0:FB:C7:E6:79:A3:73:41:E7:74:A2:1C:75:3D:CD:C6:70:54
            X509v3 Authority Key Identifier:
                keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:41:ea:f5:07:3a:11:fa:b5:30:ff:af:94:59:54:a1:ee:
         65:c1:88:51:0e:ff:ab:49:03:e2:f8:2f:5f:6a:37:58:8e:1e:
         6a:40:c3:2f:87:db:b0:65:62:fd:8c:91:28:dc:c5:f8:d3:bc:
         aa:34:13:58:cf:57:24:3c:9a:f7:a0:8d:50:7c:ed:6d:30:7d:
         f6:b2:16:51:04:96:bb:34:c9:a9:bd:41:33:f0:5b:7e:1f:48:
         2c:c7:0c:be:27:af:1a:99:9b:7a:ca:c0:95:4b:ea:d6:cd:b4:
         67:6c:90:38:11:0d:bb:ee:07:28:82:94:c6:41:9e:eb:cf:c3:
         f7:52:86:c8:8a:0e:e4:e0:b6:ec:b4:57:c5:42:6f:3b:5c:3a:
         27:a4:39:bd:75:72:8b:c0:3b:bb:4c:c1:88:3e:e0:c8:60:05:
         83:63:cd:79:e6:fd:88:e4:fa:5a:29:34:6f:ce:87:83:d8:7c:
         81:22:37:b8:f6:a8:a0:aa:d3:13:bd:30:0f:64:c7:92:70:f2:
         fa:58:e9:8c:0d:21:b8:b9:0f:44:c4:c4:f7:d7:08:6b:3a:08:
         3b:31:36:8c:6a:84:cf:60:f8:f9:3d:be:63:0d:70:b7:25:2a:
         22:95:e3:b8:5c:95:1a:00:1c:14:a0:64:9d:a3:d6:fe:05:46:
         1c:cd:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:52:00 2026 by rpki-client