Manifest

$ rpki-client -vvf rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
File:                     190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft (raw, json)
Hash identifier:          jKm6utVYdT3gKBdSahPVbhOhzewbJ5kkT6Ch33NE2bw=
Subject key identifier:   7B:13:4F:7C:FD:61:30:3D:1F:67:7B:99:4F:0B:22:8B:23:98:53:1D
Authority key identifier: 19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6
Certificate issuer:       /CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
Certificate serial:       1A5F8E75913E8E272BBB4A2EA1DF8FDC58D5A8DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
Subject info access:      rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
Manifest number:          012D
Signing time:             Sun 01 Mar 2026 10:58:33 +0000
Manifest this update:     Sun 01 Mar 2026 10:53:33 +0000
Manifest next update:     Mon 02 Mar 2026 12:45:33 +0000
Files and hashes:         1: 190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl (hash: uzKJUJ3kJ1Btc/kcBraBpUVdKC3y3oIvmXf9xPQpAZg=)
                          2: AS59920.asa (hash: Jh8KWCeTefIYAXmY/CIsRG+1sPr2U4Yt/QC477/8qdQ=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl
                          rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:8e:75:91:3e:8e:27:2b:bb:4a:2e:a1:df:8f:dc:58:d5:a8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
        Validity
            Not Before: Mar  1 10:53:33 2026 GMT
            Not After : Mar  2 12:45:33 2026 GMT
        Subject: CN=7B134F7CFD61303D1F677B994F0B228B2398531D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:2d:eb:af:73:c6:e9:f7:65:c4:39:af:9b:
                    41:84:99:57:48:c8:94:83:06:55:c1:42:b3:cf:24:
                    9d:6f:7b:a7:a9:72:b0:52:87:8f:22:3a:c8:da:3f:
                    a4:50:c2:b5:d0:62:1f:6b:a6:87:1b:24:10:8e:68:
                    4b:9d:47:9c:77:78:90:e1:9c:98:0b:9f:ba:8f:18:
                    57:2e:91:17:fe:2b:c4:83:ff:b4:e0:46:83:b7:23:
                    2a:9d:83:1c:9a:0b:4b:9d:40:eb:75:4c:19:de:5e:
                    85:c2:f3:35:9e:d1:aa:c9:81:35:f8:69:7e:a1:b2:
                    c4:73:b0:85:0b:43:80:b0:a0:45:f4:6b:04:ae:a5:
                    29:b7:dd:31:8a:4b:ec:a2:4b:e8:fc:8a:7d:3f:e7:
                    8e:ce:c1:78:08:1f:34:b5:dc:83:dd:3a:1c:17:dd:
                    03:3f:cb:71:be:c7:ac:dc:1a:c7:dd:6a:7a:3d:86:
                    8b:0e:0c:36:19:f9:d8:c9:9e:ee:6b:de:8b:e2:cc:
                    42:b5:1a:9b:8f:1f:83:4d:d5:70:9c:17:6b:f0:2a:
                    bb:30:4d:eb:95:2b:20:e8:38:a7:68:68:12:10:bb:
                    8d:c9:72:1f:6b:59:04:e9:78:e8:96:c2:fe:63:26:
                    a8:d9:ab:55:93:c5:fd:14:d5:6f:ba:17:1d:ae:c4:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:4F:7C:FD:61:30:3D:1F:67:7B:99:4F:0B:22:8B:23:98:53:1D
            X509v3 Authority Key Identifier:
                keyid:19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:cf:e3:e4:23:ea:cc:93:bf:1d:34:0f:e6:88:8d:50:fe:
         09:44:ae:ee:60:2a:2f:11:fb:33:bc:3d:d8:64:f1:3d:13:03:
         f7:b7:11:94:74:2e:97:69:d9:8a:80:32:bf:ab:dd:28:8e:c5:
         6e:ab:68:74:4f:5b:93:de:da:b3:6e:47:25:57:90:db:81:b3:
         9a:cf:b0:fe:08:49:68:83:f3:aa:9d:0f:fa:b4:bb:4c:9b:6b:
         9a:29:48:e5:2c:be:97:2c:4d:c5:19:99:e4:c0:76:d1:69:8e:
         8a:ca:4f:35:30:db:bd:09:10:47:62:56:09:6f:e4:73:05:c1:
         52:37:a9:63:49:90:8a:93:35:83:f4:a6:b8:2c:80:4d:ee:8a:
         64:14:81:2d:6e:6d:b9:13:1b:c4:5a:78:85:88:0b:d4:6a:85:
         fa:1d:db:4e:02:35:af:d9:3e:47:34:4f:00:63:9d:87:7a:7f:
         c7:c6:aa:90:5b:6e:d5:67:86:c5:cf:e2:ad:33:c0:13:52:47:
         1c:6c:2a:58:72:76:d0:a8:c0:31:57:c1:02:c2:03:31:e6:ba:
         67:1b:ba:54:76:5d:3e:25:e9:2f:20:31:8c:9d:d2:3b:ef:9e:
         d1:ec:a3:dc:55:1b:af:2e:8a:a9:71:46:39:f4:33:37:ea:af:
         4e:e6:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:17 2026 by rpki-client