Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File:                     axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier:          xK9PjAJVjc/pIdSLx0pFRCObYIghBwpSUYVyRlFuSx4=
Subject key identifier:   E9:2D:EE:88:40:3B:C8:E3:AD:A1:F0:E8:97:DC:57:82:B3:6A:A9:9E
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer:       /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial:       019CA9EADE6A8E0C01437CBFE0514FD88496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number:          155D
Signing time:             Sun 01 Mar 2026 15:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:07 +0000
Files and hashes:         1: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: 1GMhK8BwW/KVPBz/tFT5e2GVEiYA5OLyAWMCss6l40s=)
                          2: yWDSl9yDDWwKXKm5areAK-BgE_4.roa (hash: 9t658G/RphCv/dZEb8OenZ41/3jlcAPrpuRTSbCffNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:de:6a:8e:0c:01:43:7c:bf:e0:51:4f:d8:84:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
        Validity
            Not Before: Mar  1 15:01:07 2026 GMT
            Not After : Mar  2 15:01:07 2026 GMT
        Subject: CN=e92dee88403bc8e3ada1f0e897dc5782b36aa99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:b2:32:d3:6f:e6:db:fa:22:0d:8b:76:73:
                    9f:e4:ae:0f:b0:07:39:c4:a7:e1:7f:a5:6a:6a:99:
                    ba:bd:fe:ce:b3:e3:72:97:e1:b0:6b:b0:d6:6c:47:
                    f8:09:50:6b:49:82:29:86:1b:ff:9c:a2:70:2d:f0:
                    e7:b6:6a:a0:52:5d:00:09:34:a8:2f:04:1c:2a:01:
                    c4:02:8a:44:4b:e6:a5:47:cf:4b:67:7e:58:6f:ee:
                    9e:35:a3:5f:d9:3f:56:49:3d:20:5d:f7:a4:f8:d5:
                    f4:75:11:f5:19:8d:e2:84:b4:75:74:d2:09:7b:40:
                    08:1d:3d:fd:de:ca:31:30:64:b2:7e:45:e6:1e:fb:
                    d2:66:a0:86:e1:ef:c6:bc:c1:0c:7e:a5:5d:69:65:
                    85:e6:ac:d3:19:1d:00:87:b9:ae:ed:f0:84:8c:f4:
                    0a:f1:ad:94:5a:32:35:3c:aa:d8:35:d6:5c:18:4b:
                    fd:81:1a:0c:b4:2d:15:68:5a:30:59:d7:c5:88:af:
                    b8:ed:3b:cc:a4:01:4c:8f:67:8c:24:4b:59:0b:ea:
                    20:03:7b:6d:35:92:1f:94:63:6f:6f:09:da:5a:18:
                    89:20:b4:5e:d2:1e:ee:68:d8:e9:4c:0d:41:88:83:
                    1e:b6:de:ac:80:3a:2f:44:fc:16:a8:51:7e:7c:dd:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2D:EE:88:40:3B:C8:E3:AD:A1:F0:E8:97:DC:57:82:B3:6A:A9:9E
            X509v3 Authority Key Identifier:
                keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c8:a3:e1:78:03:84:a3:bb:26:1c:14:ca:22:f6:5c:bb:17:
         aa:bd:d8:b3:ed:bd:a8:8c:02:5c:7d:03:47:05:84:45:70:0f:
         ef:e2:22:6b:49:46:07:69:f5:64:f3:57:7e:d6:7f:8c:93:96:
         ae:90:7f:57:91:61:58:9a:ac:ce:80:92:a7:9a:ad:d0:2c:35:
         47:8d:49:f0:e4:9c:99:33:6d:ae:88:84:6c:9c:fc:17:cc:48:
         c8:3f:54:aa:45:a6:96:84:70:fa:6b:1d:98:52:cb:f5:e2:65:
         42:93:c6:20:ca:49:43:7c:fc:fd:5d:24:06:de:59:46:f9:e6:
         b8:46:1c:71:ff:c3:01:1d:27:39:05:9c:f8:da:9f:0a:b0:ce:
         65:7b:be:d6:b6:6a:37:62:79:db:b8:11:cf:79:01:47:78:a9:
         cf:ef:eb:3d:19:a9:29:7a:98:b1:a4:f8:c6:de:58:6b:a9:e2:
         a4:65:b6:d5:dc:54:2a:32:c0:0f:5d:6a:7a:ea:3c:b8:48:9f:
         ca:ba:43:d0:62:d7:1a:78:f8:82:63:4e:25:34:0f:09:97:8b:
         30:f2:1a:c3:65:e6:52:dd:24:e8:a9:cb:67:08:de:e5:39:a1:
         99:4c:cd:fb:90:19:73:ac:f8:ed:22:9d:2c:36:4b:80:b7:b1:
         70:f5:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:44 2026 by rpki-client