Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
File:                     1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json)
Hash identifier:          ZPqaw4Tc2l7RCS2Mp1xo2DtwSOg1A5vG0CQC51Di5Y0=
Subject key identifier:   95:07:B0:B7:E9:50:B4:2E:8F:57:24:89:65:9B:EE:E5:03:1B:CB:82
Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7
Certificate issuer:       /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
Certificate serial:       019CAC46C3EB5B707D5D48E0364403213F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
Manifest number:          0D11
Signing time:             Mon 02 Mar 2026 02:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:44 +0000
Files and hashes:         1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: fEdhBNmDgkOi/c1smsOu41Tghv301/HSxzxDtAEdq/c=)
                          2: 28NIcQsoO9aYUkqz8eNuokXmz7k.roa (hash: Maz19xfHOeRc2yxXkK1eH+j110RWG6meSjGWmHuiuf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:c3:eb:5b:70:7d:5d:48:e0:36:44:03:21:3f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
        Validity
            Not Before: Mar  2 02:00:44 2026 GMT
            Not After : Mar  3 02:00:44 2026 GMT
        Subject: CN=9507b0b7e950b42e8f572489659beee5031bcb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:d1:90:5a:49:10:5e:06:ef:99:c0:fc:a5:
                    89:cf:61:90:77:74:37:6b:91:89:2a:ae:06:8e:4b:
                    c1:f9:d2:05:9e:c2:dd:26:87:fa:0a:b5:54:fd:af:
                    1f:d2:b5:78:44:71:49:14:d4:79:65:3c:90:ee:f7:
                    35:5b:28:1a:cc:d9:8a:bc:08:41:69:88:ff:76:f6:
                    83:cb:6d:f4:a7:1f:9d:3f:12:28:de:b0:6c:2c:94:
                    d8:19:33:9c:17:6d:b4:07:f1:7b:b0:e8:19:26:75:
                    d6:25:72:ad:55:63:17:53:8a:15:a6:1c:20:56:05:
                    2e:09:ce:0d:30:ba:a1:1a:27:47:ca:49:68:ab:35:
                    eb:f2:d7:8f:27:3a:9a:8e:d5:6e:09:0f:97:40:5c:
                    15:e7:5e:92:a3:7f:37:42:b0:70:29:ea:84:e2:67:
                    91:92:14:c5:5a:21:6b:e1:2a:76:a1:92:09:84:c0:
                    58:22:bb:df:fd:89:55:09:dd:dc:54:16:2d:3f:91:
                    89:b4:77:cd:3b:4b:6c:fc:b5:d5:38:d7:03:71:ae:
                    c4:6a:af:5a:57:fe:2b:7e:53:b8:30:d9:c9:69:ab:
                    a3:9e:a0:82:7d:ba:56:45:eb:fe:c4:11:23:37:cd:
                    3e:28:b3:d7:d2:15:25:33:c1:a9:d2:80:9c:bd:af:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:07:B0:B7:E9:50:B4:2E:8F:57:24:89:65:9B:EE:E5:03:1B:CB:82
            X509v3 Authority Key Identifier:
                keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:15:a1:93:48:fd:93:7e:1e:6d:b0:7e:72:2f:1c:08:b8:2e:
         e3:77:1d:7f:46:25:39:40:20:a9:19:e1:48:be:3d:b4:94:07:
         c8:b8:68:b6:bd:fd:86:51:1a:15:04:6d:90:8c:0b:be:ea:a8:
         23:8d:00:2f:2a:15:0d:4c:30:d8:48:ac:a9:20:eb:86:cd:55:
         c9:8e:18:b5:03:a9:5c:91:ae:b5:1a:b3:15:ad:42:da:2d:71:
         ac:04:7a:07:35:75:06:a7:a7:1e:cc:f0:da:26:a7:a7:a3:06:
         68:e7:00:67:70:88:e4:5a:87:eb:2e:2b:cb:45:e6:f7:2b:9e:
         01:22:78:0e:6b:c3:e0:08:b5:97:3c:78:aa:5c:ae:fa:dc:06:
         44:26:b1:9c:43:ea:62:d0:2f:09:7e:35:1d:93:3b:eb:6e:03:
         ec:8b:29:34:2d:d5:47:15:31:72:8a:80:34:72:44:e7:0f:0d:
         75:46:f3:fb:ed:ad:4f:dd:3c:9a:f8:35:bc:a6:e5:0e:73:ff:
         78:39:20:10:12:59:8c:19:d9:0b:54:d3:26:f6:7d:56:fe:80:
         57:fc:9e:40:ae:db:4a:99:17:db:d5:02:de:e8:b6:72:c2:ef:
         9d:52:f1:ac:24:16:51:5e:4e:4c:b0:2d:80:8a:07:b3:d0:64:
         3a:2e:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:08 2026 by rpki-client