Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File:                     aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier:          uPkccLU3K1bu1UKBYA/AdKWgzgOS7UjiO1/MfQleCZ8=
Subject key identifier:   7E:1B:EA:93:D4:57:3F:93:6D:B9:0F:65:28:07:A2:F8:61:03:63:2D
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer:       /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial:       019CACEB9D33DB18E1FC37100175D57A28C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 05:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:48 +0000
Files and hashes:         1: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: O7RZRZowAssJnGh2iqrKpUo4G3npovpmGmsU9/iIOc8=)
                          2: v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa (hash: liANJtLZlExcLcM+/+8RAHwNizw5D6GQaPEdxWVRWPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:9d:33:db:18:e1:fc:37:10:01:75:d5:7a:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
        Validity
            Not Before: Mar  2 05:00:48 2026 GMT
            Not After : Mar  3 05:00:48 2026 GMT
        Subject: CN=7e1bea93d4573f936db90f652807a2f86103632d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:0d:cf:b5:b6:16:31:ea:10:aa:2c:e7:42:
                    a2:ab:c5:d2:fd:e6:f9:c7:64:d5:26:f6:05:e5:fd:
                    34:ee:c2:99:3a:87:7e:d5:01:b6:a7:bf:d4:f8:53:
                    52:9b:d7:30:07:56:a5:e9:b8:36:d8:4b:37:bd:53:
                    d5:00:14:c0:f0:aa:c4:57:b8:3f:e9:19:84:57:8c:
                    15:46:bf:d7:8e:ee:ed:33:c0:4e:e5:48:53:3f:ab:
                    4d:e9:81:e8:41:17:a2:46:c0:e2:b2:98:3e:50:11:
                    39:a3:28:8d:f5:b1:45:60:96:e2:58:26:2b:79:28:
                    56:6b:78:87:2b:4a:55:86:44:78:a3:2b:44:0b:95:
                    83:70:aa:5c:84:89:c3:fb:58:ac:da:a1:58:e5:43:
                    b0:7a:7d:93:ab:74:a1:3e:6c:1e:dd:04:70:a0:34:
                    41:12:41:5d:57:29:7c:f4:5a:08:82:9a:e3:af:4b:
                    a5:c6:73:e5:73:a4:ea:62:e5:5a:f8:d3:2c:21:00:
                    01:7f:a4:c8:d4:93:74:be:56:52:0c:cf:f8:58:4f:
                    d3:57:11:48:63:32:b5:74:61:91:71:f4:24:8f:02:
                    0e:ec:fc:4a:33:29:d8:d8:0b:f0:9b:52:f7:ea:d3:
                    cb:7f:d0:ec:3f:7e:fa:24:5a:83:b1:17:89:0d:c3:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1B:EA:93:D4:57:3F:93:6D:B9:0F:65:28:07:A2:F8:61:03:63:2D
            X509v3 Authority Key Identifier:
                keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:86:74:4e:54:aa:b3:8b:10:28:6d:75:43:5c:ee:fe:fc:24:
         bb:69:fb:fa:20:35:4c:97:35:99:06:f7:a3:f7:73:2c:42:4c:
         21:23:ea:79:c7:82:c3:36:d9:8c:64:cf:59:cd:a6:c0:22:3c:
         6f:be:3e:66:d2:0f:4f:0e:cd:6e:8a:cc:61:0a:0e:11:e2:ee:
         d1:50:ef:ea:d8:bc:9e:f2:14:f1:b2:ea:07:f7:17:09:70:b9:
         c5:68:8e:9f:f2:ac:87:ad:fd:ca:e9:99:fe:3a:e4:42:f1:95:
         21:0c:8b:a1:e3:9c:d6:ed:8a:20:f7:f3:8b:af:3e:c2:a7:41:
         b9:78:e2:64:1f:47:73:71:e5:27:a7:ac:47:6a:71:0a:84:20:
         cd:c3:15:3d:50:92:2d:c5:9f:4c:0b:05:65:e4:42:7f:52:c9:
         b1:92:1e:29:f8:a6:f8:33:4a:09:14:1b:4f:89:b1:d5:ca:a9:
         be:34:4c:8c:47:28:68:d1:14:8d:ff:76:35:ad:2f:a3:d5:12:
         89:68:69:5c:b7:6c:13:54:3f:33:3a:02:d3:7a:e6:ca:58:09:
         92:ff:40:7d:23:a5:b2:f1:f4:08:74:1c:6b:5b:3d:51:f8:e0:
         f0:5d:9f:46:36:ef:e8:71:58:36:6a:4a:e1:0c:39:5f:bb:1e:
         3c:bb:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:34 2026 by rpki-client