Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          ZLeMoOmWdVu/c03kM20yY37LAcIA1XKtd7tYIV8aDO0=
Subject key identifier:   61:D3:40:F5:49:11:32:E5:FC:CB:58:0B:FA:D2:DB:5D:EA:19:5C:E8
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       019CAC0FFA04156863A0BE79184705A180AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 01:00:54 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:54 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:54 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: qk/0yKqUarvJ3UNKWu8UrvTud+KjHGCPsHbteqKqQMA=)
                          2: r8PbpDzHXgfJiNwt0p1njiTGzqA.roa (hash: +SJYxb1bGepByhIB3drzHoM1u1Z/gMv0EMWpc82/7BA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:fa:04:15:68:63:a0:be:79:18:47:05:a1:80:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: Mar  2 01:00:54 2026 GMT
            Not After : Mar  3 01:00:54 2026 GMT
        Subject: CN=61d340f5491132e5fccb580bfad2db5dea195ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:28:d3:d1:31:b7:5c:bf:89:e9:69:03:74:
                    e7:37:b6:ca:ec:1e:fd:dc:2e:61:67:09:80:5e:7e:
                    66:51:30:23:04:3e:64:86:25:c1:84:03:bf:3e:4a:
                    fb:38:09:f2:77:16:4c:17:36:14:1f:22:52:86:38:
                    e4:cc:48:c3:61:ae:a7:d9:f4:13:12:ef:e6:ad:ec:
                    8a:bc:e2:91:3a:54:0e:96:31:0f:0e:88:e2:ad:1b:
                    dd:62:bf:ce:ce:fe:3f:75:f8:5d:3d:84:9d:da:80:
                    db:eb:4d:a2:26:1d:59:22:24:29:95:68:47:f6:cb:
                    94:05:61:11:17:fb:f9:55:30:45:f0:d2:41:17:b8:
                    8e:b7:78:0a:2d:af:5f:3e:cd:b1:1b:21:c9:78:8d:
                    4e:71:09:3f:b9:d9:29:2d:e0:68:72:d2:fa:52:1a:
                    9b:d6:19:fb:c2:c9:c8:d2:25:c0:cf:0e:e8:45:ec:
                    08:81:f8:cc:3f:55:b8:19:95:eb:f2:46:2b:13:b7:
                    72:ed:ab:cb:b2:c1:f0:3a:5a:69:42:0d:93:83:d3:
                    38:6e:d7:83:0f:3a:98:b1:39:97:54:f1:f2:ca:ad:
                    da:ad:64:0d:ef:ae:35:92:b1:0a:33:a5:32:d9:e4:
                    5e:30:f4:25:ae:92:3c:a5:ad:64:97:47:57:99:d1:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D3:40:F5:49:11:32:E5:FC:CB:58:0B:FA:D2:DB:5D:EA:19:5C:E8
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:64:0d:da:0d:21:74:f8:c3:c5:a0:ee:5b:fe:1e:d3:b2:
         2c:d3:b6:a7:c5:7b:69:7a:e8:ce:45:7c:f0:d3:13:7d:95:08:
         c9:c5:6e:ff:07:b4:83:12:fd:fc:35:39:1f:6d:c7:db:27:8f:
         cd:dd:1f:37:51:c8:ef:39:74:32:95:6e:84:92:b3:b3:22:c4:
         c1:ec:b1:11:2b:94:c8:c5:35:9f:df:77:82:33:80:6d:6f:f6:
         bc:00:92:5a:0a:cb:97:80:ff:3c:67:28:e8:a1:dc:7b:87:18:
         82:86:d0:9b:13:06:26:f8:d8:f4:28:66:de:19:d7:23:66:b4:
         cf:c1:14:75:5f:8a:e3:41:07:04:b6:f8:c1:f3:67:2e:18:55:
         ac:c4:9f:d1:ab:4e:84:3e:78:bc:f6:47:c4:27:35:3e:41:d2:
         49:de:ae:d7:38:ad:79:1e:b8:11:54:9c:2f:d1:a4:f6:85:fd:
         47:9f:11:b6:d5:e8:44:a2:b4:0c:30:41:d6:bf:63:ca:a1:5b:
         0f:b5:e7:57:72:47:23:85:f8:24:cb:c4:b7:13:25:10:c6:a4:
         5f:6d:10:8d:26:c4:c0:90:d0:92:40:2d:1c:25:90:e0:a9:34:
         ed:bd:d1:b4:2b:1d:84:e3:6c:e8:ba:3c:19:be:a3:a9:89:d9:
         c5:f2:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:52 2026 by rpki-client