Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          ce7z9JR/FRU5Auz+Vupw7Q2tYFf8E2thq4M6hbMrdl0=
Subject key identifier:   21:4C:4F:94:9F:5D:F0:75:2B:7D:89:A0:FF:26:12:77:6D:0D:11:FC
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019CAA592188B24387DDDC9C77D98126D3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          1813
Signing time:             Sun 01 Mar 2026 17:01:33 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:33 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:33 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: 22nEukFcbSwfNAomu4yl+b9XIhCvAfrAZMQvUnHvAW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:21:88:b2:43:87:dd:dc:9c:77:d9:81:26:d3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Mar  1 17:01:33 2026 GMT
            Not After : Mar  2 17:01:33 2026 GMT
        Subject: CN=214c4f949f5df0752b7d89a0ff2612776d0d11fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:d5:3b:19:c8:b6:c8:42:16:40:ac:e2:5a:
                    5e:12:5c:49:48:21:7d:01:bc:37:28:1a:60:c0:b8:
                    cd:66:92:4b:be:10:27:70:f1:b1:2d:5c:70:d6:b1:
                    f3:0a:b0:da:f0:10:31:75:da:e8:03:6f:b6:a4:68:
                    31:43:ab:c3:fd:15:05:b6:e8:23:d9:01:f5:36:24:
                    34:c9:3b:11:4d:de:93:b2:30:d7:d9:ae:e1:ad:90:
                    20:bf:90:e5:71:b7:12:74:cb:58:f9:a8:7a:0f:48:
                    2a:3a:cc:26:d7:73:15:b9:2f:0b:63:0c:d6:62:85:
                    55:f0:34:18:fd:3d:1d:6b:03:94:6e:a2:d3:1c:a2:
                    04:7c:87:dc:46:ba:76:a2:57:49:c1:a5:d9:3b:01:
                    6b:e2:2c:c3:cb:1e:cd:fb:88:7e:bf:ab:c5:4d:d5:
                    b9:b9:9f:ee:91:97:34:d8:39:bf:41:1c:12:5a:cf:
                    30:8e:f5:81:29:df:b0:0a:02:1a:55:b6:ef:56:a2:
                    67:40:aa:a3:76:e9:ac:a4:ec:7d:1d:fc:f5:4d:ff:
                    c1:f6:40:1d:a4:2a:d5:b8:44:30:00:44:ed:77:03:
                    90:c3:75:ff:02:32:14:7a:44:fa:f7:54:e6:1a:f0:
                    30:97:29:6c:d8:c9:06:62:df:5d:5a:e6:29:4a:c1:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:4F:94:9F:5D:F0:75:2B:7D:89:A0:FF:26:12:77:6D:0D:11:FC
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:b8:12:32:c7:5b:3a:d1:f5:4d:1d:30:54:b6:54:6c:a0:
         f9:c2:47:9d:f4:91:75:ce:5b:a9:b1:af:3d:ec:60:99:d7:2c:
         9d:5a:90:d3:4d:bb:80:e9:8d:9d:23:e6:36:00:e8:90:db:c6:
         c7:fd:fe:4c:9e:ab:8b:6a:23:b9:49:8c:93:2d:5a:6e:0c:77:
         39:a9:79:a9:a4:51:45:9d:f3:17:ed:20:51:f0:50:52:59:cd:
         87:cb:8b:57:62:11:93:e2:8a:3b:37:99:65:9a:ab:bf:57:79:
         7d:1d:9e:f5:2f:2f:80:14:96:a3:cc:95:81:42:b6:91:97:8a:
         8f:af:1b:3b:ab:47:df:46:ba:24:45:c1:03:ac:4c:71:76:7a:
         fe:32:12:23:fb:bc:05:b4:52:36:59:3f:be:54:a7:76:4b:91:
         35:5b:39:ab:b8:f7:ea:b1:46:5a:a2:3a:fd:56:eb:71:06:7a:
         79:ec:82:38:25:02:1b:dd:94:31:52:d3:ee:62:02:64:d4:3b:
         b0:60:19:10:a1:d1:bf:0b:17:e3:68:3c:32:a1:66:2f:bb:b2:
         64:b8:78:4c:fb:d1:90:74:9f:e4:18:47:34:98:51:cf:eb:84:
         ce:bd:8b:8c:dc:ef:bf:7e:87:9b:15:0f:1f:6d:68:8d:56:14:
         f1:64:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:48 2026 by rpki-client