Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          2Q7iPR60cHe+sWCPoRtGEUx+9OfLcy7PhWFl3td3QCQ=
Subject key identifier:   A6:6F:0E:F9:28:33:D2:31:A3:4E:6B:18:1B:7A:D6:5C:9D:BD:72:85
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       019CADC7D82F6837A4AFD6608C54D0B7BEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 09:01:21 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:21 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:21 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: MbXzpxwd49xXIfaKwqWPeNsI11uSUu/7H+LVYf9YDkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:d8:2f:68:37:a4:af:d6:60:8c:54:d0:b7:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Mar  2 09:01:21 2026 GMT
            Not After : Mar  3 09:01:21 2026 GMT
        Subject: CN=a66f0ef92833d231a34e6b181b7ad65c9dbd7285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:85:3e:46:85:0c:c9:3e:02:8d:b3:94:d6:
                    e9:45:6d:7a:dd:b2:34:c7:dc:13:f6:7b:cf:42:46:
                    48:34:f2:47:49:b1:b7:b2:17:0d:54:96:85:3f:4c:
                    82:17:ea:98:29:be:a7:41:c0:1e:4c:ef:07:e3:32:
                    57:7f:e9:cf:68:c4:f0:50:26:46:d9:f3:41:d5:71:
                    18:c4:59:35:68:6e:60:c8:58:f4:9c:4a:2e:f7:b6:
                    3e:bb:04:33:5a:94:35:29:41:d8:ac:0c:10:c1:ca:
                    aa:63:50:2e:d6:3a:7b:14:02:cb:92:73:02:7e:77:
                    ea:b3:0c:ac:85:55:75:d0:a3:8d:1d:94:b7:02:7c:
                    2f:fe:f8:97:98:b4:20:2b:95:ad:5f:90:a4:92:de:
                    20:0a:f8:a3:dc:9c:fa:fa:d1:8d:e8:40:7b:4c:fb:
                    b2:fe:f6:a4:ee:c4:d1:30:6f:e1:8d:ed:ae:1d:e8:
                    8d:cd:c2:fb:0d:a5:cd:18:82:70:fa:18:bb:e1:05:
                    f6:10:d5:37:3f:39:e3:d9:03:44:f6:b4:91:88:46:
                    7c:e0:cb:c7:5d:dc:5a:e1:9f:0e:fd:03:63:fa:28:
                    83:de:de:63:bc:27:48:d9:2a:3f:41:8e:d8:fb:53:
                    ac:c5:e2:30:11:34:85:b9:5e:4a:be:2b:57:6f:60:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6F:0E:F9:28:33:D2:31:A3:4E:6B:18:1B:7A:D6:5C:9D:BD:72:85
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:0c:32:67:a3:36:1c:60:ae:6d:7f:db:85:c3:fb:dc:5e:
         0a:b0:30:18:05:a0:05:03:26:36:54:76:f5:a7:c5:6c:de:ac:
         ca:af:ad:8c:b5:26:56:94:27:f0:49:42:52:49:44:1f:f6:da:
         54:92:c6:49:89:f4:e9:bc:f9:49:94:fa:6a:57:d4:57:68:53:
         b0:ed:25:44:4f:42:0a:69:b4:f7:a4:5d:5c:4e:3a:74:a3:2e:
         99:22:a6:90:bd:b8:8e:af:f1:7c:fe:dc:0c:63:85:5e:ca:54:
         d8:ee:a0:71:1e:ef:0c:fd:5b:75:46:94:08:63:e8:39:57:af:
         41:7e:cd:49:70:5e:06:b9:67:47:12:b2:ac:38:9f:31:82:ed:
         cf:b6:e0:67:7f:9b:5f:ec:1c:ab:e6:a6:8e:5e:4e:72:74:a7:
         bb:e5:0c:56:20:3e:c1:14:28:f9:4f:1a:ab:f2:e9:f3:c9:e6:
         3f:41:56:c7:a8:dd:a1:a9:4e:4d:51:58:8d:2b:d1:24:3b:bb:
         7a:75:6a:35:41:6e:bf:f3:79:46:45:75:72:c3:f9:a0:d4:01:
         6e:a2:ca:40:4e:cc:e6:33:b9:ee:8c:77:e6:ac:7f:88:93:14:
         ea:3f:b7:7f:16:f3:c2:2b:0a:b7:ad:bb:71:3d:5e:2a:2f:8c:
         0f:9a:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:38 2026 by rpki-client