Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft
File:                     IujBtA7lecGDeWRV9Aklc9mVodI.mft (raw, json)
Hash identifier:          Nsa3lpOtqA/WZM8FaApjI9eenUUe0z76Iy6NLTyEagU=
Subject key identifier:   1B:6A:9B:8F:4B:EB:7D:DC:E9:CF:22:6A:2F:40:3C:7F:2A:B2:3D:DB
Authority key identifier: 22:E8:C1:B4:0E:E5:79:C1:83:79:64:55:F4:09:25:73:D9:95:A1:D2
Certificate issuer:       /CN=22e8c1b40ee579c183796455f4092573d995a1d2
Certificate serial:       019CAB6B4C4DC65AED04706E727EDCE2A876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IujBtA7lecGDeWRV9Aklc9mVodI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft
Manifest number:          0CA8
Signing time:             Sun 01 Mar 2026 22:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:01 +0000
Files and hashes:         1: IujBtA7lecGDeWRV9Aklc9mVodI.crl (hash: 0RjkcrI2W6/z1eXwDW5vYGnyBeC4uwlmZPChThwJuRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IujBtA7lecGDeWRV9Aklc9mVodI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:4c:4d:c6:5a:ed:04:70:6e:72:7e:dc:e2:a8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e8c1b40ee579c183796455f4092573d995a1d2
        Validity
            Not Before: Mar  1 22:01:01 2026 GMT
            Not After : Mar  2 22:01:01 2026 GMT
        Subject: CN=1b6a9b8f4beb7ddce9cf226a2f403c7f2ab23ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:95:4f:68:8a:fb:40:24:09:54:ac:0d:c1:
                    29:e8:5f:2a:e5:24:11:8c:e7:f3:b1:70:1a:0a:d9:
                    dd:47:a6:eb:9b:17:de:69:c0:bc:90:17:fe:bb:59:
                    1b:8f:dc:c2:d2:c5:54:89:e2:88:98:0b:fc:6d:53:
                    8a:c0:c2:41:76:16:69:7a:fd:08:00:0c:75:92:d7:
                    53:59:2f:40:8c:69:7b:9f:83:86:ff:61:f3:84:c3:
                    48:f5:4e:bf:e5:24:d0:15:15:21:23:ad:5c:f1:18:
                    e0:bb:4a:ee:e9:50:0f:32:98:27:3c:22:c9:d1:56:
                    86:c4:63:6e:72:93:31:4e:93:1b:7d:cf:f6:41:02:
                    ed:0f:b2:a9:b0:f3:bf:99:51:cb:dd:c1:3c:2d:73:
                    ee:26:e5:79:fd:0a:3b:7a:b6:49:af:e5:68:07:a2:
                    c9:75:3d:9f:9b:77:90:d4:61:f9:ac:97:db:e9:b9:
                    18:5b:5b:a3:31:23:4e:10:cc:74:f2:2c:d8:34:77:
                    71:6a:22:9c:f0:cc:15:df:f8:b1:26:9c:f7:73:45:
                    a1:19:37:f1:4d:77:3d:6f:90:22:ae:ec:9e:73:e5:
                    92:d1:b5:2c:9e:50:0a:7f:3d:ba:20:ac:15:d2:4a:
                    aa:a3:12:ed:f3:d9:45:39:df:c6:b7:23:04:1f:5f:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:9B:8F:4B:EB:7D:DC:E9:CF:22:6A:2F:40:3C:7F:2A:B2:3D:DB
            X509v3 Authority Key Identifier:
                keyid:22:E8:C1:B4:0E:E5:79:C1:83:79:64:55:F4:09:25:73:D9:95:A1:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IujBtA7lecGDeWRV9Aklc9mVodI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:99:6c:09:9a:12:b3:61:5b:c1:7d:2a:9c:b9:88:a9:23:
         96:29:b9:01:a9:46:4b:ea:dc:71:9f:95:01:fa:75:7f:2c:83:
         d9:41:70:73:09:da:e8:e8:10:d0:aa:af:07:26:9e:ec:92:50:
         1e:de:2c:5c:8b:39:b8:ed:d5:81:4b:6f:6d:92:52:c4:3e:03:
         05:e2:a4:1e:15:11:32:97:77:48:b2:c9:da:97:fc:a3:c4:ed:
         9a:6a:40:3a:78:02:3b:19:1d:7a:96:62:fa:b2:e1:54:52:c0:
         f1:08:44:06:ee:e4:74:c8:26:6b:40:73:8f:c1:ab:c6:25:42:
         db:43:ad:24:e9:72:86:9d:bc:ff:b8:d0:90:27:7d:fd:83:e1:
         da:04:4d:9e:74:55:63:fe:9e:f8:d6:08:e2:30:1b:32:ba:a4:
         b2:50:fe:dc:04:5a:6a:18:75:62:71:df:0d:60:05:ab:db:07:
         f5:c0:0a:cd:03:e2:eb:ce:09:10:a6:f1:33:a7:75:40:ce:a4:
         a7:3d:40:54:9f:37:25:85:9a:4e:99:86:92:3b:e5:85:c7:10:
         6e:61:57:06:2f:49:37:57:89:da:4b:27:3e:13:77:36:b2:27:
         e9:1f:eb:07:35:b3:61:8f:2b:9e:f3:99:3c:15:ac:77:6b:71:
         0d:3b:58:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra0xNxlrtBHBucn7c4qh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZThjMWI0MGVlNTc5YzE4Mzc5NjQ1NWY0MDkyNTczZDk5
NWExZDIwHhcNMjYwMzAxMjIwMTAxWhcNMjYwMzAyMjIwMTAxWjAzMTEwLwYDVQQD
EygxYjZhOWI4ZjRiZWI3ZGRjZTljZjIyNmEyZjQwM2M3ZjJhYjIzZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0mVT2iK+0AkCVSsDcEp6F8q5SQR
jOfzsXAaCtndR6brmxfeacC8kBf+u1kbj9zC0sVUieKImAv8bVOKwMJBdhZpev0I
AAx1ktdTWS9AjGl7n4OG/2HzhMNI9U6/5STQFRUhI61c8Rjgu0ru6VAPMpgnPCLJ
0VaGxGNucpMxTpMbfc/2QQLtD7KpsPO/mVHL3cE8LXPuJuV5/Qo7erZJr+VoB6LJ
dT2fm3eQ1GH5rJfb6bkYW1ujMSNOEMx08izYNHdxaiKc8MwV3/ixJpz3c0WhGTfx
TXc9b5Airuyec+WS0bUsnlAKfz26IKwV0kqqoxLt89lFOd/GtyMEH1+thwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtqm49L633c6c8iai9APH8qsj3bMB8GA1UdIwQY
MBaAFCLowbQO5XnBg3lkVfQJJXPZlaHSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVqQnRBN2xlY0dEZVdSVjlBa2xjOW1Wb2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MjlkMDctN2UzYi00YzlhLWFmOTEt
ZTIxMmZkNDM4OTdhLzEvSXVqQnRBN2xlY0dEZVdSVjlBa2xjOW1Wb2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MjlkMDctN2UzYi00YzlhLWFmOTEtZTIxMmZkNDM4OTdh
LzEvSXVqQnRBN2xlY0dEZVdSVjlBa2xjOW1Wb2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvuZbAma
ErNhW8F9Kpy5iKkjlim5AalGS+rccZ+VAfp1fyyD2UFwcwna6OgQ0KqvByae7JJQ
Ht4sXIs5uO3VgUtvbZJSxD4DBeKkHhURMpd3SLLJ2pf8o8TtmmpAOngCOxkdepZi
+rLhVFLA8QhEBu7kdMgma0Bzj8GrxiVC20OtJOlyhp28/7jQkCd9/YPh2gRNnnRV
Y/6e+NYI4jAbMrqkslD+3ARaahh1YnHfDWAFq9sH9cAKzQPi684JEKbxM6d1QM6k
pz1AVJ83JYWaTpmGkjvlhccQbmFXBi9JN1eJ2ksnPhN3NrIn6R/rBzWzYY8rnvOZ
PBWsd2txDTtYLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:01 2026 by rpki-client