Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          GQt87Rbx5fSjgYDw0IpKCe/fSVGG6+rJq0GZdlo2Mdc=
Subject key identifier:   BD:E2:C5:71:10:72:F4:97:08:AF:E7:BF:0C:F4:DF:C7:7A:4D:8C:79
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       019CAD2311A7C18CA504A53B7DAE9B953139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 06:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:22 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: 6iGHtdZK5cQExJl29USSrfu7wBpb7qYa41a4S/ePgMg=)
                          2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:23:11:a7:c1:8c:a5:04:a5:3b:7d:ae:9b:95:31:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Mar  2 06:01:22 2026 GMT
            Not After : Mar  3 06:01:22 2026 GMT
        Subject: CN=bde2c5711072f49708afe7bf0cf4dfc77a4d8c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:fd:30:1c:f9:69:33:2d:c3:de:c2:4a:83:
                    80:27:70:4a:1d:92:ae:4d:34:13:e3:49:c9:db:7c:
                    33:b8:a9:a4:35:24:50:47:eb:7a:97:0d:29:20:94:
                    3d:49:d1:1b:6c:ca:31:34:87:b6:0c:99:b0:d2:a1:
                    db:cf:86:01:26:2d:bb:d1:25:ec:73:f0:bb:22:d5:
                    63:80:cb:17:0f:a5:33:69:24:3a:a5:e6:09:85:62:
                    2c:a9:f6:c3:25:9a:ba:51:7f:57:40:72:24:df:8a:
                    b4:6e:09:32:82:0a:85:9b:9b:68:b6:b6:be:ac:6d:
                    53:24:04:13:d5:97:ba:f8:a5:6c:de:20:1f:13:9c:
                    f1:e1:e5:6b:91:67:3c:6b:5a:58:33:86:24:42:12:
                    87:62:aa:f0:c5:5c:59:98:6a:c9:28:ba:12:95:d2:
                    49:51:e4:d9:25:5a:4b:b0:7d:52:e7:3d:99:c9:d1:
                    57:7f:c8:8c:c3:7f:91:7c:0d:e6:0f:bf:f7:c4:13:
                    5e:34:9c:fe:49:3d:0c:c4:54:d4:0d:fe:cc:24:73:
                    34:2c:cc:10:b7:64:a2:f8:ac:9f:fa:9b:c5:d8:21:
                    2d:c9:91:fa:d3:41:56:41:eb:b9:90:be:ce:59:69:
                    18:5a:67:89:77:81:f2:0b:61:8a:cb:0d:26:9e:8a:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E2:C5:71:10:72:F4:97:08:AF:E7:BF:0C:F4:DF:C7:7A:4D:8C:79
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:fd:2f:74:eb:84:ce:f5:05:3e:83:a9:80:60:5d:6b:ab:
         8e:00:65:14:77:83:f3:70:25:3f:d1:1b:08:8e:75:b5:7f:11:
         e0:7b:d5:74:28:78:8c:b1:5c:48:2d:88:1a:8c:dd:21:e6:2d:
         36:5a:cc:8a:49:4f:82:cb:4e:a1:d7:29:35:28:e2:ce:0c:1c:
         ff:dc:b6:c8:6e:85:9f:a5:a1:d0:19:17:3f:a2:43:94:8d:87:
         e3:9e:03:a7:79:a8:d9:ea:23:58:aa:f3:85:1b:29:5a:f0:b9:
         bb:30:1d:78:ea:79:bf:e8:9a:1b:dd:3a:6f:4c:97:c0:65:22:
         15:20:c3:8a:20:da:60:85:2a:fe:66:fe:c5:d5:38:2b:3e:6f:
         1f:2d:a2:8f:02:1f:65:9e:9a:fc:8d:20:3b:1a:bb:3f:0b:69:
         00:ae:09:69:fd:0a:c7:c3:f5:4a:6b:f4:0b:10:62:3d:6b:9e:
         a9:81:0d:96:70:df:4f:bb:fe:0c:16:2c:6c:c4:bf:6b:3d:5a:
         65:f5:fd:fc:88:85:43:8d:27:42:73:2b:8e:20:de:5f:1d:7b:
         61:70:75:cc:e0:a0:e3:fd:fe:fd:eb:39:d8:e1:f7:8d:c7:d2:
         78:a1:23:44:a9:84:6b:c6:c5:4b:b9:5d:e1:83:68:7f:fd:99:
         03:ae:9c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIxGnwYylBKU7fa6blTE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDk4Y2QzMjdlYTMzYmZmODYyOWQ3ZjQ5ZDZiZTNhZGM1
ZmYzMmMwHhcNMjYwMzAyMDYwMTIyWhcNMjYwMzAzMDYwMTIyWjAzMTEwLwYDVQQD
EyhiZGUyYzU3MTEwNzJmNDk3MDhhZmU3YmYwY2Y0ZGZjNzdhNGQ4Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjH9MBz5aTMtw97CSoOAJ3BKHZKu
TTQT40nJ23wzuKmkNSRQR+t6lw0pIJQ9SdEbbMoxNIe2DJmw0qHbz4YBJi270SXs
c/C7ItVjgMsXD6UzaSQ6peYJhWIsqfbDJZq6UX9XQHIk34q0bgkyggqFm5totra+
rG1TJAQT1Ze6+KVs3iAfE5zx4eVrkWc8a1pYM4YkQhKHYqrwxVxZmGrJKLoSldJJ
UeTZJVpLsH1S5z2ZydFXf8iMw3+RfA3mD7/3xBNeNJz+ST0MxFTUDf7MJHM0LMwQ
t2Si+Kyf+pvF2CEtyZH600FWQeu5kL7OWWkYWmeJd4HyC2GKyw0mnop9RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3ixXEQcvSXCK/nvwz038d6TYx5MB8GA1UdIwQY
MBaAFNdJjNMn6jO/+GKdf0nWvjrcX/MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQt
YWRlMmJhYmNiOGQwLzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQtYWRlMmJhYmNiOGQw
LzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6H9L3Tr
hM71BT6DqYBgXWurjgBlFHeD83AlP9EbCI51tX8R4HvVdCh4jLFcSC2IGozdIeYt
NlrMiklPgstOodcpNSjizgwc/9y2yG6Fn6Wh0BkXP6JDlI2H454Dp3mo2eojWKrz
hRspWvC5uzAdeOp5v+iaG906b0yXwGUiFSDDiiDaYIUq/mb+xdU4Kz5vHy2ijwIf
ZZ6a/I0gOxq7PwtpAK4Jaf0Kx8P1Smv0CxBiPWueqYENlnDfT7v+DBYsbMS/az1a
ZfX9/IiFQ40nQnMrjiDeXx17YXB1zOCg4/3+/es52OH3jcfSeKEjRKmEa8bFS7ld
4YNof/2ZA66clw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:31 2026 by rpki-client