Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File:                     OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier:          AgQ0Jn17YmOvrJ7KWv1JIT9NPJYGZdeFWNeDKwnAh2U=
Subject key identifier:   C1:C0:D4:74:FF:F6:C6:D8:28:40:AD:A7:B7:ED:A3:9A:24:CA:14:02
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer:       /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial:       019CAC468896EC728EFFBF248CFD6EAB45A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 02:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:29 +0000
Files and hashes:         1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: dhWpT7veF2Mn5Rjz4qYCBd7XRBlgoe5jsjQzsvfN2Mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:88:96:ec:72:8e:ff:bf:24:8c:fd:6e:ab:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
        Validity
            Not Before: Mar  2 02:00:29 2026 GMT
            Not After : Mar  3 02:00:29 2026 GMT
        Subject: CN=c1c0d474fff6c6d82840ada7b7eda39a24ca1402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:03:02:59:19:ad:13:ff:68:86:32:30:29:
                    0f:d4:d4:20:56:83:06:e8:c6:c1:af:c7:6a:d1:8e:
                    a3:f6:cc:ea:f8:35:90:af:02:57:d8:84:ce:1b:71:
                    90:ee:cb:cf:c1:27:2b:38:bd:ad:62:b2:ea:f6:58:
                    52:33:7e:8a:ac:d4:4d:4c:6d:06:a8:7a:88:c5:02:
                    ee:c3:85:85:7c:d9:41:fc:18:03:53:66:ea:1c:af:
                    a7:12:7d:94:82:39:b9:7a:c3:94:c7:bc:5d:9f:35:
                    3f:8b:49:f6:dd:e2:81:1a:81:24:a7:b4:97:d3:bc:
                    3d:d2:c6:5c:b2:8e:68:9c:15:61:00:66:01:1d:a0:
                    87:ef:9b:8a:7d:9a:f9:65:e0:8b:f7:62:a6:2f:4c:
                    72:6f:27:8f:65:cd:f5:18:6a:6b:c2:5b:e9:08:ef:
                    f3:33:c0:fd:8a:d4:15:e6:c3:f6:2d:b2:92:4c:6a:
                    dc:fb:18:cd:b4:8f:af:1c:d9:26:4e:88:c7:d5:13:
                    d4:2d:1d:ff:e8:93:9c:b9:7a:fd:a3:dc:7e:60:2c:
                    cb:81:34:bb:4c:70:c5:68:43:dc:40:9c:d0:82:f4:
                    c2:c2:b0:80:78:bb:42:6d:6f:b0:aa:bc:ee:0e:41:
                    87:e9:36:29:fa:ba:88:63:b8:72:c6:1b:b9:59:39:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:D4:74:FF:F6:C6:D8:28:40:AD:A7:B7:ED:A3:9A:24:CA:14:02
            X509v3 Authority Key Identifier:
                keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:39:0f:27:ba:ac:58:be:22:60:bb:6d:25:9f:69:eb:1a:cc:
         65:c8:99:bd:01:a9:b5:5d:65:71:57:52:c4:4c:cf:a1:47:22:
         be:09:b0:81:a4:df:68:2c:3a:0d:5d:37:d1:b2:82:e3:1f:81:
         cf:19:ba:d7:3b:7f:90:91:ae:95:44:4a:e4:b1:e8:33:71:98:
         b6:80:fa:38:5d:25:83:8b:6d:47:74:32:c7:d4:52:7f:3f:36:
         f5:6c:fa:ed:22:66:80:b2:01:7b:08:2a:14:e6:ac:34:19:5c:
         0e:56:87:60:91:fe:a6:e6:ce:aa:ee:e6:f7:47:83:27:01:a2:
         91:5e:37:ab:32:9a:37:e9:ab:03:51:75:7f:84:a5:88:9e:fc:
         87:e8:f9:63:bb:eb:46:28:25:e7:2e:41:95:90:89:f4:87:3e:
         86:9c:1b:e8:b4:a5:ef:9e:01:4c:23:04:5a:9b:86:67:e5:97:
         27:03:6d:a2:15:53:46:70:35:58:a8:38:19:d0:4f:90:72:67:
         ac:72:5e:90:53:08:8b:14:62:cc:5a:ff:25:63:d0:5a:2e:4f:
         94:e6:24:74:e7:f7:20:39:50:98:73:34:b0:20:4f:ad:ae:0c:
         f7:a0:6f:d2:72:bc:b6:7c:c4:5e:b6:da:b3:1c:c1:7c:2f:bb:
         7d:d6:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:11 2026 by rpki-client