Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File:                     B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier:          +68Wy5567hwnAvHS0NYtMJo6509SaMuLZczHGLKtedI=
Subject key identifier:   F1:DD:4C:0E:2A:AB:9B:89:DB:14:1B:A1:F1:54:20:9C:FD:09:61:BD
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer:       /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial:       019CAAC65B9E32428226134979FF39E96045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number:          13B6
Signing time:             Sun 01 Mar 2026 19:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:52 +0000
Files and hashes:         1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: EVPgElMZqDXb01u7CnLQBmYD6o5cluOCrQmSHqPzgMI=)
                          2: aj-7Q6-jz1X5ml3Zo_ezji9nyp0.roa (hash: ctiS31QHzRCLWu4eXUhOOHg5pxlmeJ2+c2/2FvVGuLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:5b:9e:32:42:82:26:13:49:79:ff:39:e9:60:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
        Validity
            Not Before: Mar  1 19:00:52 2026 GMT
            Not After : Mar  2 19:00:52 2026 GMT
        Subject: CN=f1dd4c0e2aab9b89db141ba1f154209cfd0961bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:33:dc:9f:3c:36:45:15:c1:06:32:6a:ad:
                    9d:36:88:5c:a0:fc:bd:db:c1:f0:88:e7:14:44:e4:
                    44:d4:ea:b2:5e:c9:52:d2:eb:2f:c6:b4:4a:f7:30:
                    1c:b4:19:0c:84:1c:42:a2:a6:33:23:c9:ef:01:73:
                    18:95:82:08:7b:ee:c5:ff:e3:37:27:2b:7f:56:3c:
                    6f:7f:e4:d4:31:99:81:e4:ff:3b:41:76:24:b0:9d:
                    fd:ee:b3:e8:2a:b9:ca:8e:74:af:e0:05:1f:d1:48:
                    38:c2:3a:84:3f:f4:89:53:9a:cc:f5:57:b7:e8:05:
                    69:98:34:89:78:88:23:ed:da:6b:0d:75:49:61:48:
                    4e:4f:5b:1e:08:82:20:73:20:03:08:02:b2:30:99:
                    08:ea:b8:4c:84:41:09:82:f7:60:57:f6:f2:c1:ee:
                    6a:9e:25:b8:ee:d9:cf:05:fd:71:b2:45:d2:e6:af:
                    e4:4a:61:b4:20:69:29:1c:75:42:a8:ee:2b:e7:0f:
                    68:3b:f4:f5:95:30:51:2f:d3:c4:26:ed:8c:27:08:
                    fd:43:6a:f6:db:7f:8e:0a:37:cb:74:b2:4c:dc:7e:
                    eb:29:98:d3:44:31:c8:d5:80:99:75:23:c4:8e:6d:
                    23:c8:53:08:d7:0f:3a:db:87:2d:62:11:f0:67:59:
                    79:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:4C:0E:2A:AB:9B:89:DB:14:1B:A1:F1:54:20:9C:FD:09:61:BD
            X509v3 Authority Key Identifier:
                keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:22:24:31:64:ce:cb:d2:a7:45:45:51:a4:9a:58:00:1e:07:
         5a:8c:e0:85:ad:92:16:6c:4f:42:b2:74:ad:a2:c1:c5:d9:6b:
         0e:7d:4c:98:82:fc:59:5a:12:b4:4b:70:21:55:3a:66:32:40:
         62:69:40:b7:64:8a:23:be:f6:7e:b8:84:41:b3:dd:f3:2a:db:
         ea:60:a0:86:56:86:d9:02:06:d4:0b:fa:2c:26:90:06:f3:26:
         3e:17:8b:b0:fa:3d:1f:6e:e9:ec:a6:13:32:2f:df:69:c4:8d:
         93:e6:ba:9f:aa:03:cc:60:fd:f6:f5:27:36:ad:ca:38:84:dd:
         44:cf:15:df:dd:cc:d9:c1:33:6d:eb:ca:82:07:f6:c5:5b:09:
         4d:da:49:68:6a:0c:d8:f7:37:a7:18:24:59:4b:29:0e:aa:fa:
         fa:ed:2a:d9:d7:37:98:f8:54:6b:11:88:13:d2:44:d8:f7:e9:
         ab:b7:0c:05:4b:40:18:e8:58:ab:6c:9e:7c:57:26:04:72:b3:
         ca:76:d0:b7:e1:bb:ef:a8:e0:3b:01:ae:15:d2:a3:f1:cf:bf:
         e8:6a:18:7c:21:50:f6:95:98:3c:22:87:26:fc:da:e4:89:af:
         4d:a5:35:27:30:8f:f8:eb:4c:fd:12:51:72:64:34:d6:c3:b7:
         8f:25:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:06 2026 by rpki-client