Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
File:                     A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json)
Hash identifier:          MwY+dDkftYeaTn2R4N/rbgDD2fXNLWDgJ/lHHvC018w=
Subject key identifier:   1C:F0:C5:46:D6:70:C6:37:CA:47:CC:8B:E7:42:BB:C8:15:06:8A:55
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Certificate issuer:       /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial:       019CABA26424CD90844D8AC7378B4222227A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 23:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:12 +0000
Files and hashes:         1: 0jj85-oYukZPfmdDqoWSsZvTa3s.roa (hash: 9CTe2BfWzoRqe7mB+Ls1PH8RMNgBpSi/kK2iHWVfBTg=)
                          2: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: D5WIDCBWliqQaZUnSn1ZsdzmoIaSWJ5Ai8SQdf6sDXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:64:24:cd:90:84:4d:8a:c7:37:8b:42:22:22:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
        Validity
            Not Before: Mar  1 23:01:12 2026 GMT
            Not After : Mar  2 23:01:12 2026 GMT
        Subject: CN=1cf0c546d670c637ca47cc8be742bbc815068a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:b5:4d:21:77:0b:de:4f:0d:8d:58:a1:f1:
                    7b:15:ec:d7:ac:64:91:47:77:0f:03:ff:18:7d:95:
                    fe:0b:33:74:7f:55:7c:8d:0a:21:01:31:2b:70:a5:
                    ba:cc:6b:dc:fa:5b:39:82:3b:c8:54:f9:d9:cf:62:
                    70:65:d5:bc:6f:1c:d8:28:32:b5:ff:56:20:01:71:
                    46:b9:8c:e1:ce:7f:7a:88:f4:f4:a5:88:34:7f:3c:
                    d3:fd:57:59:8a:62:42:6b:46:66:d2:c0:96:55:d9:
                    a0:f9:94:8b:64:0e:a0:6b:5d:35:32:ed:60:b5:b1:
                    72:09:be:f0:76:98:03:0e:9d:be:42:e6:0f:fc:fe:
                    62:12:85:f1:c9:32:23:74:4a:7f:a1:89:31:62:1f:
                    53:d2:ad:c3:ee:e4:80:1a:23:bf:e1:39:66:93:88:
                    e1:59:0d:77:68:7e:21:9c:0a:22:bc:07:c3:66:6c:
                    a3:cb:f4:f8:36:2e:52:c1:27:fc:38:1f:ab:8f:38:
                    53:db:38:d9:8f:3d:d0:df:fd:e1:d2:de:fb:8e:b5:
                    74:b3:5e:b9:4b:9e:ed:f1:09:d7:3b:f5:25:24:f3:
                    a2:8f:16:77:f2:ee:19:03:f6:3d:83:7f:59:f0:0e:
                    8a:62:33:31:ad:30:f9:59:31:f6:ed:52:4b:b8:69:
                    c3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:C5:46:D6:70:C6:37:CA:47:CC:8B:E7:42:BB:C8:15:06:8A:55
            X509v3 Authority Key Identifier:
                keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:03:6a:30:0a:3b:e9:67:cb:71:40:c3:35:13:40:54:69:30:
         f6:3a:9a:2b:8a:9f:e0:db:7f:a8:94:50:c1:76:20:76:17:e8:
         c0:68:57:c9:ac:02:ed:0e:60:b9:b8:69:e0:30:3c:7c:79:f9:
         e7:b8:e5:bc:1f:63:c1:75:88:f1:5e:03:54:a0:40:2f:ee:79:
         22:1d:98:0b:e2:ce:71:e1:3b:f7:86:e4:6d:d9:17:17:83:11:
         63:a2:c4:6e:c1:29:fe:9c:6d:3f:da:a7:21:8b:a5:9b:64:28:
         41:a0:2c:8f:b2:b6:b4:45:da:eb:79:3c:ea:c7:76:58:d4:dd:
         24:56:30:59:81:5d:e8:69:6f:b2:c5:2b:c6:8b:2a:73:bb:fc:
         e8:f2:76:ad:d8:bb:1e:96:dd:7b:a4:ef:1f:22:35:32:fc:85:
         8d:76:de:60:c2:72:6c:7b:a4:62:ab:f0:db:cc:e3:c4:28:bf:
         0f:bc:77:95:80:f4:58:f8:9b:86:5a:31:97:bb:2a:f8:5e:32:
         3d:55:71:3c:8b:90:bd:0a:6b:0f:4d:f5:a4:8e:95:52:93:5d:
         29:90:91:9c:ff:1c:19:b4:f8:a6:ad:7d:7c:5b:9b:27:f5:92:
         a6:f4:48:4f:89:c0:61:26:e8:6b:ec:cb:3c:00:01:ab:9e:46:
         ae:76:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:30 2026 by rpki-client