Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File:                     guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier:          wraap0YSBErBcFqqarwrj5/YeAev0bi/CXiluJc/Eww=
Subject key identifier:   18:E1:D0:9C:6F:85:67:29:85:25:4A:E5:2E:5D:3F:71:D8:5B:54:FC
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer:       /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial:       019CAFB675D4F1C9B3F0CA5DACB8FFBC704B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 18:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 18:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 18:01:36 +0000
Files and hashes:         1: Tz1-N59sSfd-X1uanpY0uE0n3Z8.roa (hash: TjI9Conr3Wy1dhn8UqIMqHZ2WlgAzdiybMSutLCTCzk=)
                          2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: nsBzeUTDiFIVnNu5kRPjyfBkI05TnEftiyHHcsqe/oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b6:75:d4:f1:c9:b3:f0:ca:5d:ac:b8:ff:bc:70:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
        Validity
            Not Before: Mar  2 18:01:36 2026 GMT
            Not After : Mar  3 18:01:36 2026 GMT
        Subject: CN=18e1d09c6f85672985254ae52e5d3f71d85b54fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:e9:16:44:87:27:03:26:fd:e7:0f:7b:bd:
                    b9:52:c3:08:87:ed:18:cf:24:f0:f1:bb:64:ea:25:
                    ad:9a:5b:a6:08:7c:cd:b6:cf:b8:55:c5:6f:27:74:
                    c1:83:15:81:35:eb:28:ca:35:77:6d:88:7d:0b:71:
                    bd:fd:51:41:69:99:c9:98:b0:e2:3f:a9:75:57:58:
                    d3:81:98:f9:39:70:33:cc:e0:03:f7:b3:71:2b:8b:
                    bd:d1:05:a1:bb:91:8a:25:ca:a8:3d:32:f0:bf:cd:
                    bc:90:c0:bf:b4:fb:09:1a:76:2a:b1:bd:b1:9d:4e:
                    eb:2d:7d:1e:73:07:c0:db:ae:cc:67:7c:c1:d0:f9:
                    43:ee:00:b9:6c:a2:65:da:6d:3a:fd:fd:22:ce:8f:
                    e4:4c:a5:4c:45:96:88:96:50:e1:69:f8:4e:1f:52:
                    74:af:14:9e:58:90:b1:f8:bd:b9:1e:22:24:85:0d:
                    4b:0a:42:13:8d:04:71:04:6a:16:8f:98:82:ab:9a:
                    be:d2:63:23:7c:55:d1:b2:04:a3:84:62:39:a3:4e:
                    15:8b:ad:c2:2d:96:bc:a2:72:ce:29:f7:5a:c1:b4:
                    50:eb:a4:b8:92:8c:a9:09:5e:d3:c3:41:78:3f:60:
                    81:c6:48:f1:1a:c2:97:82:4e:20:66:fb:5b:7c:fc:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E1:D0:9C:6F:85:67:29:85:25:4A:E5:2E:5D:3F:71:D8:5B:54:FC
            X509v3 Authority Key Identifier:
                keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:2a:27:c8:f6:87:c0:87:7a:81:fd:71:b2:4f:f4:0b:87:
         74:bd:19:7d:e4:c7:55:6f:fd:57:5f:fd:57:07:f4:83:dc:39:
         6b:52:c6:00:3f:fe:64:82:57:a2:fe:69:7a:c5:ea:fe:04:63:
         9d:2d:50:3e:69:11:2f:9a:09:99:24:c5:7f:d6:24:15:95:83:
         b1:a2:99:0d:92:d2:5e:d2:fa:cd:23:5f:2c:3f:44:cb:42:f0:
         90:20:97:b0:7d:ee:66:c0:0e:b7:a2:c2:02:8a:2e:ba:1c:7c:
         b9:71:69:4e:17:10:c6:4e:f9:21:0a:79:90:b4:9c:60:e6:62:
         4d:56:9a:9c:45:59:6a:37:57:ce:f8:2d:51:86:a7:4d:0c:73:
         01:1b:f7:b4:22:24:0f:a2:79:27:34:5e:77:77:e1:00:8e:f6:
         37:16:e2:2f:77:ea:e9:72:48:b9:a1:e4:24:96:a1:7f:86:59:
         ff:58:08:04:49:60:a8:a3:c4:5c:43:38:1f:ea:ac:19:d3:64:
         b6:bc:e7:97:61:d9:1e:2f:19:3f:ec:04:20:79:61:12:7a:bc:
         54:8d:6c:7d:c6:a0:3e:fb:b6:35:ca:46:7f:4f:c1:c9:44:e8:
         48:3d:a5:5c:08:28:af:0d:06:fb:23:18:62:16:6a:42:83:85:
         52:81:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:12 2026 by rpki-client