Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File:                     itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier:          4qgF/fLtN6bzL4vCf8zPlj16+q+BYF2HBI1vUK4hGxA=
Subject key identifier:   CE:05:8D:ED:B6:0D:2D:E0:71:87:38:63:49:BA:15:64:68:7C:BB:F1
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer:       /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial:       019CABD903DC95FB7D458D2EFB7FE7BE7088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 00:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:52 +0000
Files and hashes:         1: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: 8CN5sfW58jsA67X9d0GvU+yv9nQYGiQnTvZS/R5hPx0=)
                          2: j5SNiWDExW4Fzdr91OyzIh3q2cA.roa (hash: f3l9/B3pjG4wxZ77vCWHe+oV14ybxAso+7Z2L/8x8tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:03:dc:95:fb:7d:45:8d:2e:fb:7f:e7:be:70:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
        Validity
            Not Before: Mar  2 00:00:52 2026 GMT
            Not After : Mar  3 00:00:52 2026 GMT
        Subject: CN=ce058dedb60d2de07187386349ba1564687cbbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:ae:58:60:2a:77:db:82:3d:13:17:a5:ba:
                    dd:b5:66:6d:c3:9a:88:d5:05:52:ed:da:36:8c:59:
                    fb:27:d7:ab:22:11:8f:c5:19:25:8e:e1:68:c2:5d:
                    46:28:c9:82:a3:39:12:62:67:1e:4c:37:80:15:fb:
                    dd:48:37:fe:d0:32:c9:a0:94:d5:c2:89:68:02:40:
                    2b:f4:17:33:d5:20:03:9f:13:0e:63:d9:77:b1:dc:
                    b1:13:46:84:c7:67:79:3e:82:13:d9:f8:49:ef:dd:
                    f0:f4:8e:1a:88:65:eb:71:4c:33:0b:11:19:65:ca:
                    cd:c0:6c:06:7b:b1:e9:e9:64:8d:8e:a8:83:40:5d:
                    fe:2f:43:cd:19:04:9b:06:aa:be:52:3f:ab:f7:54:
                    e2:f1:c9:49:bc:d5:58:6c:7c:4e:21:fc:98:1d:8e:
                    6a:57:5e:88:e1:43:da:f0:72:29:2e:d0:69:63:ff:
                    af:77:02:d6:3d:9e:5c:d4:25:e7:ee:ce:97:f0:fb:
                    58:9c:94:15:6a:95:6c:cf:8e:ad:58:86:ba:a6:d8:
                    57:8f:b9:3b:25:78:b6:81:ea:1a:f8:3c:71:ea:a6:
                    34:48:26:14:6e:31:2f:30:cf:7f:12:78:43:f5:18:
                    d2:40:65:e8:47:d6:d4:9f:0e:4b:b4:8e:d6:ec:1b:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:8D:ED:B6:0D:2D:E0:71:87:38:63:49:BA:15:64:68:7C:BB:F1
            X509v3 Authority Key Identifier:
                keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:1d:b0:96:c8:e8:d3:1d:aa:05:b8:26:25:b5:06:be:ef:
         fd:d4:b3:69:8b:5e:58:b2:a2:2c:d4:7f:57:d0:c3:be:88:2d:
         a6:e3:cc:51:40:10:37:b6:78:a6:2d:a1:b1:15:47:4b:72:e0:
         09:5f:e0:d5:2c:cd:3b:b3:7e:74:e2:52:d8:b1:07:fe:9a:64:
         25:98:6c:82:42:4c:a1:f9:50:74:2f:36:5e:7a:b3:7f:ce:3a:
         c6:ec:3c:08:fd:07:d0:4c:41:76:0a:97:ce:f9:59:a9:f2:c8:
         48:06:38:5f:46:7c:ce:90:16:c9:ed:b9:8f:a1:62:17:65:6e:
         50:74:41:dc:b7:0a:f8:f9:41:d9:19:ab:b7:0a:da:69:3b:61:
         eb:1f:d5:32:a6:f8:1a:93:0c:99:d7:f3:38:45:55:cf:ee:0d:
         2d:a6:27:da:99:52:11:8d:a1:7e:35:f2:1c:46:e4:08:f4:26:
         1b:41:72:63:da:13:9e:bf:f0:fd:27:30:50:3e:22:c0:d7:9b:
         af:4c:e8:0a:50:54:31:1e:5a:0e:dc:12:37:9b:67:ec:32:91:
         f4:b8:97:38:ea:b0:c4:ab:f1:b2:b9:71:85:66:b8:35:67:f2:
         ee:d8:f9:21:41:4f:64:9c:a6:91:5d:74:38:79:c7:be:d2:86:
         b7:56:73:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:46 2026 by rpki-client