Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File:                     StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier:          9WEKz/oZSiTCpiKqNMElBL0voD0t/7Azs3Y1nnncNpI=
Subject key identifier:   56:5D:55:63:FA:4B:BB:BA:58:87:5B:D6:AA:03:57:A4:C8:2A:77:31
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer:       /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial:       019CAAFD6A61D956C8D775CCF2DE4F9519D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 20:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:00 +0000
Files and hashes:         1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: mII/680jMdqFv7DA4nfx47XTLFxUMS71RSAmiD1Eayk=)
                          2: krwQ_58rpuR7vh46Z5jxUh2os1c.roa (hash: aD7W1qZcEisQdWcAvIDFWWzHQesvPWcQVTbTh9Rofrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:6a:61:d9:56:c8:d7:75:cc:f2:de:4f:95:19:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
        Validity
            Not Before: Mar  1 20:01:00 2026 GMT
            Not After : Mar  2 20:01:00 2026 GMT
        Subject: CN=565d5563fa4bbbba58875bd6aa0357a4c82a7731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:4e:b7:63:54:0e:f3:8e:cd:a5:69:a0:02:
                    ae:d6:7e:ee:32:dd:2a:ae:bc:a6:c7:48:4c:a1:22:
                    50:84:dc:90:01:03:bc:cd:96:43:a0:ff:a0:ad:09:
                    8b:80:77:dc:08:26:2f:64:93:7a:3d:c2:d2:c5:8e:
                    ca:94:19:9f:9a:58:57:82:41:0f:9c:67:22:27:2c:
                    77:ef:fa:64:53:18:ca:31:c2:e0:9a:ee:cb:62:47:
                    60:6f:8f:01:2a:e3:15:1a:35:5b:6c:e0:4e:ec:08:
                    da:f6:cb:91:cc:2f:e2:7d:96:c7:97:fb:3d:28:4c:
                    73:e0:17:77:0c:a2:a7:c4:13:2c:ee:83:fe:0f:35:
                    1e:f8:f6:ae:ea:49:b9:73:a0:17:b5:53:d7:0b:04:
                    ff:a8:45:29:67:5d:a0:70:09:18:81:2a:a6:13:18:
                    2c:c0:8e:e2:a8:58:91:82:ec:94:c3:b4:7c:1e:d5:
                    23:59:a4:84:49:55:c1:56:d5:53:87:cf:0d:5a:86:
                    e9:62:6a:73:67:6c:85:7a:b7:34:22:4a:92:a2:0c:
                    39:04:f3:ab:53:a8:5d:f7:55:5d:24:d7:e8:41:c3:
                    a6:e4:fc:fc:e7:44:26:26:d1:2a:07:bd:5c:6b:48:
                    02:8f:1d:3c:fd:f1:b4:71:82:58:ac:0e:31:d8:d2:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:55:63:FA:4B:BB:BA:58:87:5B:D6:AA:03:57:A4:C8:2A:77:31
            X509v3 Authority Key Identifier:
                keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:66:de:09:a2:0d:e6:be:8d:3c:78:1a:5e:39:cb:a6:72:
         dc:c3:d9:38:f6:59:b4:0f:9f:be:03:eb:33:fb:d7:af:b1:d5:
         02:92:f6:16:d4:d6:3d:71:bf:99:a3:ce:d9:ff:0c:4b:3d:49:
         81:56:e3:70:94:90:c9:60:ed:23:9e:e2:0a:8d:91:e6:5b:44:
         1e:9e:3b:cf:77:76:25:03:bb:41:18:a8:fb:30:6e:12:2d:c5:
         48:bf:2c:4f:2e:64:e2:bb:a9:63:e9:c7:07:b4:72:6b:b3:53:
         53:13:95:fa:87:30:ee:5a:eb:3c:43:90:a9:0f:fa:ac:2b:f3:
         1e:68:f0:29:27:a1:9d:17:c6:8a:04:f9:dd:5c:fe:99:41:00:
         1d:9f:53:06:24:b4:f7:aa:99:6a:01:fd:9d:dc:d3:f2:ee:ee:
         41:c0:7b:52:2f:be:af:99:05:a4:fd:6c:42:7d:d6:dd:29:55:
         99:10:36:7d:4f:0e:1d:50:57:17:69:43:ff:72:f2:f7:8c:fb:
         1d:03:d1:7c:26:85:8e:2a:b0:62:12:1d:5d:b9:9b:cb:1d:d6:
         47:82:c0:7e:aa:c1:0f:7f:65:c9:63:d2:8d:c6:fe:e6:a4:bf:
         62:72:b2:37:ba:9c:ef:9e:85:87:96:56:7e:e8:9b:87:61:6a:
         23:9c:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:04 2026 by rpki-client