Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File:                     Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier:          XWkQNpmn49px+MJ+dXoju1IpfChSohOJIVvoWI3ingY=
Subject key identifier:   98:67:82:A7:69:71:D3:80:9A:35:7F:3B:BB:38:3F:D0:88:A4:9A:D4
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer:       /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial:       019CABD949068F96CF4C037F1DA73CA5C89D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:09 +0000
Files and hashes:         1: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: jVaAMQmPNukbUTTLFy1pbD9f5vW02vqq644QCnxR2kQ=)
                          2: _gz8x1xGW4-7OCEk-C8VchnNXgo.roa (hash: fFsAwtO9RzQxvli7T//NB0hYVb7zH2oavZtCFJaj1Es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:49:06:8f:96:cf:4c:03:7f:1d:a7:3c:a5:c8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
        Validity
            Not Before: Mar  2 00:01:09 2026 GMT
            Not After : Mar  3 00:01:09 2026 GMT
        Subject: CN=986782a76971d3809a357f3bbb383fd088a49ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:07:b1:f4:a4:1e:de:8f:b1:b6:2f:e2:46:
                    cb:a4:3a:a5:25:e9:77:e1:b0:60:21:be:f4:e6:77:
                    0c:df:85:a5:f4:b4:71:39:32:65:c8:b2:96:b6:24:
                    76:f1:10:d5:69:b1:7e:12:77:42:07:c3:c5:62:27:
                    58:45:b3:26:0f:10:f8:93:a1:0e:ae:d9:84:d3:be:
                    d3:a4:0c:ab:b1:dc:87:18:63:96:06:e9:e5:e6:f4:
                    a2:48:d1:43:8d:09:51:8b:e5:f3:22:97:ab:3a:22:
                    38:20:7d:39:ba:07:fb:6a:30:eb:9c:cf:5d:26:69:
                    9a:39:b6:33:4e:c4:61:98:e7:9f:b3:cb:3c:52:b1:
                    4c:85:d1:6a:70:ce:04:fb:72:b6:2b:10:dd:32:24:
                    f1:bf:e8:ca:d8:cc:65:42:b5:3b:e6:1d:5a:92:a0:
                    54:4c:ae:71:fc:ca:61:df:28:22:1b:44:ed:65:3b:
                    15:16:ff:b5:97:76:a9:53:ee:b1:95:db:f4:eb:97:
                    82:fc:9a:76:9c:15:7f:1f:67:11:3d:61:98:ad:f8:
                    d8:2b:1a:0d:30:7a:59:dc:eb:d6:59:67:ce:5f:d6:
                    f0:a5:04:69:09:27:0e:a1:29:7b:05:04:91:45:43:
                    13:33:59:98:3f:3f:fb:dd:11:0c:67:e8:56:ac:d1:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:67:82:A7:69:71:D3:80:9A:35:7F:3B:BB:38:3F:D0:88:A4:9A:D4
            X509v3 Authority Key Identifier:
                keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:e1:47:90:79:6c:41:06:6e:bc:8d:f4:bc:7f:b5:12:4d:
         6c:18:d3:e5:ed:72:fc:24:a9:4b:af:37:d4:b2:8d:68:32:28:
         67:fa:1f:fd:11:9d:79:73:8d:7e:81:39:ed:99:15:d9:6b:36:
         76:aa:29:4b:fa:78:dc:f7:02:88:29:84:94:78:d3:36:8f:1b:
         d7:7a:92:14:70:b9:cb:17:12:82:1a:37:89:1c:92:18:ad:3e:
         69:9c:b7:c7:6a:91:64:2b:24:7b:f0:84:2a:31:02:c0:91:79:
         20:aa:ea:0c:7b:7f:d4:4f:ce:1a:1c:5b:59:25:51:f9:fd:9c:
         78:d2:3e:fe:d9:c2:8d:b0:47:10:bb:ac:03:dd:00:1a:5f:c9:
         a3:92:66:4f:08:28:d8:b2:17:24:fb:f6:9c:ab:e4:fd:f9:8e:
         63:c3:41:9f:ea:2a:22:53:c6:97:56:67:92:fd:e6:56:de:1d:
         19:62:7c:56:fa:63:90:13:c4:7a:e5:92:cf:0d:78:0d:87:dc:
         4a:b2:74:1c:cd:91:81:29:33:fc:90:6b:b2:aa:dd:5c:10:c2:
         a5:97:f5:95:bf:57:3d:92:73:8d:95:d0:81:72:f4:87:0a:32:
         95:7a:0f:62:4d:fd:62:dd:b3:5a:ed:f3:6b:4e:c7:df:91:ae:
         a2:b9:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:30 2026 by rpki-client