Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File:                     1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier:          GLquPQnelIN1+Yfjc5TXRp9Awwu51hwlctSEnJJIsW8=
Subject key identifier:   7E:AD:67:0D:6A:1D:F3:DE:F6:C0:10:97:66:61:68:AE:8B:BD:A4:C8
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer:       /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial:       019CAAC6CA6C8CC59FD9B5BE2F4047B35E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 19:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:20 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:20 +0000
Files and hashes:         1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: EwKzgWXrCALFYdtJWm0BpZl3TUql4Ha+oPrSy5drH5o=)
                          2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
                          3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
                          4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:ca:6c:8c:c5:9f:d9:b5:be:2f:40:47:b3:5e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
        Validity
            Not Before: Mar  1 19:01:20 2026 GMT
            Not After : Mar  2 19:01:20 2026 GMT
        Subject: CN=7ead670d6a1df3def6c01097666168ae8bbda4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:e8:df:f2:2a:bb:40:38:f6:3c:9a:30:a1:
                    d7:b4:77:89:5c:86:56:25:54:13:70:26:86:e2:9a:
                    45:a5:c9:9b:45:99:4d:bb:60:81:08:64:be:15:ad:
                    a2:c2:90:18:c6:1a:da:b9:43:f7:35:fc:91:eb:73:
                    6b:46:84:b9:72:0d:a5:fa:7e:99:7b:b2:75:c8:6e:
                    f6:91:88:e1:88:db:9e:87:d6:c4:9e:fc:cc:7e:82:
                    48:19:99:c3:2b:7f:09:78:25:2b:c9:b1:99:28:77:
                    6b:8e:fc:55:de:25:db:f3:58:e6:69:60:5c:bb:4b:
                    2d:8e:3b:4a:b0:e2:57:68:38:2c:04:b4:05:84:e5:
                    28:69:62:4b:20:51:38:ab:0b:3c:26:67:16:ab:4d:
                    e0:f8:44:ea:93:a8:85:51:f7:09:55:7f:c0:32:0a:
                    80:2a:c5:d5:ac:e6:61:30:2c:07:a1:4e:a5:0d:70:
                    41:01:ed:e1:c6:37:44:77:36:9e:0b:77:95:7e:ec:
                    17:51:c6:c8:40:3c:bf:ec:1f:1c:d4:9e:a2:83:4c:
                    4a:59:7e:ca:e9:00:5a:97:fd:8c:0d:37:27:26:ee:
                    1a:74:fe:5e:86:43:67:40:ec:eb:79:8f:db:45:fe:
                    01:4d:85:e8:4c:ad:62:e5:45:80:12:cc:7a:de:27:
                    4e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:67:0D:6A:1D:F3:DE:F6:C0:10:97:66:61:68:AE:8B:BD:A4:C8
            X509v3 Authority Key Identifier:
                keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:04:68:31:d1:e3:47:8f:43:12:df:22:12:2e:30:3f:dc:
         ab:3d:0e:53:d0:a5:0f:3b:79:3f:c6:cf:12:d4:66:ec:98:3d:
         3f:b9:f7:d7:9d:4c:35:c4:6b:81:77:79:58:bd:67:04:30:a1:
         8d:82:0d:75:9d:41:2f:a6:07:ba:73:9f:82:52:f7:ef:0a:8c:
         f6:b7:c2:8b:59:c2:14:a5:c4:12:f0:dc:31:f4:b9:3e:af:d5:
         b0:81:42:13:ec:25:65:70:ba:4a:17:b1:86:02:33:2f:50:1c:
         6e:43:d8:7c:7e:f1:56:f8:a8:f8:4a:82:35:3b:5e:20:ac:37:
         af:04:ec:a9:02:b3:25:4b:9a:79:d1:22:b8:55:fe:c6:f8:38:
         95:79:81:51:34:18:99:29:e4:72:1a:ac:2c:7f:dd:95:67:e2:
         d3:6c:d8:aa:33:94:dd:39:df:15:6e:a2:1c:6d:0b:42:b7:2a:
         66:0a:fc:3c:47:e6:3b:18:dc:b9:27:77:35:9f:89:8b:96:f0:
         e3:5c:f1:47:98:47:19:e1:77:34:af:0a:db:d7:99:16:86:97:
         a5:1c:43:94:51:21:69:a1:e3:6e:b9:30:fd:69:df:f5:59:ac:
         91:1d:89:a4:22:87:e7:cd:e0:eb:5f:fa:25:53:96:45:a8:6e:
         68:3a:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:48 2026 by rpki-client