Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File:                     3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier:          y5sQhAA57BWd4qxVwLZ/9MfxUNoZYUgWav33hMooKM8=
Subject key identifier:   EE:70:C5:AC:C9:30:CF:46:15:2C:A5:A3:E3:20:59:DE:E7:37:A5:3D
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer:       /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial:       019CA86AA0C1F23E5E97043196FC9D5BDA7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 08:01:25 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:25 +0000
Manifest next update:     Mon 02 Mar 2026 08:01:25 +0000
Files and hashes:         1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: djqsiJHNK3XwSjEosyIUk0n2S+QMeMUdmvidwDRVhvU=)
                          2: 6W16tPBnc1dRPPXrNvPZCBivu-A.roa (hash: VTmSpbN2hd3Hw/P9lB0yjXnyihI9X48UXmmFukdSqcM=)
                          3: 8w9rvTUUt_RYhR3L0tQXn0glplA.roa (hash: f1jbbfJnG4ozyDGlTqWQz2YYiVrxgFWVHi3zprKmPqg=)
                          4: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (hash: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU=)
                          5: G0RCF0Z6ZBSE1DTghZmezsnYOFc.asa (hash: Yk7ILI9iy5TC4KHdDTWpcbNPlYqZvxcnNf6IQxr0xj8=)
                          6: hrEIqJAwCku3aKDnRzlzuarP4tc.roa (hash: /EQ3061AHFPZuvaT0q5zSvf6uilyT/zCrLJMTA/SNVM=)
                          7: rzxMYEL8BKNR02VR6It9IPmftps.roa (hash: 9y+RUm2eWl0SkVwbpclKO/OAFTw8zaeRZoG7TQq0yY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:a0:c1:f2:3e:5e:97:04:31:96:fc:9d:5b:da:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
        Validity
            Not Before: Mar  1 08:01:25 2026 GMT
            Not After : Mar  2 08:01:25 2026 GMT
        Subject: CN=ee70c5acc930cf46152ca5a3e32059dee737a53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:d4:00:88:ab:3d:b6:83:45:2f:94:46:18:
                    c1:48:ce:00:f0:ac:5b:5e:fc:88:db:03:1c:40:b1:
                    ac:62:40:17:c9:48:b4:da:00:f8:e3:ce:4a:ad:7a:
                    3c:b0:51:2d:2e:3d:79:0a:26:e2:09:66:c0:7a:7f:
                    e0:3a:47:08:1a:2c:28:c5:f8:b8:1c:14:76:fc:34:
                    f6:44:8d:0c:90:a7:51:c2:59:fe:a8:cb:c6:ff:58:
                    30:a5:d6:1a:c1:35:b0:4d:22:7f:76:e2:12:d7:d6:
                    b8:c6:bb:64:8d:4a:2d:50:d3:b2:e8:1e:2b:55:7e:
                    d6:16:c1:22:57:e6:dc:01:16:f3:53:d7:01:e2:fd:
                    a2:62:ed:94:f1:ed:86:be:22:77:f3:f9:03:41:35:
                    4c:0b:8a:71:33:30:f2:9d:e0:81:f1:8e:e5:b7:6f:
                    23:3b:6b:1a:c8:be:f8:4a:4b:ea:6f:59:15:d1:28:
                    6d:f9:ac:fc:df:65:16:83:ea:e8:4a:b8:09:47:19:
                    3f:37:20:97:2e:38:91:ae:14:7b:1a:47:91:c2:04:
                    aa:09:81:d8:72:dd:4f:e9:11:a5:a7:56:a5:8d:43:
                    e4:4e:86:f6:da:7c:3b:d3:72:9b:b9:84:2c:6f:01:
                    ab:3a:12:64:00:8a:24:c9:e1:10:d9:95:25:71:70:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:70:C5:AC:C9:30:CF:46:15:2C:A5:A3:E3:20:59:DE:E7:37:A5:3D
            X509v3 Authority Key Identifier:
                keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:17:5a:88:bb:f4:09:43:55:a2:05:24:70:22:bf:fd:a8:28:
         fb:28:5e:2e:bb:ee:ab:f6:ea:ed:88:b3:e4:0a:15:43:e5:83:
         d7:45:19:3c:10:d8:eb:ff:a5:2f:ae:10:54:5e:6e:e0:68:55:
         19:f0:57:bd:41:80:9f:dc:79:9d:42:6c:47:b5:cf:a0:e4:54:
         79:a9:05:57:f9:65:63:f4:ff:58:b4:06:3c:7f:06:67:a3:11:
         97:2c:fe:74:a9:55:1d:2e:dc:cf:a2:48:3e:a9:ad:dd:25:5c:
         dc:8c:64:b1:04:cc:48:94:09:1d:eb:9a:4f:93:11:f2:1a:8c:
         0f:e7:d4:c1:b3:bf:dc:b2:e3:8b:bb:5e:4f:bd:61:e0:33:f0:
         93:7a:dd:38:fe:95:a3:eb:18:d1:a7:b6:f1:a8:2c:32:e8:2f:
         26:cf:9c:f4:6d:20:6a:f3:de:ee:bf:1f:a7:da:f9:e9:43:43:
         a4:74:ee:ea:54:53:ba:59:04:9d:12:af:d5:0e:f7:19:54:ba:
         9e:83:18:d8:e3:54:e2:e0:7f:eb:9e:2c:f7:cd:59:d2:b4:75:
         29:88:c1:68:b1:0b:52:17:a3:1b:20:7a:f1:a8:7d:63:ad:6a:
         05:c5:39:84:e7:67:88:44:c5:87:0c:62:bc:5e:be:c2:87:76:
         dc:4a:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:13 2026 by rpki-client