Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File:                     fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier:          UD/KjD2Bse+j72dHhEUsuPeNrPJXkpJ0/V5ocdhLbFk=
Subject key identifier:   50:78:28:BE:85:DE:78:51:69:70:1D:F1:E5:46:92:2A:FE:44:19:01
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer:       /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial:       019CAA58B5119D1B4F1B32E53C4A099B85F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number:          1146
Signing time:             Sun 01 Mar 2026 17:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:06 +0000
Files and hashes:         1: 2lNKUKMFEbf99s5ruYSyx3kpqBA.roa (hash: frbfhLN2U1B/a1tCRS0GooGGeNzUszrYFqD6uG7ghHw=)
                          2: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: CgtL6wSdOAzevKSnnxgnuRsPh8J2zP5JFR44ihDIdvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:b5:11:9d:1b:4f:1b:32:e5:3c:4a:09:9b:85:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
        Validity
            Not Before: Mar  1 17:01:06 2026 GMT
            Not After : Mar  2 17:01:06 2026 GMT
        Subject: CN=507828be85de785169701df1e546922afe441901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:dd:6b:c0:8c:73:33:90:e9:99:24:4b:ea:
                    fe:43:7a:3f:a5:7d:77:14:8d:04:b4:31:fb:d2:6f:
                    32:aa:a6:5d:01:1f:19:80:d6:42:91:8d:e7:a4:20:
                    38:d9:a6:49:26:ad:16:08:ce:49:80:4f:8f:4e:4c:
                    05:42:75:9f:19:45:9c:44:6b:64:4a:4c:3e:08:0b:
                    fc:75:4b:9f:c6:7a:0f:de:2c:fb:46:66:e2:d9:51:
                    62:c4:39:8f:10:ad:bd:a2:6c:4c:81:00:fa:b5:ae:
                    16:5a:6e:90:7f:73:73:72:ed:19:cb:aa:23:fc:4b:
                    88:1d:c7:26:43:67:4e:ca:52:b2:e2:14:42:77:bd:
                    fd:05:2b:0b:a5:3e:4d:19:7a:e7:b0:78:38:ae:b8:
                    37:20:44:f7:23:6d:56:98:79:17:98:df:fa:b3:b7:
                    7d:e5:f3:7d:fc:cf:6f:fc:e7:34:05:5c:db:28:65:
                    b7:8c:bc:28:e3:b6:ab:49:95:a6:98:30:6d:e7:8b:
                    d3:75:27:9d:38:a6:67:7e:0e:a9:ac:ec:90:e2:b2:
                    70:62:8a:84:79:09:f8:e1:d2:20:8e:4c:a5:b0:10:
                    6f:62:9d:e4:ee:c3:bd:69:24:9d:58:f7:3c:03:cd:
                    cc:4b:ec:4a:f6:73:41:7c:65:5f:d7:66:3d:c3:47:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:28:BE:85:DE:78:51:69:70:1D:F1:E5:46:92:2A:FE:44:19:01
            X509v3 Authority Key Identifier:
                keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b6:60:a3:ec:b1:7a:0d:c2:80:67:4e:96:12:b0:38:41:3c:
         b9:bf:21:b1:f9:2a:fa:45:d0:2f:93:c9:58:65:4d:82:bb:ff:
         b4:73:87:01:ca:ca:14:95:0e:83:5b:1e:fb:45:18:2b:3a:e2:
         60:a2:a1:ef:d5:31:a2:bb:9d:f5:5e:8c:8c:96:2d:1c:fd:ee:
         ac:2e:38:d3:e8:e5:5c:75:55:33:1a:01:92:62:b9:5c:2a:a1:
         be:5a:d1:f5:d6:6f:5f:e2:40:47:b1:26:f2:96:cb:13:dc:09:
         e7:11:ef:6e:2b:df:da:64:11:52:5d:33:58:c5:bf:af:ed:a5:
         ed:8c:f9:9b:2f:6d:50:d8:74:31:bb:49:c1:56:b3:d5:c4:af:
         9a:f7:f4:db:0f:10:f0:68:b1:de:06:34:53:23:2a:fe:48:a3:
         2d:c5:35:e0:48:c6:a1:f3:4a:fc:ba:e0:1c:21:b8:6e:ca:45:
         d1:b7:a3:47:c3:10:f8:81:73:a4:a8:69:b9:ca:13:d7:5d:31:
         1b:f8:d0:82:b0:7d:ac:c7:8e:20:c6:f1:30:cb:56:46:35:2a:
         5a:7d:74:40:96:3a:b0:38:fb:a7:34:54:d9:37:c6:b6:95:e5:
         94:1d:e9:5e:3f:af:12:c7:54:98:26:2c:fd:b1:ec:11:cd:00:
         5a:67:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:39 2026 by rpki-client