Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File:                     LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier:          G7oB7/LHaLj6PjTxSrGwPY0zxXFHWinY7ESt/B1HdmI=
Subject key identifier:   01:0C:7E:9D:FB:F9:95:E5:04:D6:BF:11:EC:B6:BA:AD:70:D9:0F:7D
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer:       /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial:       019CAB3446736D694EC0B1A51364C9D39DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 21:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:55 +0000
Files and hashes:         1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: s6r3Znhxsg4aa8ZuJrwROSbm+kW+U47Tqo8v8nWPAFc=)
                          2: riStBl-2mLLI1xTkjtqgzstCOrU.roa (hash: hf9I5Mw3LW7ngdtmYTFwt2Y1Syg1s0AmbFlrIM3a+Ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:46:73:6d:69:4e:c0:b1:a5:13:64:c9:d3:9d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
        Validity
            Not Before: Mar  1 21:00:55 2026 GMT
            Not After : Mar  2 21:00:55 2026 GMT
        Subject: CN=010c7e9dfbf995e504d6bf11ecb6baad70d90f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:39:2c:1f:6e:61:d4:f1:ce:7c:48:86:f6:
                    30:0e:ac:65:d8:a5:0f:8e:d0:6d:12:aa:42:8d:01:
                    62:c8:8e:bb:73:f1:bb:ca:2a:27:54:cd:ed:bf:e5:
                    2b:02:67:61:87:fc:73:a9:42:83:45:7a:7d:9f:0e:
                    46:f6:3e:24:85:b5:fb:e2:66:06:26:45:25:87:2d:
                    20:95:23:0e:38:ee:18:61:fc:5a:43:3b:8d:4e:7d:
                    cc:f4:e6:18:53:46:06:47:58:8c:57:37:fe:ed:8c:
                    e2:41:b8:dc:6c:05:63:2a:27:cb:42:2d:a9:10:12:
                    d5:45:dd:bb:c2:98:98:a2:4b:e8:39:35:57:f9:b9:
                    c9:65:1f:f5:c8:1d:75:dd:69:f4:b1:c7:40:87:ee:
                    48:e5:d7:99:f2:b8:e7:69:fc:d1:bd:09:14:70:62:
                    fd:60:19:2f:e5:1f:4c:d4:36:b6:3b:59:71:ec:3f:
                    73:4f:f0:40:aa:4f:7e:ac:df:ea:37:9e:a8:78:7d:
                    1d:d9:71:64:47:6d:8a:53:e0:0e:84:16:3c:03:62:
                    1e:e1:83:d5:e1:25:5f:16:20:5d:65:6e:16:27:28:
                    5b:6b:7c:92:06:da:0e:f8:23:bf:ca:16:32:39:36:
                    2f:28:05:e9:fc:0b:2d:7c:02:b5:62:bf:14:ea:f6:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:7E:9D:FB:F9:95:E5:04:D6:BF:11:EC:B6:BA:AD:70:D9:0F:7D
            X509v3 Authority Key Identifier:
                keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:01:9d:62:79:cd:fd:d2:7b:be:74:aa:6e:43:5c:39:a5:0b:
         d3:f8:2b:81:1e:f1:ed:de:85:60:cb:a4:bc:16:be:e7:1a:32:
         2e:ad:2d:31:66:8f:d0:ca:d1:f1:13:20:aa:ba:89:e1:31:de:
         1e:48:48:2b:ab:d0:7d:59:29:4a:34:0a:5d:d3:dc:9f:bc:36:
         75:20:87:84:fc:2b:48:19:f1:6b:e3:2e:d3:e2:48:2b:e8:58:
         ec:62:b0:be:ce:07:f9:c8:0c:e3:d6:5d:93:e7:ba:6e:8e:2d:
         2b:af:0b:a9:fb:84:72:8a:18:8a:e0:0f:03:d0:f7:84:4f:46:
         2d:89:c0:93:6b:05:a8:3e:5e:73:8e:af:ed:4b:40:ca:a8:e6:
         0c:fb:15:33:9a:a2:10:da:fa:dd:21:81:5b:b3:9e:22:d7:d1:
         e6:d4:38:39:d2:8a:32:df:38:ef:3e:10:fe:4e:2b:70:64:e0:
         b0:ff:08:7c:a7:bb:56:fa:b1:3a:fc:c2:e7:45:c7:76:ef:52:
         2c:52:04:d7:54:6f:29:9d:1b:5b:45:8d:f9:27:29:b5:b5:fb:
         0a:0c:d0:f3:97:a0:15:1e:c7:7c:54:af:8c:a9:b0:85:4f:ad:
         79:f1:d8:af:25:e6:de:b5:b3:4e:94:71:bf:f5:39:46:47:ff:
         05:9e:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:32 2026 by rpki-client