Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
File:                     eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json)
Hash identifier:          7EzKDEavkmwju0XyjvNh6n3s7slIg0C8vTnZYmWPGEg=
Subject key identifier:   05:A8:00:7E:DB:6A:34:C2:3C:40:1B:06:90:4F:90:04:85:B3:9C:ED
Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
Certificate issuer:       /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Certificate serial:       019CAAC681607D1CC8A0B5FF7F80B3794271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 19:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:01 +0000
Files and hashes:         1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: DQWtN7ilB/J20rtsVRuU2p8A0Vcrth5rlwSjEpknOl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:81:60:7d:1c:c8:a0:b5:ff:7f:80:b3:79:42:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
        Validity
            Not Before: Mar  1 19:01:01 2026 GMT
            Not After : Mar  2 19:01:01 2026 GMT
        Subject: CN=05a8007edb6a34c23c401b06904f900485b39ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:06:40:10:0a:7e:14:bb:99:bf:a5:8b:eb:
                    9c:7f:b6:b6:b7:f1:6f:00:51:f5:b2:54:e9:6d:d9:
                    f5:2d:8c:41:37:90:92:b1:c8:7e:66:86:2d:fc:5b:
                    ad:a7:60:7a:3a:48:49:4d:c1:ac:f3:ab:7e:62:0a:
                    df:43:ab:cc:e0:bc:7f:7f:41:85:82:97:1e:35:fa:
                    5f:33:20:d7:c6:b3:56:6a:e7:e8:d7:09:dd:68:3d:
                    de:4e:8e:90:e0:e6:62:df:52:9b:8d:6d:6e:cc:e0:
                    f9:01:10:f1:80:ea:62:53:29:0c:9f:18:a5:ec:f9:
                    e2:1f:e6:a6:9f:9e:d0:8e:2f:bd:df:9d:25:a1:2c:
                    dc:68:89:c3:7d:62:76:fe:b3:73:24:9e:fa:11:6b:
                    9d:91:02:2a:32:6a:ee:55:fa:63:6e:2b:5f:9a:41:
                    1b:cb:a2:6f:5a:4f:27:19:ae:49:63:25:37:6e:48:
                    5e:42:b4:d0:43:d8:ef:e0:f8:fa:9a:4f:73:af:42:
                    db:7e:8e:96:aa:d8:db:85:f2:e8:e6:2e:f7:e0:08:
                    e6:6c:e2:27:fd:85:af:ab:8c:f2:37:b3:05:52:d1:
                    84:e3:ea:cf:4f:5a:48:dd:8b:ff:3c:62:f6:0b:7e:
                    b8:ce:a8:a1:06:6a:72:eb:a1:06:ae:dd:7f:1f:4c:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:00:7E:DB:6A:34:C2:3C:40:1B:06:90:4F:90:04:85:B3:9C:ED
            X509v3 Authority Key Identifier:
                keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:04:84:3b:63:7e:04:7a:e1:9d:27:fe:81:f4:55:f6:d0:
         d8:53:3e:de:69:8e:64:4c:bf:65:04:32:fa:4a:e1:bc:7b:cf:
         e4:7c:b2:f7:09:46:c3:1d:92:aa:86:0b:94:cc:ff:4d:cf:f1:
         f5:61:a3:65:a4:6d:90:25:2a:d7:b9:55:32:18:57:2c:18:96:
         4f:0b:3e:36:d6:c3:e0:8d:6b:48:92:73:3d:b0:50:a7:e7:93:
         15:f1:ea:9c:d2:1a:32:df:06:95:db:9f:b5:e6:79:f7:3f:af:
         e3:1f:90:e8:c4:4b:c5:a8:67:26:66:9c:34:91:2b:12:da:04:
         89:16:00:36:62:9a:60:86:59:c7:e6:4b:f1:5f:3c:d3:12:7d:
         7e:19:35:a5:f2:eb:a8:c3:b0:6f:88:fd:e4:6e:73:e2:68:91:
         e6:09:ee:b2:35:76:cf:43:17:bf:93:35:6e:ae:ba:36:fc:6b:
         3d:4e:b5:34:93:e5:d8:18:bf:c3:b1:04:8d:5b:8a:fa:a4:ab:
         b0:38:86:ee:cd:41:d8:e6:51:ea:d2:63:18:0c:77:4b:98:3d:
         83:ea:85:16:c0:db:93:03:f5:88:2f:dc:77:8c:32:46:48:af:
         2b:f8:12:f2:d0:61:24:0e:7e:e4:fe:cc:3a:ad:d5:f3:28:9d:
         53:21:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:02 2026 by rpki-client