Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File:                     a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier:          tC3I4Wf225cp3bA9w+3DzEWDn0juCEUKbHHtYZCX4X0=
Subject key identifier:   C5:27:A1:65:FA:B7:01:3A:AD:C1:99:BC:14:99:BD:86:BF:65:44:AF
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer:       /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial:       019CAC46FA5D5672770A54F430E07C880FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 02:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:58 +0000
Files and hashes:         1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
                          2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: tGkykQBdttODXuAp/a5DMQEugXh4E85YGWU3TPKInGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:fa:5d:56:72:77:0a:54:f4:30:e0:7c:88:0f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
        Validity
            Not Before: Mar  2 02:00:58 2026 GMT
            Not After : Mar  3 02:00:58 2026 GMT
        Subject: CN=c527a165fab7013aadc199bc1499bd86bf6544af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:19:a6:1c:51:41:9d:2c:6f:38:e3:50:b5:
                    03:d8:53:7e:20:92:62:f1:0d:eb:66:fe:39:e0:f4:
                    74:20:83:76:d0:f0:28:83:f2:3b:b2:50:7b:8e:d6:
                    3d:5a:d6:59:68:26:01:23:05:b1:26:1f:35:7f:00:
                    ba:c4:4a:12:ae:fe:26:57:fa:78:59:8c:2c:59:ac:
                    2b:da:41:dc:04:23:c8:5d:12:0d:d2:6f:09:2e:cf:
                    d6:a5:8e:bb:b8:0e:08:b7:19:62:12:1e:aa:8f:a3:
                    73:a6:b4:cb:c0:4a:88:fd:28:5f:b2:56:06:30:7e:
                    fe:1b:89:0e:f5:01:bf:d5:05:da:95:b1:6a:a8:3d:
                    06:54:4f:71:1a:d1:8e:b7:76:de:41:2d:63:36:7f:
                    a8:42:3b:b3:b9:57:6c:2a:42:11:e3:79:7d:40:74:
                    46:1b:c7:e8:cc:6d:d5:73:79:20:e8:f1:94:b6:b2:
                    e7:d1:c8:88:3d:bd:71:3f:ff:8c:06:c9:e4:db:c7:
                    56:e9:8b:89:f1:93:c1:e7:54:ed:a1:0f:2a:b1:22:
                    cf:9f:10:de:bc:27:52:53:28:72:5c:88:f0:22:74:
                    da:a4:35:d9:5b:ae:c5:15:01:c5:59:75:85:36:40:
                    45:83:95:4b:80:1f:0d:af:30:d5:e7:55:e8:1d:52:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:A1:65:FA:B7:01:3A:AD:C1:99:BC:14:99:BD:86:BF:65:44:AF
            X509v3 Authority Key Identifier:
                keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:a2:f0:94:7a:bc:6b:4b:02:b8:5f:02:c4:13:b3:21:28:
         94:ad:24:c2:9a:1c:d2:29:b9:07:ee:82:be:9f:27:60:ae:09:
         07:1c:bb:21:74:ab:6a:23:e9:4e:53:da:f1:41:2d:05:92:90:
         34:95:b3:26:d0:80:9e:65:88:10:90:d6:a3:cf:f8:ba:76:e9:
         e0:72:23:49:4e:e0:d0:11:ec:63:12:30:61:13:c6:90:2c:82:
         6d:56:16:9e:ad:7d:02:54:75:9e:c1:6f:11:be:60:6c:11:7a:
         74:cc:1b:56:92:04:d6:39:ef:ad:dc:1f:df:1a:84:96:13:cf:
         fe:75:34:e2:c8:9d:a0:e8:97:10:d0:3a:b9:0c:9c:74:3f:37:
         18:d4:71:46:a7:02:8e:32:bd:3a:34:63:b1:79:60:d1:32:d8:
         3c:b7:76:01:c3:fd:99:4a:b6:15:9c:00:b0:ac:06:80:7d:a4:
         10:6b:b9:22:ad:d1:90:ff:5c:ee:d0:9f:71:7e:d6:2b:18:67:
         6c:50:2f:5a:00:b7:2e:cf:f9:32:b3:1a:e1:09:44:df:e2:35:
         f6:3e:9f:32:d5:53:d4:03:58:1e:83:1d:09:71:b6:bd:38:9d:
         69:11:be:86:d2:db:9b:ed:da:ef:ea:4c:82:d3:68:c5:e4:b3:
         96:0e:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:56 2026 by rpki-client