Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          QgGBBbgvLAxL7PcoYIN5MpbVKY6k38F+q3Ca9IRagl8=
Subject key identifier:   DB:DD:BB:A4:A6:FE:AD:80:33:05:11:00:D2:9A:54:30:25:37:F6:2F
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       019CABA24227722E69CFC705C277264857FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          06E8
Signing time:             Sun 01 Mar 2026 23:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:03 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: S1rOv3XMS4zKGLmdjtdlRpPpZi8swTY1O32dkBj4uKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:42:27:72:2e:69:cf:c7:05:c2:77:26:48:57:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Mar  1 23:01:03 2026 GMT
            Not After : Mar  2 23:01:03 2026 GMT
        Subject: CN=dbddbba4a6fead8033051100d29a54302537f62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:49:e3:4c:61:2e:a4:cd:54:b2:ac:6b:f9:
                    40:1b:53:09:77:4b:dd:4a:1d:71:4d:53:d2:b4:28:
                    72:e4:20:49:69:d1:1b:8d:59:eb:bf:b1:c1:69:68:
                    d6:68:f5:5f:4b:17:24:18:5f:ec:9e:e3:8b:03:23:
                    d8:88:55:79:07:f8:46:d0:8b:f8:fe:d5:e5:24:0d:
                    b2:82:ea:f1:ab:74:e5:c3:8f:17:20:d2:35:db:c6:
                    7a:54:6b:e7:81:ce:3a:cb:ed:5c:88:46:fe:1b:20:
                    9b:04:e4:82:e4:5d:02:28:6e:74:92:1b:d9:6a:f1:
                    8c:d8:00:6c:57:90:90:9c:f9:a4:1a:bd:93:d1:23:
                    cb:c8:74:52:71:b3:de:2c:d8:9e:4b:8f:a3:8e:e8:
                    0a:c8:6c:d8:90:ca:0d:ce:86:27:ce:ac:b6:e5:9c:
                    4b:7a:1e:88:a6:16:75:2f:18:9c:5e:12:e6:f6:43:
                    5b:5c:63:70:6c:0b:9b:fa:2c:4d:d7:0a:94:3d:ff:
                    94:4a:0b:0f:b4:ec:40:27:38:6a:25:87:fb:82:20:
                    a9:c2:41:01:21:75:9c:5c:3f:af:2d:3e:c8:8f:90:
                    34:1f:16:d9:5c:ec:2d:bf:2b:ca:f1:44:64:63:83:
                    dd:d2:6a:f3:ae:d6:d9:af:f0:e6:6e:a1:7f:07:86:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DD:BB:A4:A6:FE:AD:80:33:05:11:00:D2:9A:54:30:25:37:F6:2F
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:53:90:d3:7c:e9:e8:58:c1:a6:d1:96:30:a1:ce:a6:11:f6:
         be:84:83:8e:fd:ea:cd:9a:48:37:2d:ab:9d:f2:28:3c:21:9d:
         5c:c2:99:d5:85:33:9e:48:89:f3:3d:da:0f:d1:e4:3c:32:45:
         ad:7c:b3:72:56:3d:b4:bd:b2:c5:cb:96:5e:01:c0:8e:8a:8d:
         43:72:d7:f5:e2:f8:67:5d:1a:76:3b:67:58:4c:b3:9f:b2:81:
         b4:c6:3a:31:13:12:92:df:8b:ba:a1:37:f6:39:5b:c4:5a:47:
         58:62:83:37:34:da:fa:87:bc:c0:35:14:ff:a9:e1:f4:41:d0:
         c6:54:4e:ec:91:f6:80:7a:cc:ee:4a:94:34:fe:6c:73:e1:af:
         7c:e3:d9:b4:66:9f:b6:47:ff:fb:eb:91:20:70:e5:12:cf:33:
         ab:00:bd:82:fc:a0:1f:45:a4:9c:bf:79:38:15:7b:b5:97:47:
         5f:fc:8c:0d:8b:34:f2:d4:08:83:e7:47:7c:d2:9f:1e:86:34:
         67:57:9e:8e:48:26:48:c5:f4:71:ff:03:fe:84:00:e5:3b:26:
         f2:b5:87:fe:29:2d:77:9c:b8:b5:a9:f9:20:34:ea:29:da:08:
         47:f1:33:12:6f:60:f7:79:ce:87:af:26:06:f4:a1:23:6d:26:
         0f:ad:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:11 2026 by rpki-client