Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File:                     g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier:          pNCcXCCLayD2Hv5S9z7kHejKFBJ6FbOK4Y4rMpWR2Q4=
Subject key identifier:   6D:DE:A3:07:E3:C8:6D:1E:9E:D2:93:EE:7D:52:39:89:AF:B8:54:CF
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer:       /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial:       019CAC47817EB95F09348BCD283C5EBA0DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 02:01:33 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:33 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:33 +0000
Files and hashes:         1: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: ZrARWe9GCvUwK67umsNoGLsqkpuynfPw/0UY2ZMl1xU=)
                          2: zm-VPfgYBhRWZQWrUYEyL-yQqqQ.roa (hash: vf/q4m/7I3joQjOIdPXQnV26DkkefWku22BzZk3X9go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:81:7e:b9:5f:09:34:8b:cd:28:3c:5e:ba:0d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
        Validity
            Not Before: Mar  2 02:01:33 2026 GMT
            Not After : Mar  3 02:01:33 2026 GMT
        Subject: CN=6ddea307e3c86d1e9ed293ee7d523989afb854cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:5c:b7:95:53:46:9a:69:19:ac:88:98:bc:
                    9b:8a:0d:e3:2c:f6:f6:9e:0a:f0:3c:cc:0c:48:59:
                    c9:39:29:20:13:eb:ec:fb:0b:16:dd:95:71:cf:30:
                    75:5c:c8:d0:f9:60:cd:d0:95:97:9c:62:fd:cd:4b:
                    03:0b:55:29:11:64:64:5b:34:a0:06:82:2a:b9:be:
                    50:26:39:03:f7:bb:31:5b:bc:bb:a0:b7:d2:75:ce:
                    59:b0:e0:77:66:95:96:cc:69:74:27:61:12:37:fc:
                    05:c4:3f:9c:64:fe:bf:2a:04:2a:71:a5:b3:db:f7:
                    9d:64:19:c4:8c:9e:23:43:26:ed:b6:a4:84:a9:e1:
                    7c:2f:4c:2c:0f:6f:1f:64:24:89:4b:f1:f5:cd:bf:
                    44:05:76:bc:57:2b:ba:b3:8e:95:b1:61:39:95:30:
                    17:55:34:d2:d8:68:ad:75:45:60:f6:ac:5d:da:5c:
                    c1:7e:9c:35:68:49:4b:41:ba:8c:17:d8:45:7d:b0:
                    1e:90:7d:9e:2e:fc:6c:78:c2:b8:da:08:9d:35:52:
                    c8:ef:eb:0f:b0:a8:5c:56:fd:24:f1:fe:a0:f6:a4:
                    ba:91:80:d5:fc:ce:37:20:91:98:f2:9f:79:cb:32:
                    85:81:c1:7a:0e:92:2b:2b:1a:fe:12:46:e3:c5:17:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:A3:07:E3:C8:6D:1E:9E:D2:93:EE:7D:52:39:89:AF:B8:54:CF
            X509v3 Authority Key Identifier:
                keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:9f:22:42:b8:98:c4:cd:60:94:b2:b8:8b:e6:4d:80:66:
         c6:f0:d4:80:00:f0:64:1f:40:c8:6a:59:98:e5:96:a8:91:fd:
         07:42:de:f1:1e:00:ec:ce:e0:00:db:2c:2c:df:60:26:13:f5:
         1d:39:e8:88:c6:88:14:c2:c4:5d:82:34:a6:b7:f7:69:0f:0e:
         1c:11:55:1c:ea:cd:e3:90:8a:e0:55:e3:c1:9a:37:26:18:6b:
         8d:dd:e1:10:6d:23:0a:5a:98:cf:ad:e1:94:04:69:9b:34:03:
         55:ff:32:ea:fa:93:bb:6d:09:fe:54:62:47:62:fa:f8:8c:c9:
         65:1e:8f:07:d4:49:82:96:dc:4e:d1:9c:6b:8d:cb:7e:dd:e9:
         0f:9b:c5:89:4f:8d:82:37:9c:7e:e3:90:66:5b:54:7f:6c:a7:
         bb:38:e6:90:87:7a:e6:fb:e6:77:a8:8f:ee:de:56:a4:df:7d:
         0f:bc:fa:ef:93:3a:e6:e1:c9:ec:44:5b:60:fd:81:47:9b:d6:
         c4:02:8b:09:dc:6a:d6:fa:2f:6f:3a:8c:3a:bf:d6:de:4c:f5:
         6e:33:1f:88:0a:11:0a:96:4e:68:61:f3:b6:f9:8f:0c:5e:eb:
         81:4e:a0:50:d8:d3:e4:44:26:0a:59:65:a9:f8:c9:95:14:48:
         c0:69:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:57 2026 by rpki-client