Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File:                     DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier:          G8g88IrTylkasM3sQPHIHG/hFWywbKyTSpZN4YSa5qw=
Subject key identifier:   E1:84:0B:10:E2:61:B2:4B:53:73:A4:2D:9E:55:F3:FA:44:78:2D:CF
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer:       /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial:       019CAD5A1B8540DF4765A9CD396B59E6C9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 07:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:29 +0000
Files and hashes:         1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: yux137Td1ZQo2IBRthQZaaZtAbW0v1y9cdq5RAgqxcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:1b:85:40:df:47:65:a9:cd:39:6b:59:e6:c9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
        Validity
            Not Before: Mar  2 07:01:29 2026 GMT
            Not After : Mar  3 07:01:29 2026 GMT
        Subject: CN=e1840b10e261b24b5373a42d9e55f3fa44782dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:bb:a6:6f:a2:7d:05:82:8a:07:73:c7:47:
                    32:56:ac:31:99:9c:c4:d9:e1:be:1f:45:77:aa:a8:
                    52:f7:d8:82:77:c6:89:f2:e3:3e:0c:16:bb:21:e8:
                    16:bd:4c:8c:57:91:9f:3c:79:77:58:cf:30:9c:31:
                    e8:09:50:22:65:8f:a1:7d:7c:ea:e2:f6:86:d2:70:
                    99:95:94:33:9b:ed:cf:fc:20:04:37:4d:68:5e:37:
                    a3:b6:77:6a:86:38:2d:70:5f:32:f7:80:1a:0f:96:
                    61:c7:47:08:c2:89:50:b3:34:02:f3:65:d5:17:5d:
                    34:ea:26:a6:fb:1c:57:74:cb:74:0f:e6:7c:d2:66:
                    fa:9d:8a:a6:27:94:86:ee:0d:aa:23:b3:b5:28:2e:
                    03:93:5e:23:e3:0a:4e:03:a0:af:ff:9b:fb:49:23:
                    8f:84:bc:f3:78:4e:ba:c6:b8:ee:0a:74:0f:66:3a:
                    f5:44:ae:f9:3e:a3:12:82:a2:0c:51:0c:e4:4d:cc:
                    80:62:85:ea:b7:35:e7:f8:bb:ed:22:94:c6:33:23:
                    42:e9:63:cc:43:95:b5:a1:a2:05:55:8a:42:33:57:
                    5e:2a:de:41:22:2f:3c:d3:82:b1:67:11:a6:e5:36:
                    29:c7:d7:56:82:ed:cd:a4:72:e9:c6:c8:c4:e3:18:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:0B:10:E2:61:B2:4B:53:73:A4:2D:9E:55:F3:FA:44:78:2D:CF
            X509v3 Authority Key Identifier:
                keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:48:7a:f7:af:8a:b7:ab:62:fa:06:3c:57:da:9b:9e:ff:8d:
         d4:53:c0:41:ac:73:d3:31:e7:81:e4:9f:a3:ab:03:1a:68:d4:
         e7:6c:5a:ed:84:46:f5:88:91:a0:5c:df:4f:65:af:3a:5d:8a:
         d6:43:cf:6e:bc:09:17:83:8d:b9:14:a1:95:52:ee:81:52:c4:
         63:57:7b:d9:63:c7:f9:9f:24:fc:15:02:7f:3b:ef:c4:9e:72:
         91:5e:9c:29:3d:f1:5a:6c:19:6e:c1:bf:b2:6f:cf:ca:51:87:
         5d:9a:91:d1:48:2d:d6:20:30:71:41:b4:8c:e7:93:b9:ad:5b:
         4c:66:91:cc:bf:c7:90:d8:8c:06:ba:4f:7e:5d:bd:25:a5:65:
         bb:17:a6:4f:f6:14:26:d3:92:0b:67:c2:dc:cd:59:af:71:29:
         d0:6a:d6:43:1c:40:56:cd:67:47:16:6e:37:d6:79:2e:11:09:
         5f:66:65:b3:dd:3d:a0:89:b4:57:ea:31:a8:47:f0:b4:99:1e:
         6b:ac:82:df:5b:1a:9b:ca:d1:ca:02:66:bc:75:b7:29:f8:c3:
         36:67:47:99:e3:09:f8:36:ff:80:75:a4:d2:ae:9a:45:74:c7:
         6e:cc:2d:50:bc:b7:c8:18:d2:e6:cd:57:89:21:96:e3:b0:d1:
         aa:d9:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:51 2026 by rpki-client