Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File:                     1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier:          a2QAMb3vLYJBdL3Jzn/seCNxNqghWcagT9PxP/M6rv8=
Subject key identifier:   8E:92:C8:DC:BA:3A:2A:10:AF:E4:3A:62:B7:35:46:1F:CC:6B:E8:24
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer:       /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial:       019CACB4F19E179E684B4FC03EDF35332D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 04:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:05 +0000
Files and hashes:         1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: /Su8/ef5Ck8Ix3yUummXChZINoP6BndBDw7R2kG4upk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:f1:9e:17:9e:68:4b:4f:c0:3e:df:35:33:2d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
        Validity
            Not Before: Mar  2 04:01:05 2026 GMT
            Not After : Mar  3 04:01:05 2026 GMT
        Subject: CN=8e92c8dcba3a2a10afe43a62b735461fcc6be824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:99:03:90:93:14:6e:14:4f:78:b2:68:ff:00:
                    e3:b3:ac:95:cd:33:29:69:b6:c5:7d:75:0b:34:e8:
                    34:63:97:01:ae:0b:c3:3f:81:b0:25:4f:97:2e:0d:
                    78:6d:84:fb:9c:d5:82:29:e2:bd:69:8a:00:d7:6c:
                    dd:41:85:c1:18:2c:8e:fd:4e:89:88:12:c2:64:f2:
                    42:e5:0a:3f:81:4b:82:ab:09:fa:76:7c:5f:e4:94:
                    e7:d7:6e:a3:01:f3:98:89:ed:74:3d:48:63:e6:97:
                    ef:9b:99:9f:e9:d7:42:77:24:e1:89:88:72:33:0c:
                    a9:ac:0d:48:5f:49:c1:81:b1:95:2f:52:48:fd:2e:
                    5b:3f:cd:a3:d9:92:f9:af:54:36:0f:de:85:8f:15:
                    31:6d:4a:85:11:03:4e:4c:ad:ad:9b:37:ab:c2:27:
                    3d:14:8a:20:2c:72:fb:1a:0b:60:6f:04:8e:31:0b:
                    6b:43:6c:3f:0b:1a:76:2b:ed:4e:18:85:77:7c:a1:
                    8a:5e:91:cf:dd:2d:f2:e3:2d:7f:85:68:f6:0f:9a:
                    21:28:4a:51:29:da:ae:be:09:2e:d1:ec:96:ec:2c:
                    d3:92:32:65:bc:82:bb:2a:b9:65:58:85:3a:f4:fd:
                    84:d2:36:a3:64:c4:fe:d5:48:26:f7:8f:bd:2b:4c:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:92:C8:DC:BA:3A:2A:10:AF:E4:3A:62:B7:35:46:1F:CC:6B:E8:24
            X509v3 Authority Key Identifier:
                keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:aa:93:9c:67:12:08:b0:23:c6:0f:a8:04:fe:d8:bd:b2:
         e1:52:67:e0:a9:79:a2:64:2d:0c:54:b2:2a:b0:75:80:7d:83:
         dc:5c:51:03:68:60:90:cc:37:28:7a:e5:71:6e:35:93:4f:7d:
         07:4a:21:d6:50:ee:a6:9d:e6:e7:e3:27:ef:da:50:91:a2:66:
         0c:5c:e8:65:5d:6a:a3:e8:20:f5:76:cc:5b:c3:d4:b1:57:f0:
         e2:1b:ac:e6:e1:80:92:76:03:80:fc:6d:30:a9:55:d3:71:09:
         e1:3d:97:16:36:25:50:90:b4:96:30:f8:c6:34:5d:47:4b:48:
         11:ba:c9:b9:6c:4c:e1:02:7d:80:73:5c:43:df:2f:e1:b1:a3:
         9d:56:51:52:3a:66:98:f9:78:22:3d:b4:52:60:1d:d3:a0:e6:
         a0:66:4a:af:30:42:64:bc:a6:79:14:70:ff:2a:2c:61:7d:01:
         0f:04:3c:22:70:60:c9:52:7f:dd:f9:f5:2b:7d:30:8e:47:66:
         43:d3:05:60:d4:9d:de:88:f7:b9:ab:1d:ea:3e:48:bb:b8:b0:
         1e:d1:c0:22:a0:d4:77:1b:68:05:39:72:de:d1:80:1d:70:b6:
         64:d1:ec:f4:3d:06:bf:0c:42:c7:08:7e:e2:9b:1c:02:48:38:
         c6:be:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:03 2026 by rpki-client