Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File:                     RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier:          3G8fUUdF/Vi4yetHTpWxmaEaIgGT6k9aGD0DVugTUnM=
Subject key identifier:   82:D3:6C:D4:10:81:DD:BC:C2:8D:32:DD:1D:CA:4F:9F:3D:47:A0:6E
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer:       /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial:       019CAB34882690106906245ECB3603A947B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 21:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:12 +0000
Files and hashes:         1: QimJZyg_5Yfg1zb4CAZqCQiArVo.roa (hash: Z7/KTdUBdl9nRIlHCoXi0enigEky+0AXzlP7afwwRuk=)
                          2: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: Dn4u7k4Z4qlwOtdHLs782h8QqiYL3h0BO5q7lhOdLI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:88:26:90:10:69:06:24:5e:cb:36:03:a9:47:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
        Validity
            Not Before: Mar  1 21:01:12 2026 GMT
            Not After : Mar  2 21:01:12 2026 GMT
        Subject: CN=82d36cd41081ddbcc28d32dd1dca4f9f3d47a06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:a1:54:c6:27:2e:0e:cd:d4:35:12:37:b6:
                    f1:c1:03:e2:4e:5d:f3:43:0d:41:db:ae:a9:75:8d:
                    f1:0f:08:38:e8:17:32:97:f8:8f:ba:b9:d5:28:45:
                    f3:d2:3a:55:79:58:6b:5d:94:18:36:3b:82:65:e5:
                    20:0b:b7:cb:1c:d7:1a:43:cd:54:34:6f:e3:ca:a1:
                    0a:5c:ac:96:9c:51:f3:31:ef:5c:e7:5e:ab:9f:36:
                    3e:fb:e7:9e:92:ae:f0:82:06:01:97:af:cd:99:7d:
                    58:6d:91:cc:2f:c9:92:da:ed:0d:3f:a7:da:f8:35:
                    05:11:c7:b2:87:cb:0f:c1:20:30:36:f4:1a:c7:c2:
                    5a:42:bb:5a:ec:cf:53:ab:91:2a:aa:b9:5d:6e:f3:
                    e2:65:1b:0b:d5:be:91:6f:76:a5:64:32:2b:9d:bc:
                    9f:ba:26:df:bf:51:0b:1f:38:91:6c:33:36:d5:a6:
                    c0:09:f3:0b:df:a6:06:c6:61:45:3a:4a:64:de:8a:
                    6b:11:1f:fe:27:10:5f:29:16:2c:e7:97:49:9c:28:
                    fa:01:bf:cc:f2:af:b1:af:05:b7:f5:71:08:db:d2:
                    a3:b7:75:7e:5f:36:b4:a2:92:47:24:4c:b6:b7:bb:
                    04:29:29:b8:26:05:10:fa:93:3a:36:78:24:e8:b5:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:6C:D4:10:81:DD:BC:C2:8D:32:DD:1D:CA:4F:9F:3D:47:A0:6E
            X509v3 Authority Key Identifier:
                keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:14:0f:eb:69:63:95:ac:6e:46:e4:5c:1a:48:22:fe:bf:a7:
         6a:94:a8:5c:56:fc:46:f6:6c:07:06:f6:e4:14:81:05:f7:f0:
         ae:4d:37:c9:57:33:30:10:fa:5f:b7:cd:22:36:71:bf:c6:c3:
         70:e6:09:7a:85:f5:b6:11:15:68:b0:ba:fc:b0:74:b5:0a:79:
         12:ed:e6:27:e5:f5:ec:d1:c9:01:d0:ba:f0:aa:dc:80:be:cf:
         6b:e2:5e:1e:f5:cb:ab:06:42:4e:28:c6:a7:8e:66:90:af:bd:
         a8:4c:9b:39:9e:4a:ac:24:f5:46:02:56:2b:5a:4a:62:0a:58:
         6d:93:6d:d1:24:a4:22:b5:cd:a6:5c:b6:34:1d:d4:d7:1d:56:
         3d:62:77:6e:a3:47:ca:41:f3:94:ac:77:7d:1c:d0:62:00:2e:
         49:65:e9:0d:82:7d:fa:51:48:e2:bf:ba:1d:8c:6f:a7:5a:e2:
         9d:d7:3a:54:71:1e:a0:44:7c:37:46:19:79:35:51:18:87:be:
         12:2e:a3:1a:b2:01:5c:b8:51:eb:4e:00:1f:39:ef:03:19:fd:
         bb:fe:0d:29:c6:45:19:bc:46:ca:8c:0a:ec:92:3e:60:f8:1d:
         f9:07:51:b6:72:13:da:34:2c:c3:76:71:bc:0f:96:4c:71:2b:
         8e:3f:b2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:55 2026 by rpki-client