Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File:                     L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier:          fCMM8I2i2cXfBLXiEU1Z7yDxD1tJ6u15LrH8jA3BUUQ=
Subject key identifier:   5A:E8:F7:E9:61:68:23:B2:77:39:FC:98:11:57:82:A6:D6:C0:2E:06
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer:       /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial:       019CADC82E618FCA3E83E82B8DA7BCB16136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number:          1842
Signing time:             Mon 02 Mar 2026 09:01:43 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:43 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:43 +0000
Files and hashes:         1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: go2SORlChb1Sz9yT8ALBi/ETlVlj2i8nrnAFIIXb4FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c8:2e:61:8f:ca:3e:83:e8:2b:8d:a7:bc:b1:61:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
        Validity
            Not Before: Mar  2 09:01:43 2026 GMT
            Not After : Mar  3 09:01:43 2026 GMT
        Subject: CN=5ae8f7e9616823b27739fc98115782a6d6c02e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:8c:2e:0e:bb:e9:4e:f3:b7:52:eb:ab:bc:
                    d8:47:89:47:8e:9c:e5:a5:f8:46:ab:e0:a7:7b:28:
                    d1:ba:64:84:df:6a:b6:d6:d5:77:0a:fd:32:49:e1:
                    b7:c7:9f:f0:b5:fb:89:4c:12:e7:6d:10:4d:7b:c2:
                    de:a0:00:de:88:41:21:a5:61:3a:3a:32:1e:4f:39:
                    4e:b4:9f:72:09:62:de:e3:0c:9a:28:6a:df:f0:14:
                    d4:85:05:78:2c:69:a8:6b:d8:12:ab:aa:17:7a:37:
                    1d:b8:54:e1:38:e8:05:02:88:fe:22:07:78:78:5c:
                    3f:c6:5c:40:15:8c:d8:c6:13:b9:46:dd:e5:07:90:
                    00:d7:e7:66:1d:3a:94:2f:73:30:ff:d5:38:3d:12:
                    d7:a7:aa:9c:4a:50:7d:78:0f:e9:af:5c:ba:e4:de:
                    a7:47:cf:55:65:ff:0a:09:e9:ad:d9:f4:ae:6b:79:
                    64:d1:69:81:d1:ce:4a:3f:11:90:a5:2a:36:62:21:
                    ed:d0:d2:30:0e:3c:95:53:28:ce:ef:84:45:6e:17:
                    62:e7:ac:a0:fd:18:a7:c1:cf:a6:a3:3c:51:9c:d4:
                    26:87:5d:11:51:3a:6c:7c:d9:b0:11:4c:d2:08:e4:
                    e8:e7:30:63:74:4f:60:e8:17:b0:4d:0d:fe:d2:e6:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E8:F7:E9:61:68:23:B2:77:39:FC:98:11:57:82:A6:D6:C0:2E:06
            X509v3 Authority Key Identifier:
                keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fa:ef:8a:5a:52:35:db:b6:dd:8f:38:65:da:13:e7:27:ac:
         1d:6c:8a:7d:ee:6f:2e:02:13:c4:76:f9:00:4e:88:d5:49:37:
         7d:98:b9:04:20:41:dc:03:68:42:74:93:52:cd:f1:22:42:2c:
         e7:2d:1d:45:e0:27:f0:43:92:c8:31:2c:b8:fa:ac:85:89:40:
         1d:1c:e5:3a:d4:eb:e3:03:58:6b:f1:82:f0:41:60:46:7c:43:
         38:86:30:cd:07:d7:5d:df:b8:21:bb:da:a2:3d:48:ae:75:91:
         0d:92:7e:b0:3a:60:02:a8:a6:9e:64:3a:26:47:e2:ba:1f:49:
         3d:bd:2b:dd:cf:c0:92:ed:40:a8:5a:f9:a5:f3:2f:65:bb:2b:
         c5:13:5c:64:dc:1f:dd:f8:c2:0c:03:23:31:62:27:3d:e1:ca:
         56:09:1c:07:b2:2a:ae:38:c8:e9:cf:18:1c:af:08:36:75:e0:
         05:e8:f6:af:db:3d:e1:f3:37:64:9c:94:23:2e:66:87:e7:68:
         b6:af:1e:00:44:27:07:87:4c:80:4e:83:c0:9a:3f:4e:92:37:
         d3:c0:e1:c9:74:d7:f5:31:4a:8f:af:cc:57:b5:08:85:71:23:
         7e:46:b1:44:87:43:2d:75:a5:b8:fd:b1:3b:05:dd:b3:4c:0c:
         f7:ee:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:26 2026 by rpki-client