Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          NYe/rIlQTltIkOqeyQdcLeSpyHiXjPHP7dBMiWPDdpo=
Subject key identifier:   72:C6:E5:E6:7A:5F:1E:D6:EE:49:9B:94:96:FE:6E:AE:61:C6:FA:E7
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       019CAE35CA86781205B39E9A59277FAA101D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 11:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:26 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: dpaZUgJs61IVmOSzzxlxM18v7DfT4SSD0WxgtnfFn7g=)
                          2: Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa (hash: odpOex+bLP44T2CZB4hEU633jHaa81Iak+Z1Bzzr7eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:ca:86:78:12:05:b3:9e:9a:59:27:7f:aa:10:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Mar  2 11:01:26 2026 GMT
            Not After : Mar  3 11:01:26 2026 GMT
        Subject: CN=72c6e5e67a5f1ed6ee499b9496fe6eae61c6fae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:e9:37:cc:41:e4:55:25:02:9f:8b:d0:16:
                    28:af:9b:ef:a1:0f:9e:1c:41:72:02:c2:97:82:5f:
                    75:ec:1d:d9:4b:de:57:fa:14:72:a9:74:c5:9c:ae:
                    46:aa:6d:b9:71:67:ad:ee:69:0d:56:a6:28:76:f3:
                    b6:20:1c:dc:8b:aa:ee:9c:26:9b:63:42:36:05:5a:
                    15:9f:14:78:58:b7:c8:4d:07:80:ce:8a:d4:3b:0d:
                    b8:6d:aa:fb:7f:79:aa:8c:bb:c5:e6:8a:4a:4b:ea:
                    e8:d2:2a:65:b8:9f:ab:17:8e:d3:1a:78:bf:fd:2d:
                    ef:58:39:ed:14:18:6e:ae:42:e1:2d:86:74:38:f0:
                    1a:fe:09:d3:9b:bf:65:f3:16:f7:f2:7a:c7:65:78:
                    d8:82:b6:8d:c9:67:06:6a:90:52:8b:0a:4c:1b:bc:
                    23:08:d5:a9:53:7b:a2:6d:af:d4:1e:90:00:14:d2:
                    50:5f:85:7a:72:1c:2c:03:4e:ed:a4:73:7b:9a:db:
                    2e:94:0f:83:ef:96:67:d8:71:a9:38:83:a4:5c:2f:
                    40:57:83:73:48:62:ff:50:16:aa:f2:62:85:d6:e1:
                    15:7c:58:86:13:bb:5c:79:e6:39:74:ab:69:3b:3e:
                    21:eb:12:5a:4a:5d:b2:ce:f6:a5:20:89:7e:b1:0a:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C6:E5:E6:7A:5F:1E:D6:EE:49:9B:94:96:FE:6E:AE:61:C6:FA:E7
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:64:3b:2c:2c:7f:8c:5c:e2:c2:b8:6f:72:41:87:a3:18:57:
         eb:78:e7:58:5a:0b:30:10:b5:cf:2c:a9:79:ea:0f:91:6c:c6:
         fc:6b:6a:1b:c3:b5:a7:65:37:ad:4a:f4:45:ff:4e:9b:82:21:
         d2:e8:98:3d:8d:d6:10:f7:d3:a1:ef:ce:c2:13:36:58:2e:91:
         a6:e5:5e:54:f2:ef:fb:4b:b3:6b:00:73:a3:e9:a2:d2:b0:2a:
         40:a7:9d:1b:3d:08:d0:d4:d6:4c:42:71:0e:98:ca:c7:c8:00:
         01:e2:00:9a:4e:7b:2a:eb:80:b4:b5:11:18:83:db:8e:cf:ec:
         98:0c:e0:99:73:9b:00:31:48:95:ae:16:53:80:41:68:88:b1:
         0c:8c:dc:b0:5a:f9:94:a4:f3:e8:64:fb:05:1c:bf:df:99:35:
         3c:58:fd:d4:d9:d3:57:c4:91:4f:f7:a6:82:55:1a:45:f0:06:
         5e:c2:0f:b9:b6:ae:3a:dd:08:0b:0c:56:ca:f2:0f:3e:dc:08:
         ae:d9:05:4c:17:1d:59:41:78:0e:0f:82:0e:7d:42:8b:c2:cf:
         bb:19:6f:ff:ec:f7:26:4a:64:de:8a:07:b7:0f:bb:4f:d9:0c:
         51:c0:09:6b:0e:0c:a4:95:50:09:37:39:f5:fe:1c:8d:b1:b2:
         d6:d4:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:32 2026 by rpki-client