Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File:                     IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier:          cLf/38zOy5CGHhrO8aHTU1T4wHMtcHItWUVdspdcQtE=
Subject key identifier:   76:DC:12:1F:84:5F:08:DE:87:AB:44:89:AB:C0:27:95:57:ED:5E:1C
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer:       /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial:       019CABA1BC6D66A9C953782DEF10D226CC96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number:          077A
Signing time:             Sun 01 Mar 2026 23:00:29 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:29 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:29 +0000
Files and hashes:         1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: HWXlE/cmDv6ljC9cHZWfx1fsqIQzmgan+Z5/ioDRa50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:bc:6d:66:a9:c9:53:78:2d:ef:10:d2:26:cc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
        Validity
            Not Before: Mar  1 23:00:29 2026 GMT
            Not After : Mar  2 23:00:29 2026 GMT
        Subject: CN=76dc121f845f08de87ab4489abc0279557ed5e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:f6:e0:de:01:51:d9:02:02:77:92:ef:88:
                    4c:ab:79:4a:e9:85:8b:7c:bf:01:f5:1a:f7:32:53:
                    fc:fb:51:6b:06:79:46:9e:82:32:db:99:c2:76:b6:
                    97:92:90:6d:f5:db:10:09:ba:e8:c5:14:b1:9e:45:
                    9b:2a:59:55:2b:ed:05:38:c7:8c:0c:72:dd:50:df:
                    df:f1:c3:f5:1e:30:f2:33:d4:f6:ee:a2:65:3f:87:
                    fb:8b:2f:d5:00:ca:56:63:e1:9e:33:27:65:2b:88:
                    3f:19:70:7e:e9:9c:f1:d6:bf:83:1d:c4:f6:7c:7d:
                    b4:8e:43:b4:c8:5e:64:8b:69:bd:16:8e:26:2d:85:
                    68:9c:1b:53:d1:76:67:ac:e3:4d:ba:60:4c:22:f2:
                    97:ec:d9:46:77:c8:9f:b8:9c:b5:bd:e4:61:1f:47:
                    6d:1b:e3:02:35:ff:78:8d:32:45:da:6f:2c:84:40:
                    07:63:4d:fc:05:c0:51:a5:66:7a:30:e7:66:a9:2d:
                    d3:d1:94:01:d3:bb:a9:05:98:4c:4a:7b:67:3a:e3:
                    52:5c:39:f7:2c:05:44:66:24:8f:5e:6a:3d:cf:5f:
                    fd:28:12:4b:1a:c5:f1:71:91:9c:64:0e:cf:1e:44:
                    80:54:6d:a9:78:5f:ce:48:6c:95:bc:59:9b:a9:bc:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:12:1F:84:5F:08:DE:87:AB:44:89:AB:C0:27:95:57:ED:5E:1C
            X509v3 Authority Key Identifier:
                keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:48:8b:64:44:97:69:76:a6:c7:d3:bf:95:b3:79:71:2b:
         90:89:53:04:b3:27:7e:09:f6:10:80:35:75:3a:cf:24:fe:e6:
         ed:2d:f9:8d:d2:69:ed:7f:5a:e6:40:83:bf:e3:9e:3b:65:a6:
         51:ea:9b:a0:fa:11:c7:8d:a4:af:d6:2e:91:b2:c4:bc:9c:ec:
         ff:f2:c6:28:2d:89:41:c4:cc:86:6c:af:8e:05:32:2b:3c:bb:
         52:63:1e:27:e4:c8:91:52:5b:34:6e:a1:90:e4:f5:cc:5c:b9:
         5a:38:9f:15:20:50:5d:a2:6e:5a:86:a8:14:30:b0:1e:a8:d5:
         c5:40:7d:7b:74:5b:69:b4:ce:37:7d:89:b9:01:9b:33:f7:9d:
         ff:cf:d6:f6:3e:28:85:db:9a:c0:66:4d:44:c0:36:4b:56:18:
         91:30:f1:bc:46:ed:bf:9e:d4:41:ef:cf:b5:0d:72:83:28:53:
         55:48:f5:ac:11:90:d5:fe:bc:67:45:4e:35:3a:55:37:dd:ac:
         b9:c9:84:04:cb:8e:6d:f9:1e:be:ec:f8:6c:1a:a3:d0:1c:38:
         ce:82:ac:41:36:bc:65:79:18:24:ad:fa:e1:17:00:d9:a8:f5:
         a3:48:6f:a8:6a:c5:6c:bb:de:29:d8:12:28:74:86:9f:ff:bd:
         58:31:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:30 2026 by rpki-client