Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File:                     1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier:          Va3MaJHpwcI3oQgXNQ34pW09dX38R1Rqtj0D7wDcStc=
Subject key identifier:   04:28:5D:D9:C8:5D:17:6E:9F:F5:CB:C7:01:FD:42:4A:C4:89:57:87
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer:       /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial:       019CAD59440F1B4CA598BC025CFBFB2A9244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number:          16B7
Signing time:             Mon 02 Mar 2026 07:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:34 +0000
Files and hashes:         1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: Sfw4x3w4NmAV9LqFngBvQj6LCzHXgdBSUWv1c2r0UvY=)
                          2: DiLQ3eZ63QejRg20eifdk93Yy6U.roa (hash: qnHrUbQPvPuYp+ZX7v/G+y+XPviRkjsxd6v5SyH+MSU=)
                          3: XAe1D-UfnccOxjr0BZ8NMJhUIRY.roa (hash: J/R1zb6aQ5p1OEoahc9Oc76aJRSMz4QrbKyCD2+fCrk=)
                          4: jTGcRo3hhX-PWVq5dJVjc2uQbr4.roa (hash: E6oHGy8IhhcshyaYtATT6go1WUadzT652DZ7kyPwmPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:44:0f:1b:4c:a5:98:bc:02:5c:fb:fb:2a:92:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
        Validity
            Not Before: Mar  2 07:00:34 2026 GMT
            Not After : Mar  3 07:00:34 2026 GMT
        Subject: CN=04285dd9c85d176e9ff5cbc701fd424ac4895787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:b6:56:04:3b:2b:98:af:52:c5:21:4e:54:
                    40:d6:94:0d:de:9e:df:bd:08:58:08:87:86:af:7b:
                    39:63:cd:ad:bb:14:27:67:1c:6d:aa:ad:6d:8f:74:
                    6f:35:87:47:51:78:a5:c3:f6:0d:27:19:81:ff:86:
                    65:99:10:dc:1c:d7:50:52:f1:22:07:94:bb:cd:ab:
                    c5:34:f3:46:18:ba:6c:fd:88:73:22:34:a1:fa:eb:
                    4b:6c:84:d1:e3:27:51:6d:88:16:1b:6c:ec:d6:42:
                    37:76:c5:bc:53:e4:9e:0d:fb:70:61:be:6c:0e:bb:
                    77:06:2f:74:dd:43:ab:7e:3f:9b:14:87:94:79:5a:
                    74:9c:35:08:f2:b0:2f:c9:4b:a4:e0:e6:cf:f0:ad:
                    eb:fc:95:ec:8f:d6:db:8a:d1:c9:01:9a:bb:9a:1b:
                    0a:73:a2:a8:19:3b:b4:62:97:12:d1:31:60:09:1d:
                    80:e5:d5:13:e9:45:16:67:24:41:f7:34:b1:a3:d1:
                    d7:83:0e:92:f3:5e:ff:ab:bf:f0:8e:ef:b2:33:4f:
                    ed:f6:20:33:72:dd:21:19:28:86:d5:19:c2:b4:d1:
                    ca:f2:bf:03:6b:8c:8f:98:7b:33:27:61:36:88:1e:
                    43:b9:4d:ad:1b:af:8a:d8:96:84:74:a7:cc:8f:18:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:28:5D:D9:C8:5D:17:6E:9F:F5:CB:C7:01:FD:42:4A:C4:89:57:87
            X509v3 Authority Key Identifier:
                keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:59:b1:db:0c:a5:50:88:66:8a:27:aa:93:1c:81:50:e9:
         d5:20:29:3f:3f:5f:3d:03:ac:d8:bc:50:1c:f5:3f:bb:ad:2d:
         a3:1d:72:4e:7e:1d:d6:79:0a:53:e3:a4:63:1b:42:4b:3b:c2:
         31:99:c6:b3:7c:a2:cd:49:c9:71:87:42:95:1d:7a:a7:a2:17:
         04:73:45:87:b8:1c:bf:a8:5e:0d:ae:08:f7:e0:82:2e:ec:06:
         84:7f:26:0f:5d:f0:19:41:27:01:67:16:fb:ab:78:99:16:6a:
         0f:3c:eb:ec:a2:67:12:da:c9:6a:4a:c8:e9:47:3d:2e:b7:e2:
         b3:62:2f:76:a3:59:87:4a:a9:d0:02:2c:83:f6:80:5d:64:47:
         97:85:a8:96:c9:a7:8b:26:93:a6:32:4a:3f:bb:08:c1:50:23:
         e6:18:cf:c5:9f:d6:46:a6:0f:87:29:78:b7:ab:34:f2:ec:ff:
         ff:40:53:e4:83:65:28:2f:d1:25:b1:58:77:df:e2:8a:d7:be:
         d9:3e:ed:74:31:2d:02:62:9f:f8:91:f5:30:46:92:74:f5:65:
         91:97:7e:7b:26:23:66:17:a8:77:a3:f9:9d:4f:52:a4:03:c9:
         dc:0e:16:1d:3f:34:7f:f9:56:57:d7:20:5d:e7:58:bc:a7:d1:
         34:7b:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:22 2026 by rpki-client