Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File:                     DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier:          VtgDSClrHWHb599oPo9hufaJ6tqqCU37MFCCht3JoJk=
Subject key identifier:   C6:65:18:30:56:CB:9E:82:1A:B8:31:D5:E4:8B:A9:9E:8E:B2:70:B4
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer:       /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial:       019CAD59E479D343B8C3D9D8FDF6C293BF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 07:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:15 +0000
Files and hashes:         1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: edBam6Of+I3HhWt8D1zZgCt+X27InBfJ88Y977tJJYk=)
                          2: Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa (hash: szSEbM4DLAElR41izkoZqU673B1zp52SKgEtUZLpn2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:e4:79:d3:43:b8:c3:d9:d8:fd:f6:c2:93:bf:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
        Validity
            Not Before: Mar  2 07:01:15 2026 GMT
            Not After : Mar  3 07:01:15 2026 GMT
        Subject: CN=c665183056cb9e821ab831d5e48ba99e8eb270b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4c:65:d5:ac:0b:81:8d:77:f6:6a:7a:8a:ec:
                    1c:d7:e0:75:99:c5:30:18:c8:b2:a9:ea:2c:06:7e:
                    ac:a3:6d:9c:90:10:94:68:23:6f:75:ad:cd:7f:fd:
                    87:dc:3b:66:49:31:80:83:fe:d3:24:7f:75:f9:eb:
                    f7:4c:d1:60:44:ac:06:dc:a5:2c:9a:34:a9:e3:16:
                    2f:fb:6f:9d:0a:5e:33:0e:d5:bc:f8:f9:7f:ac:54:
                    34:b8:0c:7e:91:79:9c:1d:15:1c:22:0e:da:c4:fb:
                    bd:b0:f7:b1:fa:8a:af:2e:e5:29:dd:e8:92:e5:5a:
                    a5:59:89:44:6c:39:35:20:10:fa:02:8f:b8:f9:7d:
                    88:df:f7:2b:d1:a9:24:ec:fd:87:4e:2a:7c:13:b0:
                    f5:bc:e2:44:33:84:00:c0:0c:fa:1d:b9:cd:89:3e:
                    eb:9c:8b:9e:b5:90:f0:bc:78:25:78:6f:97:fb:5a:
                    0b:5a:0d:2a:5d:23:64:cb:9a:e7:2e:24:a1:2c:74:
                    2f:44:4f:d2:b8:85:76:c2:5d:0f:c1:73:71:b4:83:
                    26:a8:64:f5:b7:e2:14:96:e3:24:3e:19:fd:e9:c0:
                    be:ed:dd:30:ad:6d:da:c9:c1:bf:53:98:17:c6:1d:
                    1b:ca:12:88:07:52:2b:7c:15:35:e0:18:eb:f6:7c:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:65:18:30:56:CB:9E:82:1A:B8:31:D5:E4:8B:A9:9E:8E:B2:70:B4
            X509v3 Authority Key Identifier:
                keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:47:9a:a3:18:54:2a:9f:bf:81:1e:6f:f5:8b:4b:f5:64:34:
         71:7d:1d:b8:31:88:22:32:48:61:64:75:59:b8:57:9e:a8:10:
         24:3e:6b:e4:84:d8:53:d3:f9:9b:94:98:33:5b:1e:cd:fd:d0:
         4a:9c:d2:cb:1f:ff:cc:2d:41:e4:cf:00:82:40:7c:c2:bd:27:
         ed:5f:66:5b:de:b3:11:63:8e:64:36:b5:50:92:84:59:14:38:
         65:00:20:17:6f:83:8c:1e:92:0e:e7:1f:0a:80:07:35:9a:4e:
         7b:33:b1:69:cb:f5:55:ce:5a:39:7f:a9:94:9f:f3:f7:98:1a:
         ea:be:af:50:9b:8f:64:be:ab:04:fd:a9:c6:f3:bc:56:ad:aa:
         45:b5:90:66:1b:f5:26:57:47:6b:dd:d8:77:1c:6c:e1:ba:ff:
         07:fc:5d:0c:42:92:52:b5:7b:9d:27:d9:4d:ab:36:d3:7a:13:
         5e:07:5d:a5:ba:86:9b:2e:c3:01:c4:62:31:38:80:db:13:99:
         4d:bf:8d:66:32:9a:35:56:ae:99:4d:f2:c7:d9:c6:ce:c3:7e:
         23:bf:86:e6:9c:a9:2f:b6:be:f9:15:6c:9c:13:bd:eb:eb:56:
         97:6b:6d:5a:9f:ce:5f:78:45:0d:d1:42:c5:37:13:ae:1b:75:
         4b:bc:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:33 2026 by rpki-client