Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File:                     1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier:          9fbwAOTFsNPBxkG+0/cF9sKFEW6CjadB8uFGthj7MMM=
Subject key identifier:   C6:19:06:E6:41:51:D6:90:96:95:0B:00:A3:4B:28:38:80:F3:AC:4A
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer:       /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial:       019CA9B358DF89901681CE58CE2CA70665E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 14:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:28 +0000
Files and hashes:         1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: 3/4CT7+6CWsT0Lzfq4KhEzZBtj57KxXkKZMcPOPQJdw=)
                          2: WqEnKFzBfeJzGRg3q0xQA818br8.roa (hash: p62OMTqeflTKBBGHK0BkC6wtW0ZeWTlpmF+DHVQ50XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:58:df:89:90:16:81:ce:58:ce:2c:a7:06:65:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
        Validity
            Not Before: Mar  1 14:00:28 2026 GMT
            Not After : Mar  2 14:00:28 2026 GMT
        Subject: CN=c61906e64151d69096950b00a34b283880f3ac4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:55:57:20:2a:cb:13:90:f2:67:8f:9f:fb:
                    ae:2c:11:7c:5a:cc:38:62:95:dc:08:37:91:43:ba:
                    78:fc:6f:19:46:fb:fd:36:86:86:80:19:bf:3f:40:
                    f3:47:86:c9:ce:49:ad:ef:54:f1:15:43:0f:39:89:
                    90:99:b8:da:2d:22:28:27:2a:77:b5:b1:b1:ab:67:
                    2c:c3:a4:d0:9b:64:e0:1e:43:e0:1a:3e:05:fc:67:
                    f2:f6:ee:86:4f:9a:75:15:21:78:8c:49:16:92:fa:
                    e0:34:59:80:9d:e9:9a:17:7d:3c:80:19:21:f6:5e:
                    c5:ad:e6:be:7e:98:d2:c4:ff:9d:23:c0:06:a0:31:
                    c7:eb:99:62:c4:69:7e:5c:17:71:d2:76:4a:7c:9a:
                    d6:f1:8d:a2:d2:18:3c:8e:02:74:c0:eb:0f:7c:67:
                    99:13:3d:ac:4f:28:52:76:38:5c:34:5a:93:55:24:
                    d7:d3:78:54:0c:c5:44:48:c7:95:39:e4:73:0e:24:
                    ad:09:bf:55:6f:76:1d:22:a8:8f:6d:95:50:51:f3:
                    26:6a:3c:d5:93:f7:e7:53:f9:d8:9f:e3:8e:cb:b4:
                    bf:c1:dc:f1:31:7d:33:c6:6a:62:61:3a:cf:81:11:
                    a9:1a:c0:a4:bd:9d:31:6b:2f:57:a0:28:43:8f:ff:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:06:E6:41:51:D6:90:96:95:0B:00:A3:4B:28:38:80:F3:AC:4A
            X509v3 Authority Key Identifier:
                keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:02:a7:d6:fc:ec:29:ac:3e:31:5f:78:72:d9:a9:06:4a:2d:
         7d:fd:98:10:0e:94:15:47:d3:8c:1d:e3:50:66:69:9d:38:2b:
         56:0d:e9:b5:43:af:04:2c:c4:d1:72:8a:47:ed:de:c1:71:7a:
         a7:0e:48:86:f5:e3:20:7b:c0:3f:e9:fa:dc:f6:bf:17:09:49:
         0a:72:1d:73:6c:d1:78:e0:48:51:c1:96:20:c5:e8:5b:75:b8:
         f9:c8:62:86:08:ff:d9:28:42:1f:77:de:ca:4b:99:90:c8:e3:
         76:d5:3f:10:8c:f9:b5:82:2a:5c:e5:b5:63:cc:af:14:6e:8f:
         26:5b:32:dc:74:4c:0f:6c:30:4e:b1:e7:6b:e5:09:48:a6:9f:
         df:34:c3:dd:56:0f:84:f5:06:9b:7f:09:ac:c4:9d:f1:07:09:
         00:1c:60:cd:ee:d1:2a:e1:37:30:74:8c:47:1c:1f:f7:ce:18:
         ff:44:5e:9e:aa:37:35:d8:eb:8d:50:02:3e:70:ab:99:bf:01:
         5b:2d:23:21:a4:fc:ed:d6:92:e3:1c:08:05:4a:c9:37:06:cc:
         3d:8b:5a:9f:c7:22:d3:4d:9a:f5:88:a2:a1:13:b6:0c:9f:bc:
         06:fe:d8:27:1c:69:d2:b5:56:5b:a9:93:1e:fa:1d:77:5d:50:
         1d:8e:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:35 2026 by rpki-client