Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File:                     AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier:          nJFoI2Vwa56CxK3xV5xyAbKtLiIrf3H6W0dP82HDa2c=
Subject key identifier:   7F:58:6F:47:29:F2:2E:A7:C3:E3:C8:EB:F2:5A:E0:04:4A:96:9A:4B
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer:       /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial:       019CA9EB0DAFE76035D9891AB75163A1E032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 15:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:19 +0000
Files and hashes:         1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: oU2gokV/8odQr/3MpG5893RBpnsUPfSL9nM6nXiDyRc=)
                          2: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (hash: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:0d:af:e7:60:35:d9:89:1a:b7:51:63:a1:e0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
        Validity
            Not Before: Mar  1 15:01:19 2026 GMT
            Not After : Mar  2 15:01:19 2026 GMT
        Subject: CN=7f586f4729f22ea7c3e3c8ebf25ae0044a969a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:59:4e:57:5a:da:3a:18:9c:ce:62:c9:b2:
                    68:1c:9b:20:c6:db:b8:06:d9:cc:de:96:be:af:b6:
                    10:6f:4b:98:a7:89:36:d1:58:51:29:99:e8:ae:12:
                    df:06:a6:5a:7f:da:a2:04:e2:f4:d0:55:84:44:86:
                    94:f3:d2:f8:34:ba:df:22:81:f2:6b:d1:58:3d:23:
                    90:59:7e:16:ce:bd:27:66:31:76:db:41:60:e4:56:
                    80:59:1c:4a:05:80:45:70:9c:4b:c9:ce:d9:c5:23:
                    36:9b:46:29:ce:78:25:a5:d2:61:ff:5e:c1:44:a2:
                    cd:0c:b0:1a:af:73:c7:fa:3a:cd:e1:14:d4:cd:93:
                    aa:2d:bc:5b:e5:80:d1:df:e6:48:40:68:eb:bd:95:
                    10:38:8f:d5:52:40:37:a9:bd:52:c0:3b:a3:a7:6b:
                    a7:87:2e:00:d6:ba:36:ab:86:79:cf:81:c9:5a:18:
                    1e:40:7c:0a:cf:bc:c5:38:e4:29:16:a8:d3:fa:61:
                    bf:af:71:ad:aa:91:04:57:7c:a6:0f:43:fa:92:11:
                    c1:5c:0b:1e:43:93:b2:c3:57:df:7c:59:c9:0a:fb:
                    6b:8e:da:5b:10:67:ef:7a:f0:07:df:47:a8:3f:33:
                    06:2e:54:71:58:be:e1:79:1a:c7:0a:6d:a6:b1:a0:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:58:6F:47:29:F2:2E:A7:C3:E3:C8:EB:F2:5A:E0:04:4A:96:9A:4B
            X509v3 Authority Key Identifier:
                keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:91:96:d9:b2:42:1c:81:e6:7e:30:02:e1:ad:17:9e:31:d5:
         be:76:64:c5:d2:82:fe:83:ab:2a:fa:36:9a:af:b2:fe:16:13:
         17:3f:6d:3d:09:d8:f3:4b:1e:74:e5:27:44:cd:33:cf:42:fb:
         5e:c3:fe:be:d5:de:0e:42:f4:51:57:19:f7:0e:8f:80:2c:5c:
         0b:cd:2d:08:b4:56:43:69:88:8a:eb:6c:8d:14:9d:22:19:29:
         db:01:ad:0f:19:99:7c:6c:67:72:bc:80:65:21:54:7b:79:f7:
         35:a4:69:9a:95:fc:4e:f6:7a:2e:97:38:40:aa:06:ee:0d:21:
         51:0f:02:2e:b6:c1:55:7f:80:63:4d:75:db:90:6b:90:3c:5e:
         00:e8:2f:f7:7f:4c:48:4a:59:79:3b:69:6c:42:e7:a9:e7:35:
         87:cd:5f:65:d3:27:93:0f:d5:2d:ae:6c:ea:2a:d8:0a:91:45:
         7c:cb:67:19:56:63:8d:70:ca:dc:3d:a5:bf:8b:dd:3e:47:99:
         56:6a:06:73:98:68:f6:3f:b1:d2:fd:7d:fb:4b:f8:09:14:38:
         4d:e5:80:4d:ab:ea:e2:63:4e:d1:fa:22:1c:c7:26:81:0c:80:
         f4:e2:a8:76:49:a0:30:47:64:fc:98:ee:f8:d9:46:66:fa:2f:
         8e:60:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:46 2026 by rpki-client