Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File:                     a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier:          B697iDFXS/PsL2kBJ85D0Xh0DtKqy/Ctq68JseS5UuM=
Subject key identifier:   10:BB:F2:CF:CF:95:7C:5B:AA:F1:B6:E5:ED:98:FF:36:E5:DB:A2:0C
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer:       /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial:       019CACB507F979EAD72D2904270EC165841B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 04:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:11 +0000
Files and hashes:         1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
                          2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: OsAngEQQs7FIVBZ65x5S6W0h1ymnv85ZsTnhq6Nsies=)
                          3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:07:f9:79:ea:d7:2d:29:04:27:0e:c1:65:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
        Validity
            Not Before: Mar  2 04:01:11 2026 GMT
            Not After : Mar  3 04:01:11 2026 GMT
        Subject: CN=10bbf2cfcf957c5baaf1b6e5ed98ff36e5dba20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:03:f1:72:7f:4a:10:85:cd:8d:87:db:d7:
                    01:4e:65:c4:f1:b5:75:f9:82:76:d0:cd:df:48:4b:
                    4d:60:a0:5d:dc:3e:e4:f8:cc:1c:90:e3:53:88:0c:
                    58:6f:7b:62:d0:9e:30:d2:09:d3:a2:9f:d7:d3:54:
                    0d:6e:85:64:c4:61:a2:5b:25:fa:6a:92:b7:54:39:
                    ad:6e:a9:34:52:34:65:30:e1:39:31:0c:ac:3e:ca:
                    aa:d8:2f:32:6e:8b:20:5b:57:9a:ae:e0:d4:18:59:
                    40:b7:6e:9f:d4:ee:2e:e7:fe:bb:0f:a8:2a:bf:1c:
                    3c:c5:22:66:39:68:50:ac:09:3c:24:0c:fb:ea:2a:
                    82:b6:e9:db:a8:82:8b:69:7e:0d:44:a0:33:25:3c:
                    12:e5:79:3b:59:f7:d9:d5:c0:00:df:24:62:48:ae:
                    9e:79:16:a7:f7:e0:51:f7:f6:43:0c:b7:15:1d:e5:
                    e0:0a:75:5f:f1:26:4b:71:b4:a0:4a:55:a6:cd:06:
                    37:d0:34:fc:9b:ef:81:c0:c3:1c:0c:b4:8a:36:1f:
                    3a:a4:2f:84:27:fa:90:61:ca:7b:81:60:d5:fa:d4:
                    43:c6:37:fe:88:f6:04:6d:37:92:f8:1f:46:81:04:
                    6c:8b:0f:b3:05:6d:83:82:6a:f5:cb:8c:fd:0e:94:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BB:F2:CF:CF:95:7C:5B:AA:F1:B6:E5:ED:98:FF:36:E5:DB:A2:0C
            X509v3 Authority Key Identifier:
                keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:f1:a4:50:8f:ca:20:bb:ff:c2:b5:fb:37:db:4f:af:20:
         df:0e:e0:28:0d:d3:89:93:f6:fc:ee:f3:8d:96:fe:36:73:c7:
         bf:8f:7f:8c:74:b4:56:40:24:94:ae:26:0d:93:f4:4d:cf:60:
         79:7a:b0:97:b1:b2:7d:1c:44:90:7c:96:ce:f0:af:b3:88:c7:
         dc:de:31:38:2b:8f:12:be:7b:32:7d:4a:69:80:8a:f1:20:4c:
         74:3d:63:df:84:cd:c6:79:b8:31:23:90:08:fc:68:4f:bf:a3:
         a7:67:5a:4a:cc:25:75:6c:5c:52:3b:a4:81:d6:9b:05:61:5e:
         16:78:d6:e6:27:04:47:c5:d8:47:63:c6:be:42:55:20:31:bd:
         84:54:46:49:24:e0:0c:f2:4d:b9:9c:95:49:e4:9b:bd:8a:10:
         02:b2:66:42:24:53:8d:08:95:2f:84:fd:b8:24:ee:2d:c9:4e:
         39:01:7d:a5:94:df:30:2f:75:c1:e2:42:0b:e2:51:9c:ae:36:
         d3:8f:2b:b1:52:8d:9f:c3:f7:fe:51:16:3b:d5:ff:e1:8c:5a:
         5f:eb:55:88:9f:89:d4:82:3a:95:64:c2:59:2d:d9:39:0f:72:
         3d:62:39:92:be:76:a8:28:64:b0:56:ff:19:98:07:23:04:cf:
         65:3e:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:24 2026 by rpki-client