Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          ++6bY3ODXKKMAZtPx3YtI4xiyXDIVGD5Qh0j4HxbH3c=
Subject key identifier:   8D:34:80:B4:49:8D:23:AA:94:A7:13:C0:07:11:50:3F:C2:81:7E:8F
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       019CABD95497867E53A823239199DA76714D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 00:01:12 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:12 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:12 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: sxfjGE9Rm4+qORzSoN1jvX5e/uzoSUyiQ5mJCmVCPZ8=)
                          2: EQUgl00EZFitLJ6oysydLWzSpDI.roa (hash: YdDTBE8waxg/izLbB0CYt1PqKhzSZ1hn6bGE3MrL1iw=)
                          3: rf8as8g6xWKnisNIKjg2yUHYSP8.asa (hash: 8dhhDgHt2G51sZMibCcljY1LkjkngjQiVuau20/yfQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:54:97:86:7e:53:a8:23:23:91:99:da:76:71:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Mar  2 00:01:12 2026 GMT
            Not After : Mar  3 00:01:12 2026 GMT
        Subject: CN=8d3480b4498d23aa94a713c00711503fc2817e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:4b:72:ed:5f:ff:cc:2d:54:fd:22:1b:80:
                    f1:74:9a:80:7a:1e:7e:67:23:e8:6d:0b:45:60:de:
                    4d:56:71:47:93:64:e4:be:23:0f:6b:cc:81:67:92:
                    26:f7:a5:ca:03:08:6e:e7:c5:cd:ce:0c:2e:83:ea:
                    ce:86:b4:a7:2d:f3:e2:88:ef:3c:55:a4:27:f5:e4:
                    d2:d4:ee:70:8d:44:19:6c:e9:24:aa:93:d9:53:3b:
                    1f:03:e4:5c:c0:0f:c7:05:f1:a8:04:94:c2:f4:6e:
                    20:d7:0f:72:3e:63:30:08:a5:52:24:91:01:a7:02:
                    11:2f:63:2a:97:7a:ce:e8:66:54:26:f4:c8:87:d0:
                    42:bd:8e:d9:43:3c:82:fa:94:76:1b:74:e8:dc:42:
                    83:48:3e:b8:a6:ce:0a:1c:20:f3:9e:4a:5c:e4:ce:
                    14:79:47:22:cd:a8:f8:65:2c:80:ca:c8:7d:e6:e8:
                    ad:51:81:e8:17:80:a4:94:8c:81:78:0e:3b:28:24:
                    6c:a6:7f:d0:8f:ee:b9:d0:0f:40:b3:4d:ce:c1:fc:
                    db:c5:50:42:40:c9:6d:77:43:7a:79:84:3e:8a:c3:
                    09:ae:25:44:ed:6a:ed:a3:11:e9:c4:fb:7d:45:00:
                    05:ac:25:e4:da:2d:13:da:08:0b:52:95:ac:40:63:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:80:B4:49:8D:23:AA:94:A7:13:C0:07:11:50:3F:C2:81:7E:8F
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:51:91:c9:3e:75:5e:d5:ea:e7:5c:00:b0:a8:15:f7:77:a8:
         67:fd:82:b4:bb:54:95:93:54:8e:e5:57:65:5f:bd:0b:d1:97:
         83:0c:de:2c:27:8e:45:bb:b2:87:0c:5e:55:21:83:aa:d9:d0:
         dd:a6:f2:32:60:0b:25:70:46:de:76:95:d9:80:38:92:ea:83:
         ed:7a:34:75:c5:53:f3:94:7b:f6:32:6b:31:38:45:1c:73:25:
         d8:fd:a5:8d:41:0c:06:52:6f:3e:e3:b6:43:d4:f4:12:f9:5d:
         36:06:b9:aa:aa:54:04:33:bd:d4:70:b3:c5:9f:6b:f6:2f:42:
         1b:a2:8c:18:7a:2c:2e:4f:4b:81:c4:9a:52:c9:dc:4b:36:2d:
         ac:33:f5:32:d0:e6:13:e6:28:ad:20:b4:d8:71:ad:7b:f7:3e:
         73:01:0b:e8:96:69:c1:b2:58:c6:7e:df:c2:db:82:5e:71:30:
         b8:00:6c:b5:d9:10:7f:a0:b7:78:45:2f:1f:fb:b6:77:c5:88:
         20:36:84:b4:8b:ba:2e:76:9f:34:d4:2c:ec:a8:5c:17:b4:67:
         b0:0d:ff:72:68:7a:09:e4:0a:03:77:4a:44:ba:22:ec:11:6a:
         62:0a:fb:f0:2d:a9:4e:fa:51:56:ea:c3:1f:10:14:ae:bc:d2:
         48:79:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:26 2026 by rpki-client