Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File:                     R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier:          pUr8APKz+REXgHGKr44clKlvCIt4FUTPQbJhUMRLsKE=
Subject key identifier:   12:68:94:F8:91:CB:2C:A3:47:26:8D:DB:51:E3:21:55:AC:B7:44:99
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer:       /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial:       019CAA21BE630A6F270AA41C6A834C0A3FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number:          1844
Signing time:             Sun 01 Mar 2026 16:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:03 +0000
Files and hashes:         1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: Zss8h/n7yJjOAWkQvaPeKwIb4NRnAEjNL7PZP/n60io=)
                          2: svKIx-V6M8-Dgvm8-ydnbsPhfl0.roa (hash: 1Gdov46zDBd4IfBZ7HkYYkXCBemGU+SkHwwE4d+buOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:be:63:0a:6f:27:0a:a4:1c:6a:83:4c:0a:3f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
        Validity
            Not Before: Mar  1 16:01:03 2026 GMT
            Not After : Mar  2 16:01:03 2026 GMT
        Subject: CN=126894f891cb2ca347268ddb51e32155acb74499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:70:9e:59:8a:6d:5e:89:17:ee:f3:48:88:
                    fe:85:6c:91:d8:7b:45:2f:45:cd:c6:86:b6:40:ef:
                    11:5f:1d:9b:b5:00:0b:cd:18:9c:8c:82:9b:37:d6:
                    dc:1a:62:74:e1:f2:ef:d3:50:8d:d9:df:60:68:52:
                    88:4e:62:0b:98:91:54:65:dc:c5:29:9e:91:63:d9:
                    2a:86:b7:c1:d8:16:b3:a4:df:75:ae:43:de:a5:77:
                    b7:f2:14:9a:21:ad:a7:fd:12:22:f5:54:cd:1d:76:
                    b4:e6:36:66:a1:8a:34:10:c4:a0:1d:8c:48:91:36:
                    87:88:ed:67:32:93:8f:ff:92:03:70:e0:40:fb:9f:
                    d3:d8:68:d3:b1:1b:17:fa:99:07:d6:93:0b:53:8a:
                    45:74:bf:b7:7d:fd:4c:db:09:84:93:a6:0e:6e:01:
                    2c:de:a8:bd:1f:74:5e:8d:dd:c1:10:de:f9:ae:cc:
                    f8:30:67:2a:46:20:72:d2:fa:e6:36:04:1e:dd:2e:
                    ec:d0:bf:94:61:6d:02:e5:aa:40:33:cd:74:58:65:
                    2f:99:f7:51:ff:a9:82:36:48:55:f5:bb:b8:3e:91:
                    45:59:ba:d2:bb:b1:aa:7f:bf:f2:90:bd:47:00:62:
                    90:52:29:c3:de:c4:80:5d:3c:cf:d7:dc:c2:b7:64:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:94:F8:91:CB:2C:A3:47:26:8D:DB:51:E3:21:55:AC:B7:44:99
            X509v3 Authority Key Identifier:
                keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:38:7d:45:0a:d8:30:be:ac:b6:41:39:d6:ad:e4:27:11:9a:
         62:32:6b:fe:76:5e:da:b2:56:f4:98:c1:16:76:02:14:61:30:
         93:43:b0:39:ac:23:db:cf:90:71:bb:5f:c0:c5:d2:0b:ae:77:
         ce:3b:ce:6f:f5:da:db:87:e8:19:eb:79:6b:60:a3:9f:12:6a:
         df:70:98:b2:58:fa:08:04:04:79:92:40:92:a4:9b:50:02:7d:
         2b:a2:83:6b:3f:55:3b:ad:c8:13:ad:6d:7c:77:e7:d8:b4:ed:
         20:56:e0:02:00:c6:d5:ef:e7:8d:7e:8a:ab:59:0e:e8:1d:18:
         86:03:17:b5:19:cb:d8:a7:a5:3c:ef:98:be:94:50:75:22:06:
         5c:f7:6b:a7:18:bb:31:79:b9:24:24:b5:a9:59:6d:f5:4a:ac:
         8d:7f:95:8c:f4:c4:70:c8:0e:f5:10:11:6b:a1:b1:91:ff:11:
         a7:d6:d7:c3:af:ef:aa:d9:f1:49:62:c1:ef:80:94:7c:d8:f2:
         96:97:46:2e:97:52:dd:87:df:48:fd:4c:de:ef:15:49:ae:99:
         e3:7a:6e:0a:63:5e:0d:94:13:7e:56:ba:7c:8d:ec:0b:2b:97:
         fa:9b:af:11:33:99:61:97:3f:50:46:fc:a6:ae:28:e8:2c:d4:
         6f:6d:cb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:58 2026 by rpki-client