Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File:                     _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier:          x6Nc7YcxBOtN/6POVfXTg/0hxeTGX5SPcfMI/mSOUYY=
Subject key identifier:   44:70:53:9B:AF:28:E0:25:0A:60:F5:BA:80:D0:C5:2D:5F:BF:F6:3A
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer:       /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial:       019CA94602C02493782D65BB622F2F6DA6C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 12:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:03 +0000
Files and hashes:         1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
                          2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: 7QZdojRmDsUyFp40zLf8DIM55PrNy/hGIwgVd4jKmeo=)
                          3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
                          4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:02:c0:24:93:78:2d:65:bb:62:2f:2f:6d:a6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
        Validity
            Not Before: Mar  1 12:01:03 2026 GMT
            Not After : Mar  2 12:01:03 2026 GMT
        Subject: CN=4470539baf28e0250a60f5ba80d0c52d5fbff63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:fb:04:28:3e:39:ce:65:ae:9a:5c:57:53:
                    0a:6a:02:0e:c7:87:e5:c1:19:92:ca:70:53:e0:4b:
                    e0:b1:16:b2:45:8a:2e:8c:03:e8:76:2c:0e:dc:92:
                    3b:7b:4b:ce:a4:ec:61:63:f6:da:35:b8:be:d1:da:
                    59:2a:c0:3c:53:5d:2e:b6:7d:6e:2a:fb:85:77:62:
                    74:45:a8:3b:a1:05:f6:ee:09:9b:31:d5:76:9a:a4:
                    d5:c4:c3:38:8d:2f:ff:d1:4a:e2:04:53:d6:6e:16:
                    de:a1:71:8c:db:93:9c:cb:75:94:a6:9f:a6:58:fa:
                    b4:66:b1:6e:d3:64:14:a6:35:3f:d3:f8:94:7b:51:
                    bc:e0:dc:f5:71:ed:8c:b5:5b:ab:0e:e4:63:e1:c5:
                    67:67:2f:3c:27:5f:74:f2:fd:d1:e9:ee:81:01:27:
                    42:4e:ba:96:cd:bc:b7:66:6c:fd:b7:d1:f7:ec:8e:
                    f5:a4:c3:ca:39:28:d2:fe:b0:bf:3a:6e:ba:93:cd:
                    63:e4:2e:a6:bb:1e:bc:2e:fa:bd:17:85:2e:1f:d9:
                    c4:c9:1c:eb:b8:08:9c:30:b5:62:e6:97:56:60:79:
                    de:51:ac:75:9b:07:e4:a7:05:9c:1d:d2:76:3b:90:
                    bd:dd:6e:43:90:0c:89:3d:1a:92:af:4c:5e:5d:dc:
                    08:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:70:53:9B:AF:28:E0:25:0A:60:F5:BA:80:D0:C5:2D:5F:BF:F6:3A
            X509v3 Authority Key Identifier:
                keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:b2:53:e0:6c:65:e1:d2:7c:b6:a9:31:c2:bc:d2:b8:0e:
         10:99:9a:8d:ec:d9:4f:13:30:87:47:3a:49:d2:7f:70:ed:5f:
         fa:18:02:44:06:1b:af:cd:30:8a:45:1e:11:cf:9d:ba:10:e4:
         5c:c9:5c:21:17:34:6c:28:79:02:dd:7e:3e:9d:94:bb:51:a6:
         d4:5e:73:0f:b0:7c:5b:65:a2:08:01:4f:ef:dc:fe:c3:e0:c5:
         c9:8e:41:3f:0e:9d:88:4c:f2:63:72:18:34:da:59:8a:0d:e3:
         5a:77:19:12:b3:b8:ca:1d:f7:69:a8:18:09:4f:b3:4d:71:81:
         b3:7f:bb:9f:d8:ca:58:8e:b1:b6:cc:16:10:44:d9:d8:35:68:
         41:7d:50:2d:5a:12:9c:0d:1d:c5:48:f0:7d:2b:45:eb:0c:e3:
         90:21:7c:e2:83:3a:b8:d6:ea:40:8d:04:ff:d9:e0:73:ac:a6:
         df:a3:67:6f:4b:ba:d2:ef:18:e0:69:f6:b2:15:f8:fc:68:09:
         2e:de:83:b1:ab:f7:80:ee:7a:5b:f7:c2:b3:42:1f:79:ff:93:
         be:e6:04:71:c9:75:96:e1:90:22:1c:4a:01:a9:77:dc:69:d1:
         21:1b:40:d3:1e:e6:48:30:81:6e:9e:9d:82:67:d6:bc:81:af:
         09:76:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:12 2026 by rpki-client