Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          jBpNomx6zU4cDQeRfWrVn23wjw35elNjLODWfXBPL7E=
Subject key identifier:   B6:1F:C9:B1:32:B9:63:61:59:4D:DF:C0:63:37:C7:20:A3:77:96:EB
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       019CAC1012C607B79C67903CE68FD34DD86F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:00 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: sO2rbv7c6ol2Pjn4Vh0UDRDYArGKXAopnzRMd89FDWQ=)
                          2: CbDZWAH-omIyip_WwmqNFzGEN6Q.roa (hash: JAGjJAojKoIa2rnuQE4G2jO7W0AL58snegAhZ+6Gung=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:12:c6:07:b7:9c:67:90:3c:e6:8f:d3:4d:d8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: Mar  2 01:01:00 2026 GMT
            Not After : Mar  3 01:01:00 2026 GMT
        Subject: CN=b61fc9b132b96361594ddfc06337c720a37796eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:3a:14:86:30:76:df:c3:33:4a:c4:3d:a5:
                    ab:b9:cf:93:d2:ee:e1:f0:a3:c3:60:39:c0:1f:1a:
                    7b:53:84:59:1b:03:2e:0d:b3:bb:0d:c1:fc:e5:55:
                    c4:3b:74:05:44:fc:3e:bf:78:56:4b:64:a6:c0:16:
                    11:db:38:27:1b:a1:02:4b:b0:e3:fd:40:6f:b9:40:
                    1f:3d:d6:ec:a5:e2:ca:a1:0b:79:8d:f5:6a:86:94:
                    db:aa:9f:6f:8d:bf:1e:5b:5c:1b:18:ba:ba:b2:27:
                    25:32:e8:68:b6:d2:77:09:2c:08:4c:25:ff:86:5c:
                    45:a8:2f:48:43:28:f5:a7:06:08:45:70:84:6c:7b:
                    2b:df:2d:ef:bc:d7:12:0e:5a:c3:d1:19:30:db:b6:
                    ef:c5:c7:ba:84:bd:fd:58:19:7e:54:aa:bf:f8:28:
                    7b:5c:dd:7f:5e:02:f7:6a:77:b5:40:80:be:0a:22:
                    8f:8b:f9:23:1b:05:52:37:b7:27:c6:c1:e0:78:c2:
                    1f:10:2f:e0:b1:15:31:3c:8f:95:34:cd:09:27:b2:
                    ea:08:35:04:51:7a:56:43:35:ac:28:86:74:98:bb:
                    a2:f1:6d:5f:f2:ab:20:7b:44:a9:1e:e9:0d:cc:99:
                    a5:c5:ee:37:77:f3:4d:48:c8:ea:4d:bf:c3:43:a9:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:C9:B1:32:B9:63:61:59:4D:DF:C0:63:37:C7:20:A3:77:96:EB
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:1c:20:37:b4:37:e5:b1:01:45:f2:a6:14:ca:29:cb:45:
         22:c5:e7:1c:83:d8:91:db:5e:9e:45:f8:bc:34:cf:fe:08:41:
         23:42:ad:af:01:86:91:59:12:15:05:ed:c3:7e:b8:04:14:90:
         d1:e2:b4:15:ce:c2:39:7a:0c:a8:66:27:ff:b1:c9:13:24:ee:
         1c:94:ad:e8:dc:fa:8b:8f:70:37:5c:d2:8f:65:c5:bc:ff:3e:
         28:51:50:44:a7:91:fa:bd:23:55:2c:3e:7b:49:3c:93:1d:5a:
         69:21:2c:d3:e1:76:57:e2:00:05:7c:72:1e:6a:c2:91:70:d7:
         ee:32:77:96:c3:55:0e:d0:09:ed:17:eb:52:1c:e3:a0:9e:6d:
         df:3b:63:df:dd:7a:63:a8:3d:53:84:16:42:ae:62:c4:d0:1e:
         7f:4f:9b:f5:c4:69:74:3c:0d:24:cf:31:db:b0:73:1f:da:81:
         bb:6a:d8:85:47:fa:12:00:18:45:9d:e8:e6:ca:d2:47:e4:48:
         81:63:d7:22:8c:3c:25:51:a6:8e:ec:ce:aa:12:2c:48:28:8a:
         c8:ef:49:68:6e:bb:43:06:94:12:3e:2b:07:a0:1f:9f:49:b4:
         2b:7a:bc:5e:6c:13:59:17:7b:30:eb:30:7e:6f:f6:d3:e5:4b:
         8d:0b:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:15 2026 by rpki-client