Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
File:                     px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json)
Hash identifier:          fbNzbYk/gf9Udpp/kfoPMiACQd146KKwgscUWwqetfI=
Subject key identifier:   EC:95:C8:28:0C:67:08:01:B9:98:64:CE:07:3E:D9:3C:82:28:31:8A
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Certificate issuer:       /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial:       019CAAFD32701FD07F40FA3379B48551083C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 20:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:46 +0000
Files and hashes:         1: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: DXPJx/1o714CKN1a4OEH0Kx9Z7UL05r/Pfm+edztzrU=)
                          2: x_1M9RRJIIpTocCZXPLsBX6ztLM.roa (hash: qZsoduGUCBAJMXBIGG/9ZlHZs7W5OTiaFIuJE4vUirA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:32:70:1f:d0:7f:40:fa:33:79:b4:85:51:08:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
        Validity
            Not Before: Mar  1 20:00:46 2026 GMT
            Not After : Mar  2 20:00:46 2026 GMT
        Subject: CN=ec95c8280c670801b99864ce073ed93c8228318a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:b4:09:ef:84:f9:03:93:18:90:c4:82:8c:
                    d9:f4:c9:5a:cb:db:49:b2:ed:2d:ec:0a:d9:cb:eb:
                    a9:d1:0e:bc:12:f9:a8:69:5e:65:80:76:d5:2d:13:
                    27:a7:48:13:e6:36:bb:ec:a4:bf:89:6f:97:09:19:
                    20:0b:74:b7:4c:c6:35:8a:03:0c:36:0a:25:ae:ff:
                    48:7a:2b:c3:d1:24:bd:50:f2:52:da:60:1a:6d:8a:
                    26:fa:52:11:a9:bb:7f:9f:18:ec:ce:ca:d4:bd:89:
                    a2:b3:77:18:75:be:a4:f8:2b:f9:9d:6b:63:73:88:
                    6e:13:63:b2:52:de:a1:59:0d:f9:15:2d:98:1c:f3:
                    40:a9:3a:94:42:11:60:4b:95:6b:2c:8f:90:aa:65:
                    c5:72:4b:4a:85:dc:ac:4e:3b:05:9e:a3:e7:c3:a7:
                    8a:8f:98:d5:8e:ec:48:43:3b:85:3c:90:15:35:5e:
                    a9:be:c1:af:a5:38:51:22:55:1d:92:87:63:35:d4:
                    7c:c3:7b:f8:e0:7d:d4:37:a8:8c:6d:06:7a:ed:1d:
                    03:0e:cd:43:ff:bf:52:bb:19:67:7a:f7:89:08:89:
                    86:28:b6:9d:45:37:c3:dd:54:44:5b:b3:6a:7f:2d:
                    e7:b2:3a:52:45:f7:c5:f9:90:19:97:14:a2:6e:0b:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:95:C8:28:0C:67:08:01:B9:98:64:CE:07:3E:D9:3C:82:28:31:8A
            X509v3 Authority Key Identifier:
                keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:df:7a:43:d3:5b:63:4a:19:bc:c6:39:32:9a:68:bc:e6:be:
         37:4b:13:39:f9:ed:4f:5d:62:ca:7d:e9:bb:35:14:15:2c:d7:
         28:4b:0f:7f:0d:d5:1f:4e:f8:ef:55:72:c9:4d:3b:c7:24:d4:
         2a:ea:a3:37:9d:6c:0b:9e:c1:d1:f3:b4:f6:be:43:69:03:43:
         f7:e3:13:60:fd:83:3b:89:80:30:c7:76:69:8c:a3:8a:27:98:
         f8:71:8a:15:98:63:43:17:85:48:e0:c1:c2:fb:e0:84:6e:04:
         83:54:23:ea:d2:81:ec:93:ba:8f:a1:c5:d1:6f:94:63:4a:9b:
         f9:32:8f:29:3c:8b:76:bc:f6:7a:bd:cd:38:a1:78:04:5e:9b:
         42:6f:61:2d:18:5a:ac:32:29:40:21:d6:1f:9e:ff:dc:87:ce:
         51:63:27:00:01:69:0d:fa:4d:33:89:d1:7a:9b:b0:2d:b6:3f:
         46:80:59:cd:9d:47:0d:ea:5e:ec:6d:49:71:c7:e4:49:91:cb:
         df:35:ba:70:54:7d:23:54:ab:c9:1f:ba:9b:6a:03:f9:9a:15:
         e2:f6:4d:35:6e:d9:7c:78:a4:9d:15:32:68:08:25:3c:e1:32:
         67:10:79:70:e9:a9:dc:7e:ae:4e:78:e3:a5:2e:96:8d:20:f2:
         29:85:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:35 2026 by rpki-client