Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File:                     HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier:          wCveIUFxF3cTrYUMjYi2HkjBPQdjc0e14/iqGSBtmS0=
Subject key identifier:   07:91:FF:F3:BE:DA:40:26:0B:D1:9E:70:7D:3F:83:E7:17:73:05:8D
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer:       /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial:       019CA9EB388746FB80DCA23E22B0365AD429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 15:01:30 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:30 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:30 +0000
Files and hashes:         1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: 8L4wzYoHsr2RZfCqwDmaNoDf9RBOADXD+buAYGTjirg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:38:87:46:fb:80:dc:a2:3e:22:b0:36:5a:d4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
        Validity
            Not Before: Mar  1 15:01:30 2026 GMT
            Not After : Mar  2 15:01:30 2026 GMT
        Subject: CN=0791fff3beda40260bd19e707d3f83e71773058d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:a4:24:28:a3:40:90:98:16:ff:4f:5f:5d:
                    62:e5:e7:4d:3e:69:d0:f9:9d:d2:e5:6d:6c:63:50:
                    15:08:86:6b:46:64:01:a2:bb:39:e3:c6:d5:51:d2:
                    26:32:d2:8b:a3:50:a6:c5:55:6b:04:2d:55:46:86:
                    1f:61:a1:c8:f3:1c:b2:75:c9:a6:38:3f:de:11:39:
                    15:cc:62:39:3b:15:25:da:df:ef:56:ac:7e:05:81:
                    26:17:16:92:3c:90:fa:06:54:e6:ec:9a:44:9c:0a:
                    35:bd:78:46:5d:37:b9:92:93:7b:40:61:83:24:2f:
                    cc:22:aa:9f:7b:70:8b:28:c0:76:ad:84:a8:e6:75:
                    c6:98:cb:11:b6:5d:79:bd:15:89:53:0b:8e:6f:43:
                    b5:4a:ac:56:82:f8:c4:a4:a9:ce:23:70:69:c9:71:
                    05:a2:69:38:52:9e:e1:72:65:f8:b6:2f:2d:69:a3:
                    41:7c:1b:42:ae:3a:76:09:98:e8:1f:9c:68:ea:13:
                    3a:c0:fb:2c:af:a1:f1:4a:9e:b9:79:f1:ec:58:13:
                    85:85:cc:91:0e:a1:92:a3:1f:84:a0:a3:5b:21:40:
                    04:1a:9d:bc:5e:93:00:80:7d:e0:db:88:82:9b:ad:
                    9c:00:1b:b4:1a:33:49:3a:bc:3c:34:e3:59:15:64:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:91:FF:F3:BE:DA:40:26:0B:D1:9E:70:7D:3F:83:E7:17:73:05:8D
            X509v3 Authority Key Identifier:
                keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:30:8b:53:aa:77:cf:c0:4a:0e:ac:0e:6a:62:c4:2f:35:
         af:05:10:ed:55:55:63:61:67:1a:d3:00:38:6c:8d:2a:41:07:
         65:a6:9f:49:d8:48:a3:2a:03:97:42:67:0b:ca:7b:78:f3:0b:
         51:b4:39:50:30:32:59:61:00:86:ec:0c:28:71:6b:be:c4:37:
         5a:9a:df:97:4b:26:00:71:59:45:ce:0b:63:7d:27:0e:90:08:
         98:1d:5f:09:6f:e7:92:ef:af:17:b5:e2:35:3d:51:7c:86:fd:
         69:bb:f4:e2:6f:f8:09:87:6e:c2:31:ec:68:83:c7:b4:d8:60:
         91:c3:5b:57:6f:1a:dc:b3:fe:5e:7e:50:ad:e6:bb:57:49:1c:
         62:a7:38:25:7b:2e:15:90:0c:79:ac:a6:78:84:0d:52:35:6c:
         59:69:15:02:f0:84:c7:76:28:bd:af:40:6e:74:06:1e:8c:27:
         5f:90:61:93:0f:de:c7:0f:17:69:e6:69:5f:93:f5:30:0e:3d:
         ae:b4:44:d4:22:e5:a6:c3:f2:53:f0:9f:45:86:56:3f:6e:69:
         34:c0:01:e1:d9:66:27:d3:0a:9a:96:cf:00:d0:b2:d0:ff:1e:
         1b:51:9b:8b:f4:ee:0d:82:e6:b6:34:21:3e:02:84:0b:9c:ef:
         b7:42:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:48 2026 by rpki-client