Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier:          E7eYtv+HRDJGfOBb0p75Dl6JGzNLIrjsZnsFXRcdjUA=
Subject key identifier:   10:C3:99:2B:26:11:59:BC:70:BF:88:9B:63:A0:E2:25:45:11:C5:B4
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer:       /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial:       019CAB6BF47E729839A7E7B858E1C5AC035F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 22:01:44 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:44 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:44 +0000
Files and hashes:         1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: 5v5LAzlQNBLbh9zfaUqv9Dkss+63EfH5kCI77BvXt8g=)
                          2: pIgvzLjixs4_sf2VopagAU-SJ2k.roa (hash: 8W+ULMj0Umqs1HGvdH4mGs4tGpsjhjBCqHgwP2+9Xgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:f4:7e:72:98:39:a7:e7:b8:58:e1:c5:ac:03:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Validity
            Not Before: Mar  1 22:01:44 2026 GMT
            Not After : Mar  2 22:01:44 2026 GMT
        Subject: CN=10c3992b261159bc70bf889b63a0e2254511c5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:31:a2:d5:38:79:31:7e:85:64:47:0f:7b:
                    f4:3c:38:f1:81:39:9f:c1:f5:1b:46:88:9d:3c:52:
                    7b:a1:51:c4:c0:a7:e9:5f:30:df:04:d9:05:50:a3:
                    7c:6e:91:d4:8c:6b:e6:f6:8d:33:ae:f7:ac:af:13:
                    62:64:60:cc:43:1f:a9:38:2e:1c:74:dd:69:bd:f2:
                    6a:0d:2f:5d:02:20:cc:5b:31:23:bd:1b:2d:20:09:
                    b2:3c:b6:db:61:fc:2b:b8:d7:a4:d3:64:d7:12:9e:
                    53:26:f4:47:58:fc:b8:31:67:78:21:5c:09:20:80:
                    dd:99:49:03:54:2e:4a:40:97:bf:46:1a:90:18:a6:
                    14:13:23:83:8a:69:8d:a4:19:78:b0:10:af:97:f1:
                    8b:75:f1:c3:12:1d:d0:38:68:9c:e2:8b:cd:26:08:
                    e6:af:c4:ac:7b:b2:38:a9:bd:28:cf:26:49:25:2a:
                    96:4d:d0:22:f2:91:c4:91:8d:a0:24:26:2d:db:24:
                    af:57:dc:6a:53:43:85:41:ac:e1:c7:3e:06:de:58:
                    87:c0:49:18:49:da:e2:f7:e5:50:f0:59:92:46:7d:
                    4c:33:1d:19:eb:7d:1c:52:34:f3:24:ab:a9:ad:25:
                    c0:b1:e6:df:76:42:e3:f7:a9:c5:8f:89:58:e3:ba:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:99:2B:26:11:59:BC:70:BF:88:9B:63:A0:E2:25:45:11:C5:B4
            X509v3 Authority Key Identifier:
                keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0e:cd:d0:bb:4b:2e:0f:86:b0:a0:52:37:62:bb:0e:2d:96:
         bf:90:39:39:05:a0:01:09:05:fe:e4:af:d8:d7:9a:e3:99:e8:
         72:7b:2e:ac:0a:2f:01:2a:24:44:6a:36:76:09:73:bb:e0:f9:
         80:19:de:2d:95:84:9e:2c:c1:51:e5:22:68:62:4a:27:c4:81:
         08:55:e2:27:6b:87:6d:0b:03:85:c6:e1:6d:fc:67:20:04:86:
         a3:1d:d1:c8:f5:da:66:98:8f:1c:39:b4:e1:59:73:58:71:4d:
         ff:f2:24:31:c1:a2:46:db:3c:67:75:3e:eb:8b:b7:12:c2:6d:
         4c:64:df:bd:ee:97:9f:96:32:b0:d4:ab:2e:ee:c4:30:62:48:
         e2:fd:33:51:a0:74:a4:22:61:74:2e:b5:af:e2:36:61:81:e6:
         8a:96:c7:0c:82:c0:4e:e0:27:c7:d7:f2:f0:9e:e8:2f:98:c5:
         65:0c:98:ee:cf:40:d2:6e:28:75:bf:fe:8f:d9:60:ff:a0:33:
         f5:47:89:ea:e7:c7:6a:d7:11:28:2b:07:a7:d0:8b:af:19:c1:
         7e:f4:b3:f2:2c:65:21:f4:a7:e5:0e:e6:c0:30:3f:61:1c:dc:
         78:27:e7:74:6b:ee:93:89:27:a4:86:15:d5:46:bc:79:d5:04:
         4a:cb:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:28 2026 by rpki-client