Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File:                     V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier:          QkSRZCQOE8FiuvdY3FzBhux39F3Vqq9DXhVC9GlVhH0=
Subject key identifier:   6B:98:4E:17:09:73:91:94:41:A5:FB:CA:59:B6:58:1A:23:29:3B:3E
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer:       /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial:       019CAA2133A5CB4E820412DF78DEDDB1322D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 16:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:28 +0000
Files and hashes:         1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: YdBCaNUhfZb4bshCHpdbZkWa7lsfRXc7bs2vsah7yoc=)
                          2: _2mYhyEmox4U7AkRFuLnV0YKs70.roa (hash: ZWw2rwABCSgN0Y7jGr8liBETqrTgznEpSmvQbAW6bMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:33:a5:cb:4e:82:04:12:df:78:de:dd:b1:32:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
        Validity
            Not Before: Mar  1 16:00:28 2026 GMT
            Not After : Mar  2 16:00:28 2026 GMT
        Subject: CN=6b984e170973919441a5fbca59b6581a23293b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:7b:34:8e:d0:d8:db:73:00:3d:8c:04:5b:
                    1a:2a:55:ba:e3:de:a6:a0:7a:b2:eb:d6:b2:0a:d1:
                    bc:d9:4e:7c:fb:1e:bc:c3:a1:87:6c:35:7f:28:a6:
                    4d:5e:6f:2a:d4:bc:4e:36:4e:53:d7:6d:76:ec:70:
                    f6:e5:3a:bc:8c:54:e3:c4:4f:ad:9c:8a:38:d8:18:
                    49:69:d8:27:3d:f9:f6:89:e1:a9:6a:92:86:ea:e2:
                    8d:c3:2d:3c:45:56:9b:98:86:51:06:6f:a1:03:8b:
                    5f:ae:4d:eb:5b:98:3b:d9:a0:95:20:31:02:a5:c4:
                    3e:3a:7d:51:c5:eb:94:cd:4b:b1:ca:87:a4:5f:01:
                    30:06:de:b5:36:a3:e6:52:e9:0b:43:cb:f2:8d:2f:
                    2e:bf:74:a8:6f:a7:1b:e6:ff:65:79:d1:65:11:23:
                    d9:8d:bf:49:83:11:70:e3:8a:c7:a4:1d:5e:52:31:
                    75:d7:86:2f:87:c7:fc:b2:79:43:dc:35:36:d4:ed:
                    63:3c:ef:6d:8e:02:70:30:a2:87:3b:09:fc:ac:e1:
                    51:61:f0:9f:1d:09:71:dd:c1:06:3f:49:3a:d3:1b:
                    b0:33:9b:48:89:48:51:1d:ea:b2:44:07:a6:16:97:
                    6b:b5:27:61:93:b8:bf:b2:3c:4b:04:bf:66:d7:00:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:4E:17:09:73:91:94:41:A5:FB:CA:59:B6:58:1A:23:29:3B:3E
            X509v3 Authority Key Identifier:
                keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:70:7a:8d:11:7d:d3:77:f1:81:1e:23:fa:23:c8:31:18:24:
         71:e5:d5:ef:0a:dc:78:42:f6:59:9f:08:f5:0b:30:f4:4a:4d:
         e5:fa:74:0a:e2:eb:aa:e7:17:cb:02:d3:c4:a5:63:a1:9c:a3:
         a2:44:c0:a1:b2:a0:79:a7:99:b3:7a:36:4e:73:f2:a4:4e:18:
         54:34:5e:b6:03:b4:38:de:1e:20:e6:77:f9:da:46:ac:7f:55:
         83:e2:e8:8d:22:7c:22:91:80:8b:d1:23:f1:73:2b:29:7f:eb:
         2b:f3:5d:02:18:65:cf:f2:0a:a3:24:1b:d1:4b:5e:fd:6a:80:
         33:0b:a1:e0:29:0e:be:04:60:ab:8c:51:3a:8c:7f:32:7e:4e:
         fa:56:ec:3d:89:8b:a8:24:3d:76:0e:af:1d:b7:df:6f:89:a5:
         9e:71:3f:83:f2:48:6e:d2:96:31:a2:1f:73:ed:4c:80:ce:37:
         61:af:26:cf:ec:60:ba:c1:36:89:4d:4e:89:7e:7e:42:57:0d:
         53:9a:7b:a7:ee:be:0c:66:85:a1:f0:db:ff:ba:f5:97:8b:19:
         f6:f0:9c:d9:20:bb:11:a3:cf:30:ff:31:59:60:bc:e0:8d:19:
         03:30:75:8e:b6:9d:f4:84:9c:5c:dd:83:bf:b5:06:c8:2e:07:
         21:9f:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:02 2026 by rpki-client