Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          tIU+x9KCCZyic9MWlduIQdIv3Adm2YtM8qqcpMs3ivk=
Subject key identifier:   13:82:E4:5C:60:D5:3C:F6:95:DF:4F:FE:0A:E5:55:8C:03:EE:E7:22
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       019CABD9FCCD6B398D2B42941596EB201979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 00:01:55 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:55 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:55 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: ePtNdYtIcK79LXNbGd/G2cfZKHQFUMVV2u+oHjEFv9A=)
                          2: n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa (hash: nnAzk/5RgBrrO3CmKUlZtLCI4l4l5DYZR2tkopYIdL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:fc:cd:6b:39:8d:2b:42:94:15:96:eb:20:19:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: Mar  2 00:01:55 2026 GMT
            Not After : Mar  3 00:01:55 2026 GMT
        Subject: CN=1382e45c60d53cf695df4ffe0ae5558c03eee722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:9b:21:fa:fa:03:a9:ea:13:60:4b:d3:b2:
                    68:ef:1b:f8:f3:1e:10:b9:82:4a:69:02:20:f6:31:
                    fb:ab:20:e1:f2:e6:94:24:34:c2:4c:66:11:86:3b:
                    48:0b:21:0f:0e:21:ca:20:bf:4e:17:82:75:5f:84:
                    50:19:97:e2:88:72:6a:9e:5c:cd:18:db:07:5e:dc:
                    69:04:bc:3d:ca:fb:bb:1d:1f:41:97:8e:76:fe:55:
                    0b:ac:0c:71:7e:00:c4:15:e9:fb:33:30:c9:bd:6e:
                    c4:41:4a:ea:41:4d:c4:52:f4:f0:9d:42:25:42:39:
                    45:bc:aa:4c:2c:d9:8b:cf:c2:ae:90:fa:ae:db:ac:
                    c1:66:f2:c0:f4:c6:91:aa:c9:79:fb:83:89:df:88:
                    24:79:71:34:95:f6:2e:c8:c4:b8:ac:02:65:62:7f:
                    eb:ed:0a:7f:76:18:dd:60:cb:42:3b:72:f6:40:36:
                    ad:be:f3:8d:ea:43:ed:ae:cf:dc:09:b4:fe:a9:ec:
                    e9:64:28:4c:5b:af:b5:ac:e7:16:d6:7f:d9:42:82:
                    62:84:b9:9a:b6:07:56:35:f2:1c:c9:31:14:b8:45:
                    3c:45:bd:bc:86:52:78:bb:d8:d7:d4:dc:f2:a1:ba:
                    46:6a:f0:d5:c8:96:56:fe:42:ed:c4:0c:58:dc:8f:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:82:E4:5C:60:D5:3C:F6:95:DF:4F:FE:0A:E5:55:8C:03:EE:E7:22
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:07:ae:9c:93:3c:af:0c:a6:1a:9e:e6:c8:fc:b4:7e:da:
         fb:19:dc:8a:d6:cb:10:93:fd:61:65:4d:9c:61:bb:57:0e:db:
         18:cd:37:c2:31:05:46:b8:50:7a:df:0f:61:5d:56:91:ed:ed:
         e0:b0:45:0c:60:e8:e0:68:34:27:b6:39:4e:eb:65:cb:3b:f8:
         f1:61:d1:76:95:8b:cf:38:01:4f:4f:85:aa:db:e7:06:74:cd:
         89:9b:76:be:2a:9b:8b:e8:68:db:b8:6c:e4:4e:ca:3e:ed:55:
         d1:2f:c8:24:f9:a6:fd:c9:74:9b:4f:6d:62:91:b5:01:3d:5e:
         32:97:f4:97:74:bf:23:61:05:06:e3:ca:ae:c9:ac:6e:e4:06:
         8e:2f:30:2f:8a:8b:9a:ec:e8:39:cd:f3:8e:4f:26:94:23:41:
         b8:21:c1:fe:ac:5f:16:ef:5e:ff:d6:9b:86:4f:2d:02:59:a8:
         2b:6c:4f:07:d5:ed:8f:6e:87:9e:20:43:c0:d3:f2:83:81:70:
         0c:be:16:78:3f:b3:50:b2:06:14:6e:79:56:4a:80:15:ef:37:
         14:11:fa:6f:91:4e:9e:68:40:24:04:c1:96:f7:e7:7d:76:0e:
         0c:a3:13:30:ce:50:34:44:3e:ab:84:ed:46:43:c6:7a:e2:e6:
         97:16:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:09 2026 by rpki-client