Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File:                     llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier:          Eb8FY9nM+8M+x94B6Dmu04hKADIHLvUS5Z0+Wqxcw1U=
Subject key identifier:   FC:31:83:BB:E7:C7:2C:48:92:BB:88:1D:F3:8C:21:AB:4E:79:4A:88
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer:       /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial:       019CAD592B965D26535FCA673A06D96C6422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 07:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:27 +0000
Files and hashes:         1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
                          2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 52kp43pwsfgs5GETFeKuJnFfmdIcGA8YHNCA/povpL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:2b:96:5d:26:53:5f:ca:67:3a:06:d9:6c:64:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
        Validity
            Not Before: Mar  2 07:00:27 2026 GMT
            Not After : Mar  3 07:00:27 2026 GMT
        Subject: CN=fc3183bbe7c72c4892bb881df38c21ab4e794a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:6b:85:8c:9e:83:93:50:fc:7d:ed:8a:e7:
                    d9:d2:cf:97:b1:fc:ff:9a:5a:c0:58:7b:cd:96:37:
                    10:ff:42:33:94:26:f2:37:28:bd:71:c2:db:de:6d:
                    f6:92:56:d4:ca:bb:8f:0d:f5:26:e6:ee:c3:34:b7:
                    cd:3f:9d:40:74:3f:6b:35:69:54:de:bd:c0:a7:fa:
                    3e:f0:ba:f3:81:5e:32:38:23:d1:43:47:72:29:5c:
                    c9:27:09:60:02:24:f0:69:60:b1:a9:b8:83:3a:99:
                    91:fc:64:46:c2:be:23:29:d9:90:98:00:f1:5c:bb:
                    ed:91:d5:c9:b4:86:5a:e5:a0:26:27:63:72:64:74:
                    f6:c8:c6:f7:fd:6f:3d:b5:2f:ff:62:17:3b:09:0a:
                    66:5d:70:4f:5f:52:0e:bd:5e:f4:2c:38:46:e0:8f:
                    14:ae:2d:02:3b:c0:aa:b9:89:28:7f:f4:59:77:a0:
                    52:95:58:d9:22:4b:f9:60:64:67:af:79:58:9f:c7:
                    f2:82:83:ef:33:e8:01:a4:8f:01:f0:66:0b:88:76:
                    8f:79:fd:8e:e5:1c:fb:a6:d6:49:a2:d3:b3:fe:69:
                    9d:7f:51:ed:00:65:4b:7b:10:b7:7c:f3:00:d6:d1:
                    c8:d9:89:13:81:88:93:c1:08:38:09:18:96:03:2c:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:31:83:BB:E7:C7:2C:48:92:BB:88:1D:F3:8C:21:AB:4E:79:4A:88
            X509v3 Authority Key Identifier:
                keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:58:1b:a2:ff:7d:c2:8f:c2:2d:13:aa:fb:e9:17:14:e8:ea:
         bb:bc:3d:b5:7b:48:9e:62:f2:d0:5b:af:dc:8e:c4:e9:6e:8f:
         14:04:65:9d:86:cc:68:77:36:ed:de:2f:c9:ed:f5:26:5e:a4:
         38:a9:8a:fa:94:9f:48:e4:ff:c2:b4:00:09:fd:90:d3:cb:f1:
         75:99:2e:cb:31:56:c9:b1:77:ef:12:e6:03:8b:5d:e3:4f:be:
         f6:6d:c8:3d:87:99:74:fa:ad:c9:79:b8:63:9d:00:20:cd:3e:
         b0:54:78:d7:f6:69:39:10:3a:15:da:78:53:ff:ef:b5:2c:f6:
         bd:09:1d:a6:68:b9:a7:d5:c6:bc:d9:74:a5:09:7d:00:40:9c:
         9c:ef:e6:8a:fe:83:7f:89:3a:6b:6f:0b:e7:aa:a0:2d:f1:ec:
         c6:8b:ba:20:c3:a5:2a:d9:67:4c:5e:7e:7f:3c:19:2f:d2:18:
         f6:ba:0b:f4:de:89:b6:6e:90:a2:a9:fc:d0:29:e9:3d:72:ca:
         20:98:bb:83:cd:72:ca:69:fd:99:73:d5:01:c3:e0:67:18:e4:
         0d:7f:fb:1e:59:8c:4d:d5:c2:66:e9:f9:3d:a4:91:de:be:aa:
         de:63:31:53:1c:35:ea:08:ce:2b:71:32:cb:67:89:2e:11:15:
         41:d9:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:06 2026 by rpki-client