Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
File:                     rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json)
Hash identifier:          2Sn8LFD93OOU8dnsicxOX7Bfrl0SqGb0SbczNkNYrjA=
Subject key identifier:   0F:BE:A6:5F:AD:D4:DF:79:5E:BE:4B:38:E1:09:1B:2D:C3:B2:19:32
Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
Certificate issuer:       /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Certificate serial:       019CADC7E89BA8E05AECD88B49D441F5EC0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 09:01:25 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:25 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:25 +0000
Files and hashes:         1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: Hc6tQp1CQejpNEYpU0o30PI8qdKeUEQeMnLUxXX04Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:e8:9b:a8:e0:5a:ec:d8:8b:49:d4:41:f5:ec:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
        Validity
            Not Before: Mar  2 09:01:25 2026 GMT
            Not After : Mar  3 09:01:25 2026 GMT
        Subject: CN=0fbea65fadd4df795ebe4b38e1091b2dc3b21932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:c2:f3:83:92:34:66:8e:6f:53:ff:4e:0f:
                    45:fe:5d:04:96:74:fc:65:a2:23:a7:49:30:a3:38:
                    f6:b4:6d:c0:d0:9c:c0:e7:3a:dd:a5:b9:45:80:47:
                    2d:53:6b:83:63:c8:0d:52:be:51:c8:0a:c2:5c:b3:
                    c1:9d:8c:7c:bd:b0:1f:a0:fb:58:d3:42:a4:9c:26:
                    82:1c:19:47:06:da:0f:db:d9:cb:51:83:0a:c2:98:
                    29:a0:e3:8f:7f:8f:1b:00:bd:a0:60:61:a1:cd:ce:
                    86:9e:12:4c:45:60:c6:1c:59:e3:5b:83:24:6b:c0:
                    56:8b:33:59:6d:82:0e:dc:ff:e9:3f:64:1a:65:a5:
                    d1:05:b4:35:d6:02:f6:3a:30:87:63:82:d2:2a:f1:
                    8d:e6:bd:34:b8:fc:36:5e:0f:4a:54:0c:ae:fb:d8:
                    ba:88:5e:9e:97:b9:4e:51:4a:1f:d0:bb:33:e1:f3:
                    60:19:2c:6b:dc:07:d0:32:cb:f0:2c:d1:da:49:54:
                    b0:8e:f3:6d:3d:48:38:c7:d4:63:b4:2e:76:6e:a3:
                    23:99:fc:74:4c:ef:23:af:3d:d9:5a:f7:8c:d0:40:
                    12:aa:1a:96:40:40:a6:80:81:a1:32:39:2c:d1:5c:
                    cf:e7:c6:a2:2d:08:73:2f:f8:64:ed:64:57:2f:94:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BE:A6:5F:AD:D4:DF:79:5E:BE:4B:38:E1:09:1B:2D:C3:B2:19:32
            X509v3 Authority Key Identifier:
                keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:11:40:71:28:40:7c:08:ed:0e:ad:41:9f:37:59:ef:13:
         54:a0:ef:ed:25:32:54:96:32:55:9a:2c:2d:13:bf:4e:bd:c5:
         77:ec:9c:f5:51:8a:a5:80:39:09:09:d5:58:33:5a:4b:dd:f6:
         b0:29:39:3b:b5:a6:1f:98:77:29:83:4d:f1:ee:05:1c:17:4f:
         a6:3b:6d:e4:73:0e:63:69:c9:3d:e9:3a:ea:35:eb:93:19:cf:
         72:67:2a:a0:71:69:b6:2b:84:49:13:96:d7:de:e8:bb:d9:e2:
         db:3b:db:0e:3f:9a:37:a4:a2:14:49:6d:3d:d0:65:1f:4d:28:
         c0:ff:7a:c7:0d:ca:8b:c7:8d:97:c6:dc:4c:b8:04:c0:3b:19:
         a4:27:32:90:ec:dc:69:06:c9:6b:08:29:25:77:da:5d:f9:fc:
         26:0f:97:48:43:a6:3c:13:1d:0d:b3:50:6a:e5:c3:22:82:07:
         d9:04:a8:86:9b:d7:d8:bb:03:00:0e:94:4a:56:56:8f:4e:24:
         df:1a:58:84:1c:75:76:4f:9e:f2:f9:35:52:13:6e:3d:8d:16:
         7c:77:e1:c5:b6:3d:24:33:b6:06:58:a0:df:0e:7d:b6:1f:c0:
         be:eb:03:31:e8:2c:82:c5:50:33:fa:99:ca:51:c1:89:9b:e7:
         4f:12:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:13 2026 by rpki-client