Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File:                     1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier:          pOa7qW0xMVXCP0tsFkdd/FyevE/LfGqVY22H/UrnncY=
Subject key identifier:   1F:C8:95:35:9A:DF:58:4E:B6:CB:08:CA:02:58:0A:CD:E2:4D:79:67
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer:       /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial:       019CAD595874084FBC1F7C92A8E28D20B302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 07:00:39 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:39 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:39 +0000
Files and hashes:         1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: CY3WMs8lMgbwu/baGYHyVEhtER7qalEn/tqd5DUviMY=)
                          2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
                          3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:58:74:08:4f:bc:1f:7c:92:a8:e2:8d:20:b3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
        Validity
            Not Before: Mar  2 07:00:39 2026 GMT
            Not After : Mar  3 07:00:39 2026 GMT
        Subject: CN=1fc895359adf584eb6cb08ca02580acde24d7967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:62:5f:7b:09:93:48:e9:ac:cf:7b:20:71:
                    5b:20:27:bc:0b:89:eb:1b:0f:c8:fa:4a:0f:cb:83:
                    ad:99:79:89:0d:1d:93:4d:75:80:37:80:bc:63:73:
                    3b:ce:b8:bd:04:58:50:fb:78:58:96:40:73:52:09:
                    67:d7:ee:54:50:a3:54:0c:ac:02:80:66:59:6a:03:
                    17:bd:3c:c6:af:61:84:92:66:04:f3:53:b1:80:e0:
                    63:1d:a3:74:02:1f:d2:e9:2b:a1:4a:06:c1:25:54:
                    59:9c:1e:97:01:c3:c0:5f:63:d8:07:4c:f9:9b:e3:
                    98:24:59:92:0e:4a:6b:7f:a6:06:9c:36:dc:0e:0c:
                    74:6a:ab:7d:9b:f9:d8:0d:8f:f9:c7:a5:74:3c:36:
                    1e:6a:ae:cc:fc:f8:46:e2:ac:07:58:43:79:bc:6c:
                    0c:de:b3:22:3a:42:f2:6f:a3:e1:20:61:a3:83:ac:
                    bd:63:cf:ff:c3:6b:eb:91:9b:37:f8:de:58:00:26:
                    68:99:ef:e4:1a:6e:c3:84:4d:87:78:d6:92:41:48:
                    f3:3b:15:04:7f:93:cb:14:9b:52:62:a1:a8:92:a6:
                    8f:d4:96:d3:6e:32:34:0d:ff:8d:56:e2:36:fa:ce:
                    72:5b:a4:3c:ba:46:b7:b0:b3:35:45:f3:0f:68:98:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:95:35:9A:DF:58:4E:B6:CB:08:CA:02:58:0A:CD:E2:4D:79:67
            X509v3 Authority Key Identifier:
                keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:f8:00:da:7b:6c:8c:fc:80:33:d9:35:c1:d8:c1:69:20:
         fc:76:38:b1:57:1e:9a:aa:65:a2:9d:2f:eb:99:21:5b:12:67:
         9d:97:b4:ad:ec:28:bf:b2:c5:b0:95:84:18:40:ea:5b:66:9f:
         e8:ab:44:b2:b2:ba:17:67:fa:ec:f0:09:70:5e:06:3b:78:d7:
         ad:d2:d4:a3:84:e0:88:d4:7f:dc:58:66:cd:87:85:82:3a:d5:
         50:75:c5:f8:8f:9d:f0:94:da:45:20:a3:f0:1d:54:bf:bc:81:
         70:40:22:75:f8:a2:0f:6d:dc:5e:01:c4:33:5a:4a:cc:fd:20:
         17:5d:b5:9d:d4:a3:33:35:9a:62:d9:52:6f:4a:ea:c7:9f:a2:
         63:f5:d7:db:1e:fd:59:70:ad:37:a7:d3:81:b5:2f:86:6a:02:
         c9:d8:39:31:7c:b9:d4:8d:0d:7b:8b:52:5f:af:a3:27:93:32:
         ea:6a:da:f4:69:53:63:f8:99:b8:80:fe:bb:d9:a0:da:f4:96:
         7f:2c:41:47:27:4f:c9:36:a8:40:71:e2:0c:12:b9:a0:88:be:
         7f:5c:ed:21:37:28:06:64:a4:9c:3b:59:d7:fa:12:22:db:e0:
         bd:7a:1c:72:db:d7:cc:11:1e:b6:b4:a4:27:be:c1:f7:e2:ab:
         dd:3c:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:13 2026 by rpki-client