Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File:                     avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier:          fTPSrb+ttyNjqNgqTOFp/qJb7Dbt5uLKlHRrUsbJNsI=
Subject key identifier:   9C:9E:83:B2:62:EF:AC:2A:FC:22:B4:8B:D7:C8:46:3A:7D:F9:15:33
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer:       /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial:       019CAC0FAA29F81483F7D63604FD125F4FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number:          0F26
Signing time:             Mon 02 Mar 2026 01:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:33 +0000
Files and hashes:         1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: 8GCGZS9PhSY53oZbfCu+ei+5LK+BQ6RAcrhSTqxSn8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:aa:29:f8:14:83:f7:d6:36:04:fd:12:5f:4f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
        Validity
            Not Before: Mar  2 01:00:33 2026 GMT
            Not After : Mar  3 01:00:33 2026 GMT
        Subject: CN=9c9e83b262efac2afc22b48bd7c8463a7df91533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:4b:48:27:78:3a:11:39:3c:16:5a:0f:32:
                    f9:4b:c6:dd:f0:8a:b1:8d:bc:88:7b:04:c7:2c:d0:
                    ef:e8:58:33:7f:9a:d6:b0:e9:a7:84:19:c8:c6:8c:
                    f7:1a:e4:0c:31:3a:0a:3d:bc:eb:df:fc:e3:50:de:
                    2c:26:d3:8f:8f:3c:0e:a8:3d:02:e8:9e:97:2c:05:
                    d7:b8:e5:aa:c6:28:e3:b5:ac:df:7f:8b:88:58:d0:
                    e5:b6:6c:d7:da:e3:8e:85:55:33:33:0c:63:c0:ff:
                    52:e9:72:74:a5:a8:dd:b3:20:c1:a9:a6:fc:73:df:
                    55:e8:73:89:05:29:cf:64:a4:4b:23:28:02:a6:9f:
                    05:70:23:59:d2:8e:0d:40:00:62:8c:0b:57:3a:15:
                    60:91:53:38:95:0e:59:aa:aa:8c:8e:45:92:ad:bd:
                    92:f1:e8:c9:e3:9f:64:e1:82:22:f6:6e:74:9c:f1:
                    cb:e4:38:fc:8d:9a:73:71:79:85:00:ac:74:bf:11:
                    f7:8d:3b:bf:22:8c:22:73:02:28:c2:9e:6c:8d:f2:
                    cc:0b:89:55:b8:e6:36:5e:50:06:d0:29:dd:b4:14:
                    63:ae:b1:53:4b:6a:4a:56:9a:c3:b0:ee:91:59:d3:
                    18:88:98:9f:f5:90:f4:c8:c2:fa:b5:12:b5:06:10:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9E:83:B2:62:EF:AC:2A:FC:22:B4:8B:D7:C8:46:3A:7D:F9:15:33
            X509v3 Authority Key Identifier:
                keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5c:fc:34:3d:cc:a7:74:f7:ff:be:cc:d6:3e:3f:6d:75:01:
         37:62:68:cf:2e:85:44:c4:02:dd:00:1d:47:01:3f:92:41:c9:
         da:a3:6a:fd:4b:c1:a1:ec:b4:16:a3:25:fe:c8:d1:d5:cf:c5:
         19:5d:a3:68:09:7d:f0:35:b4:46:25:57:05:69:ac:58:b0:fd:
         d1:f6:d0:d7:54:89:81:4f:c1:e7:2f:1e:04:9d:00:79:46:5d:
         e2:50:d8:8b:9d:a5:5b:30:0d:27:2b:0f:af:eb:88:bf:94:78:
         91:68:32:81:28:33:9d:30:9f:2a:19:42:0c:3e:f5:93:0c:de:
         66:cf:a8:7b:d1:c5:ec:7f:1a:21:e2:7b:45:27:47:18:91:18:
         cf:24:c2:81:8c:84:8f:24:d0:b2:21:a3:ba:62:12:cd:89:32:
         16:cf:de:0b:d2:88:f9:0a:0e:a3:1d:bb:a3:8f:1a:b8:a5:63:
         f3:33:cd:33:62:74:3e:55:1a:ba:58:64:1a:6c:26:a8:2a:54:
         e8:5a:d4:af:6f:b2:4f:0f:6a:d2:df:f1:f8:1e:f8:e9:2f:03:
         3d:a8:ec:08:61:72:21:97:54:36:cf:68:a4:ad:69:5a:f0:29:
         6c:aa:2f:80:bc:20:ec:2e:92:fc:f8:3c:5d:65:92:cc:50:7f:
         12:0a:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:47 2026 by rpki-client