Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
File:                     skFYMFfyBWPJOCuJTx_OrKVfvaM.mft (raw, json)
Hash identifier:          ubJDMEpcxo3vCnIkkYfuTiiVn1obDEWZGBs6tfCPxWc=
Subject key identifier:   44:A6:C5:07:5F:6C:58:7E:32:F5:7A:22:8E:68:FC:E3:4B:61:B3:C8
Authority key identifier: B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
Certificate issuer:       /CN=b241583057f20563c9382b894f1fceaca55fbda3
Certificate serial:       019CAAC6E6E385012DB3CCB89D79E8F42DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 19:01:27 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:27 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:27 +0000
Files and hashes:         1: skFYMFfyBWPJOCuJTx_OrKVfvaM.crl (hash: TzFgtu7PVx+mxvzxvGlb29HqvkvaoEhx+7ofNE7WiVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:e6:e3:85:01:2d:b3:cc:b8:9d:79:e8:f4:2d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b241583057f20563c9382b894f1fceaca55fbda3
        Validity
            Not Before: Mar  1 19:01:27 2026 GMT
            Not After : Mar  2 19:01:27 2026 GMT
        Subject: CN=44a6c5075f6c587e32f57a228e68fce34b61b3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:2a:5d:fe:59:3a:71:05:2b:77:ef:94:e9:
                    34:36:ba:56:e9:99:89:af:3f:18:1f:56:93:d6:a0:
                    6c:b3:c4:9d:a4:91:6f:d7:4e:f8:1f:6e:37:7f:8a:
                    3f:59:80:8f:84:b7:15:14:95:c5:d2:d5:00:e3:be:
                    5b:8d:06:16:88:b3:ac:a4:ea:5f:57:8e:0b:80:05:
                    7f:34:65:3e:96:4a:80:d9:b5:cf:2f:ac:ac:48:23:
                    88:85:36:0d:4c:7b:de:fd:30:2a:3d:81:3a:3d:8b:
                    6b:28:26:55:f9:fb:d1:68:3b:6d:88:4f:df:31:40:
                    27:26:af:0e:a4:bd:6a:65:80:9a:16:5c:ef:9d:44:
                    cd:6c:99:bc:61:41:79:5c:eb:bc:5a:dd:e2:51:f6:
                    13:19:42:3c:08:e5:76:05:3d:0c:6f:ec:ab:2c:08:
                    fd:43:00:02:bd:66:a6:27:ee:9e:3d:b3:d4:ce:0a:
                    4f:18:93:e1:c0:00:c7:4b:69:76:3e:b3:a7:54:d2:
                    4b:fe:cc:b4:84:61:82:87:29:23:35:e0:75:51:ef:
                    b3:1a:33:2d:d8:84:7f:39:f7:5c:5e:c5:c8:ea:9b:
                    75:e2:d4:85:ea:d4:6e:67:70:1e:3a:4c:fc:2c:2d:
                    d0:be:fb:55:7d:52:4c:c8:00:80:98:26:99:95:40:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:C5:07:5F:6C:58:7E:32:F5:7A:22:8E:68:FC:E3:4B:61:B3:C8
            X509v3 Authority Key Identifier:
                keyid:B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:cc:5f:9b:9f:9c:48:f3:4e:8e:d8:e9:d8:4f:1a:37:8d:17:
         d8:f0:1b:65:e4:65:27:5d:10:a0:b4:3b:af:ad:5d:97:3a:f3:
         cd:56:d9:f0:6d:87:68:af:35:d4:94:14:aa:a6:92:4d:56:57:
         72:1d:de:45:b9:e3:7e:ad:2f:10:6f:fc:01:51:4c:72:70:71:
         06:c2:d5:a7:be:81:c9:9f:67:42:03:70:d3:1c:51:89:a4:27:
         27:4b:9a:ec:99:97:a7:d6:5b:1e:2e:0d:db:20:f0:20:88:f4:
         b0:d5:ae:c8:a5:07:33:21:9f:5e:a3:f1:c9:95:76:3c:46:75:
         05:15:9e:3c:1f:dc:cb:da:99:b9:54:90:f5:d4:27:ee:94:b4:
         23:7b:50:18:9c:03:1c:1d:01:95:21:04:91:2d:01:df:87:cc:
         0c:0b:17:50:51:d4:53:cc:17:fa:c6:bf:fd:c7:f6:df:07:d5:
         c3:7a:53:7f:68:3b:0a:14:37:d9:73:6a:96:96:95:2f:fd:55:
         98:f7:8f:f6:41:4b:25:75:11:4a:1b:b1:36:83:62:a3:59:a7:
         1c:56:32:b4:db:8f:61:1e:b4:a2:34:87:93:47:82:4d:0c:9b:
         95:62:48:22:76:88:90:26:e9:5c:91:fc:8b:d4:59:ca:b8:17:
         47:05:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:51 2026 by rpki-client