Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File:                     aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier:          TKCxfRHgxXpaS+5WrLu8Fn2nr7YgEeI9HjdbPJMXIXM=
Subject key identifier:   15:B3:61:70:EA:1C:23:5F:5B:92:2E:B9:CA:CC:04:23:B6:59:0D:62
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer:       /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial:       019CAB6B026D5C7C769793697930006A5F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 22:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:42 +0000
Files and hashes:         1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: yKZogFwEf42qSefXsbtyZCtNHIKJ4aSXeemA03DRsF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:02:6d:5c:7c:76:97:93:69:79:30:00:6a:5f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
        Validity
            Not Before: Mar  1 22:00:42 2026 GMT
            Not After : Mar  2 22:00:42 2026 GMT
        Subject: CN=15b36170ea1c235f5b922eb9cacc0423b6590d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:5c:d7:df:3e:2d:76:a7:fd:bf:d1:dc:f3:
                    b5:4e:58:e6:63:55:12:af:8c:b5:62:4c:19:73:3e:
                    89:2e:c7:4e:f8:1f:6f:d8:95:9d:b0:71:df:bf:63:
                    c1:14:47:e6:b5:95:3c:2a:d2:b6:2b:e2:c4:58:8e:
                    ca:bf:52:6d:b6:3c:fd:91:c6:2b:d7:29:77:6f:fb:
                    a6:bb:cd:10:df:90:9f:a5:2d:48:0f:2d:34:db:6f:
                    65:2a:b5:c9:51:50:97:4a:eb:6d:52:65:96:1a:36:
                    38:02:f7:74:ad:09:3c:5c:15:53:91:8c:dc:95:9e:
                    1c:06:cc:d3:ed:4f:3e:bd:87:39:03:8c:45:f6:0d:
                    2d:f0:4b:ba:24:03:bf:cc:f5:1c:a2:2f:69:6f:b2:
                    50:22:b6:0d:47:64:5a:0d:fe:e1:70:15:95:e3:98:
                    04:3c:77:e8:22:8f:2d:a8:ae:eb:40:81:c4:5e:69:
                    95:95:b9:7f:e8:47:3b:74:34:42:90:90:05:da:4d:
                    25:3b:94:15:ec:f2:77:97:bc:ac:9c:c2:fb:51:91:
                    26:ff:6e:8c:f5:3e:c3:c5:06:c8:99:ef:30:52:98:
                    ef:cc:79:66:69:27:61:b6:73:30:6f:3b:b9:1a:65:
                    fd:db:35:91:9a:1b:21:02:0f:ac:e3:c6:8a:4c:b8:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:61:70:EA:1C:23:5F:5B:92:2E:B9:CA:CC:04:23:B6:59:0D:62
            X509v3 Authority Key Identifier:
                keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b6:6a:8b:e1:cb:ce:5f:c5:da:9c:4d:32:1d:dd:c1:02:f2:
         30:dc:e7:93:4d:3b:a8:45:2a:f7:97:fd:d3:cc:80:1b:54:b6:
         ea:c5:16:90:2c:c6:94:ee:a8:41:48:65:58:98:38:5f:30:ba:
         99:15:8e:e2:15:e1:b5:15:45:f7:f3:45:70:ec:92:a9:bc:b2:
         af:bb:90:64:96:7e:ac:d3:07:f8:07:fa:fb:65:89:99:f8:a1:
         bc:9b:4c:20:64:af:dc:3b:50:c4:82:9f:c0:f1:52:55:6a:11:
         78:3a:39:6d:9d:2a:06:aa:02:fc:89:9f:cd:96:8d:26:bf:ef:
         4b:cb:b6:4d:cc:46:f1:e7:ce:f2:2b:4b:80:3b:33:72:1a:0d:
         b9:5d:16:3e:85:b9:3f:cb:09:ce:dc:77:d3:7c:60:af:5c:ae:
         5c:02:c3:cb:ea:2c:5c:76:7e:bc:13:4e:36:32:57:07:f6:dc:
         8d:4b:23:5e:c7:02:87:b4:5f:5d:3f:64:df:fd:3d:0f:9f:84:
         eb:62:12:83:16:3e:b3:d1:ec:62:a8:4c:4b:bd:ec:40:c6:ee:
         75:be:b6:85:d6:82:51:1f:ab:94:d6:09:7c:17:49:ec:1e:a8:
         61:96:6d:ba:0e:c6:74:ca:ae:8d:fb:a9:3e:94:66:ba:c3:50:
         b7:1c:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:10 2026 by rpki-client