Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File:                     bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier:          dFfSpPXSoYoMrPRazX0zX3XSP7E/E/sQynWR79espQE=
Subject key identifier:   83:77:B1:CD:A2:61:D0:50:C9:2A:DB:A1:C3:43:5F:55:23:28:68:72
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer:       /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial:       019CABD9CDEE8E82B3F999A2842D524E6B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 00:01:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:43 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:43 +0000
Files and hashes:         1: 7hearCPqGkH82yrPNdhtkZ4kgBM.roa (hash: 1K1XiEzCyji1A9po78V8w/DyD+zeqIlOg07kZeCGl6g=)
                          2: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: XE3r05od9cIG/ym3qsEjZvizw1x9iK6m5q/vO08HHjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:cd:ee:8e:82:b3:f9:99:a2:84:2d:52:4e:6b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
        Validity
            Not Before: Mar  2 00:01:43 2026 GMT
            Not After : Mar  3 00:01:43 2026 GMT
        Subject: CN=8377b1cda261d050c92adba1c3435f5523286872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:b7:18:86:f8:fa:0e:f4:7a:31:d3:32:cc:
                    09:5f:b8:00:44:a4:2a:a0:6d:aa:df:11:3c:32:1d:
                    37:21:12:dc:cc:b0:b0:82:3e:bc:16:4e:12:57:9f:
                    92:97:1c:76:c5:df:37:c4:28:84:8a:f5:cc:32:de:
                    bc:9f:eb:ca:e2:27:b7:f4:44:71:63:ef:52:96:ae:
                    53:ea:63:c5:5f:e3:48:e4:8a:9d:cd:aa:b6:d8:66:
                    dd:a1:0b:ec:b4:ee:32:a6:bd:96:f6:4e:a9:96:7b:
                    b1:ae:3e:e6:0a:ab:1e:cc:de:04:f4:3d:af:67:89:
                    ec:4f:42:25:35:26:21:3e:5e:7e:34:47:50:b8:09:
                    c7:1a:00:9b:b2:ee:7c:fa:cc:a0:78:6e:84:71:67:
                    7e:f3:6b:0f:6e:f3:3b:c9:6f:12:79:de:63:81:37:
                    79:9f:75:fe:65:8b:be:12:f6:3b:b2:84:dc:45:37:
                    45:6e:c5:62:54:e8:c4:92:ee:12:76:9d:57:4d:af:
                    c0:29:6f:87:bd:f1:d1:7c:7f:85:f8:92:1b:2e:99:
                    b7:46:cc:73:74:02:e7:99:c5:b0:f1:05:ed:a5:f3:
                    27:ce:ab:60:18:1c:cb:29:6c:03:51:d7:00:0d:17:
                    2e:9b:91:56:a2:5a:f9:2c:9b:d0:7b:17:fe:d7:91:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:B1:CD:A2:61:D0:50:C9:2A:DB:A1:C3:43:5F:55:23:28:68:72
            X509v3 Authority Key Identifier:
                keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c5:19:14:80:e2:e9:81:5d:72:ed:28:15:47:f6:b7:75:25:
         cf:4a:18:d8:a6:43:f8:75:bd:7d:26:d8:c9:38:48:f5:c2:11:
         d0:d7:7c:f7:13:e1:f9:fb:ca:91:ef:25:fa:2c:11:d8:28:a9:
         2f:8d:8c:c6:5e:39:ef:ab:a3:3a:c2:e8:48:81:c8:11:da:2a:
         a0:2b:de:08:76:6d:28:cf:57:1d:1c:d5:89:29:87:ce:d2:ef:
         8f:2f:b2:ef:ad:e4:cf:a3:82:a1:d6:65:da:61:17:7b:a5:a4:
         d5:7e:d3:c1:72:0a:08:7c:1e:57:9f:5c:aa:c9:72:fe:87:d8:
         da:9c:b0:ad:93:17:54:8e:25:39:7a:13:1f:e7:6e:48:a1:a0:
         e6:80:aa:40:7c:58:fc:a2:3d:0b:9f:45:53:ee:b6:34:61:27:
         59:8c:83:ff:87:8b:81:b3:0d:03:9d:1e:12:33:ec:60:3d:29:
         da:a2:00:1d:40:e9:f1:ef:b1:af:c6:23:05:c5:a7:0d:e2:38:
         2e:66:60:1d:92:a3:d1:f6:8e:ce:7e:ad:ed:ac:b4:3b:d4:f1:
         52:33:64:b7:57:75:55:ea:49:5f:6b:ab:3c:0b:c6:45:ae:f1:
         fc:06:73:fb:42:bf:9b:25:7e:d5:a0:7e:19:1e:e3:c7:5e:d1:
         33:e4:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:17 2026 by rpki-client