Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File:                     0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier:          JUot7zUb5wBMJhfO/R6IgKYh8EcTH/seSIJV0FFOmjU=
Subject key identifier:   90:33:D1:6C:D9:29:55:C4:52:19:E4:07:A3:56:D6:C3:DF:42:C8:38
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer:       /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial:       019CAC7E6AB50069B4A64DACDBF271F994D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 03:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:31 +0000
Files and hashes:         1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: okfPibbKazYCL7Utq98zoSFTuro9iWGudNcHWyhSlF8=)
                          2: HcdyvfGiwyc5vyJt43ZuqDnZlDk.roa (hash: 6cPvxcqUCsTomfn2PuIbeh8pnyt4KKbDTtE7dn6MQC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:6a:b5:00:69:b4:a6:4d:ac:db:f2:71:f9:94:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
        Validity
            Not Before: Mar  2 03:01:31 2026 GMT
            Not After : Mar  3 03:01:31 2026 GMT
        Subject: CN=9033d16cd92955c45219e407a356d6c3df42c838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a1:6a:1b:83:8e:bb:13:92:b7:0c:25:5f:bd:
                    f1:3f:e7:01:82:ea:20:a9:ef:4f:cf:b7:f6:02:e3:
                    c0:1a:bc:64:71:69:8f:b0:b8:e4:60:52:b3:15:b7:
                    cd:2e:9b:9f:76:f8:50:17:73:89:33:aa:04:d5:8c:
                    c2:82:4c:c2:c2:bc:f9:d6:e2:1b:82:33:4b:2a:f8:
                    f2:6c:80:24:a0:d2:81:a2:c2:4e:fb:93:33:54:a9:
                    b2:f2:05:6b:d8:a6:9a:b6:bc:2c:77:6f:a7:34:db:
                    fc:25:c3:1b:1e:3f:8f:b4:4a:74:f0:6a:32:a4:65:
                    1d:9a:91:07:2a:8a:78:00:c5:e7:94:aa:75:77:86:
                    0b:0e:91:65:75:c0:59:c3:ec:03:ec:45:44:0f:1c:
                    f7:0e:d9:43:4d:84:a5:70:61:f3:1b:aa:9c:ba:ae:
                    62:7b:e9:14:33:70:d3:63:00:84:91:b6:2f:15:e3:
                    85:ad:62:2c:f6:d7:f5:87:91:0a:16:31:64:09:c1:
                    87:e6:ca:a6:b0:be:2a:86:d5:7e:49:4c:ff:31:0c:
                    0c:8c:2e:c6:f2:7a:8b:d0:21:e5:e9:37:26:c9:67:
                    32:53:c5:c1:d9:2e:9b:39:1f:7c:68:66:7c:ba:11:
                    8e:27:59:e1:1e:dd:e6:98:c9:1d:04:dc:ed:92:e4:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:33:D1:6C:D9:29:55:C4:52:19:E4:07:A3:56:D6:C3:DF:42:C8:38
            X509v3 Authority Key Identifier:
                keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:47:c8:18:4b:bf:1f:cf:9b:9d:d6:2e:7a:9e:ed:2a:f1:
         40:49:ad:e5:12:18:f6:be:02:93:df:98:25:9d:94:51:64:2a:
         96:b1:12:7a:55:b8:ef:32:eb:d4:a7:d8:8a:9d:a9:a7:76:32:
         bc:32:dd:e3:56:19:b2:9d:7f:ae:bd:0d:26:5e:bf:0b:03:c2:
         41:df:3b:85:f4:1b:b6:40:11:b5:8d:dd:b4:30:f9:89:28:e0:
         ba:21:a1:2d:b8:57:c0:cc:53:76:51:5b:fc:da:d5:42:d1:52:
         09:6b:dc:59:92:26:21:1d:80:95:43:79:41:3f:90:f8:b9:5a:
         91:54:05:e9:c4:a9:05:9e:78:c9:5c:2e:5b:19:fa:d5:b7:bf:
         fb:20:89:10:c5:f6:41:e7:51:8a:d8:de:ca:18:94:f9:33:9e:
         ef:7c:e7:0c:86:93:7a:5d:4d:5b:67:1e:a6:cb:cd:1a:42:f8:
         37:af:30:bb:44:33:ff:60:99:69:36:ac:83:8f:af:21:f9:5d:
         ac:2f:17:a3:ce:36:62:c1:0d:1d:9d:d5:8c:26:b2:5f:de:46:
         e9:d4:93:c8:15:55:f3:bf:31:0e:d0:4d:e5:97:7a:3e:e1:08:
         db:c7:65:b4:32:0b:40:53:70:01:fe:8b:e6:0a:63:d8:37:8a:
         77:bb:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:38 2026 by rpki-client