Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File:                     ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier:          21pA3ZHVU9B8I9cuAtZ/y5zVRUd3QteoF+BiIO9XazU=
Subject key identifier:   AB:E6:AC:19:BF:CF:F3:EB:59:46:F6:E9:C1:CA:E8:86:C1:C1:BC:E0
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer:       /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial:       019CABD9908972ED9ABD2764E64AD59BDC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:01:28 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:28 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:28 +0000
Files and hashes:         1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: 5MND9qyXi/2B6m1bcWf/R78J+r0+/6pNFi0d/G8LbRs=)
                          2: xyVPs0ecwv7hgKVZwIDRh0zqfGM.roa (hash: V+bXCXbV9NnDV0p52d/jRRKy0cavlH8sSqLEer0tVtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:90:89:72:ed:9a:bd:27:64:e6:4a:d5:9b:dc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
        Validity
            Not Before: Mar  2 00:01:28 2026 GMT
            Not After : Mar  3 00:01:28 2026 GMT
        Subject: CN=abe6ac19bfcff3eb5946f6e9c1cae886c1c1bce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:6c:ef:a4:eb:4c:c6:10:ff:f8:a8:d1:39:
                    07:7e:b7:ae:9a:29:b3:cf:ee:83:41:d2:2a:cf:a6:
                    08:da:07:02:b6:62:83:5b:1e:39:05:a7:32:4c:9a:
                    61:33:6b:3b:5b:f8:f1:1b:18:67:df:d7:99:f7:cb:
                    34:84:79:eb:75:dd:61:47:07:99:14:10:b2:77:fb:
                    16:34:98:c6:74:25:5f:2b:cd:01:4d:35:9e:15:ae:
                    c5:ef:46:cd:b4:76:b4:c3:95:a2:87:bc:6b:85:07:
                    f5:36:1c:19:6f:8d:f5:15:54:c1:a9:0c:c5:80:cb:
                    66:68:b5:c4:39:df:49:66:60:da:ce:c2:52:f3:d3:
                    82:54:88:a7:0f:be:b0:e4:a6:47:3a:75:17:f7:2f:
                    8f:9a:de:b6:99:4f:18:b2:e6:5c:a4:cf:bf:ad:9c:
                    3e:4e:ec:08:31:7b:8b:83:59:ff:51:f6:ce:d5:1b:
                    5c:07:27:b3:4d:d2:0d:01:16:5a:73:67:63:71:3a:
                    7b:32:64:c7:b0:e7:c3:c9:68:f9:b6:f1:c2:36:95:
                    9d:68:65:6a:46:14:7c:ab:8f:cb:ee:f0:f9:a4:8e:
                    00:61:e2:02:2c:f9:9a:86:e6:82:5a:33:93:97:31:
                    dc:f4:4e:0b:2b:7a:f2:58:a5:67:cd:47:33:fd:c2:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:AC:19:BF:CF:F3:EB:59:46:F6:E9:C1:CA:E8:86:C1:C1:BC:E0
            X509v3 Authority Key Identifier:
                keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:23:8f:30:e6:b7:70:78:d9:92:ae:e7:70:89:83:d5:78:
         d9:81:8a:64:49:87:65:55:f4:0c:83:89:6f:2f:17:76:5c:a5:
         5a:72:d4:e2:bf:eb:86:da:78:cd:8f:6a:ad:bd:5a:a2:6a:c5:
         ec:71:e6:f1:a4:74:c4:82:04:fa:79:05:ae:92:db:50:4a:c5:
         b1:82:d8:a3:5f:a8:97:ad:d6:cf:20:af:f1:8f:3f:45:cb:59:
         e9:15:56:ef:8a:7a:6c:f8:94:08:60:3d:dd:ea:33:f4:a6:f7:
         b7:3d:21:ad:8c:62:45:72:2c:ef:c1:66:2a:c1:9b:b5:71:9c:
         52:8b:1b:8e:06:b4:2d:1c:2b:d9:46:47:f1:11:a6:b7:d6:45:
         d3:83:f4:a0:b7:df:03:27:1b:24:b9:1f:14:65:fa:d0:0b:3a:
         15:25:12:04:f0:0a:4a:03:01:7a:5e:90:13:81:5e:a8:59:b1:
         24:ef:47:aa:37:c2:e0:fb:28:7f:49:51:0d:d5:10:30:99:92:
         a6:9a:ad:54:b2:11:80:6f:cd:b1:90:ef:e7:56:1b:15:b0:8d:
         7e:20:49:d6:60:25:65:e5:1c:2f:ac:ae:93:ac:70:a8:e1:97:
         a1:1c:8d:f0:a0:3f:6a:27:11:3e:ac:6a:61:89:eb:85:e0:4c:
         d6:56:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:33 2026 by rpki-client