Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
File:                     c-9Luv3HPlPAmdTVLpye_6g3m08.mft (raw, json)
Hash identifier:          wguWzMPRpOoH6c9MkNB+NubXg8UYbHxtKA5buti9OeA=
Subject key identifier:   4A:D7:7E:41:46:FB:A4:68:D3:F8:B4:16:A6:C5:11:D9:E2:8B:A2:7C
Authority key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
Certificate issuer:       /CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Certificate serial:       019CADFE03EEA29A44FBF1A35403CC03CE79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
Manifest number:          146C
Signing time:             Mon 02 Mar 2026 10:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:31 +0000
Files and hashes:         1: C4YLfveDNiaL-lcFUvdtQySLbH8.roa (hash: fAR/05xQFee/ID1Zs1RfCaALZWL5X+NyjX5h5YcPkkA=)
                          2: c-9Luv3HPlPAmdTVLpye_6g3m08.crl (hash: OPc1HBjow1uDj+jXZIrdmyNH7HJscR79AWC2xvapokc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:03:ee:a2:9a:44:fb:f1:a3:54:03:cc:03:ce:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
        Validity
            Not Before: Mar  2 10:00:31 2026 GMT
            Not After : Mar  3 10:00:31 2026 GMT
        Subject: CN=4ad77e4146fba468d3f8b416a6c511d9e28ba27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:c3:4f:33:44:b3:31:9c:96:88:50:1b:0d:
                    a4:97:21:42:7a:0f:10:ad:a5:47:84:0c:9d:c7:21:
                    16:64:38:ed:a1:5c:74:d3:9c:44:20:ee:75:10:7a:
                    05:60:84:22:4b:64:02:80:a1:e1:e3:08:b2:66:54:
                    aa:4d:b8:83:b9:d4:fa:ce:9e:81:f4:03:c2:07:8c:
                    d7:bb:0f:a9:63:85:90:c4:8a:aa:3f:1e:4f:04:91:
                    ce:b9:57:e8:47:74:b3:6d:b1:b2:b6:95:26:32:1a:
                    72:25:09:d4:9c:d9:f3:d3:68:85:c1:a6:34:32:6f:
                    cc:65:11:26:b9:47:a0:d3:ea:d6:7f:13:51:9a:4b:
                    59:92:4c:f3:74:ec:73:ef:cf:cc:36:a8:99:14:1c:
                    a4:c4:9b:04:8d:54:95:19:bd:5a:bf:bf:fa:46:1a:
                    0b:46:c1:e9:47:30:7c:eb:72:3e:66:fc:33:1f:a8:
                    3d:99:b9:98:5f:3c:d9:57:2c:c8:4e:38:b7:d2:09:
                    4a:cb:a2:55:a5:5b:17:c6:e6:3b:f1:27:42:a1:8a:
                    e5:02:11:20:f1:6a:2f:4e:0d:ab:7f:fd:76:72:5f:
                    6b:73:29:ea:d3:1f:92:22:98:53:dd:e6:a6:b4:33:
                    3c:f7:ad:e3:33:74:71:48:e8:7f:07:91:89:29:13:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:7E:41:46:FB:A4:68:D3:F8:B4:16:A6:C5:11:D9:E2:8B:A2:7C
            X509v3 Authority Key Identifier:
                keyid:73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:57:4f:a5:f4:82:0d:86:c5:6b:25:71:85:f9:38:53:c0:d8:
         6d:5c:40:38:49:94:d4:f6:75:1a:b1:b3:7b:f6:42:48:d1:72:
         26:47:91:e5:25:eb:f5:d3:a5:ec:4b:db:a1:b0:0d:45:b0:a3:
         21:25:7e:6a:1f:7f:48:f1:b4:eb:32:f0:1f:6b:87:2e:a7:c6:
         3b:d1:07:59:db:53:bf:5d:91:97:93:d4:f6:82:48:22:ba:65:
         bf:5f:ae:1f:95:7a:ab:9d:85:59:de:f8:84:3c:42:46:d7:58:
         9d:2d:77:9c:ff:07:25:b9:ad:52:0a:f2:64:5e:85:79:6e:cb:
         99:ad:3b:3b:c4:bb:03:7b:02:ea:15:32:d2:9c:fe:c1:2e:83:
         14:6b:28:fd:13:be:87:79:de:be:e7:8e:74:e2:a5:6b:57:9e:
         5a:40:6c:34:c5:03:19:6f:d8:aa:44:f3:c5:f7:69:d5:66:a1:
         9a:10:da:20:50:fc:56:73:73:ba:15:2f:c4:d6:39:5e:48:f8:
         cf:29:7e:fd:7d:de:61:bb:9a:29:0f:47:5a:06:b3:18:59:d9:
         b0:2b:b5:24:5b:fc:13:d9:bf:8e:0e:7f:f9:bd:b6:27:8e:10:
         3e:23:fb:6e:ca:57:2f:fa:5e:f3:24:e9:9d:06:c1:54:87:cc:
         ba:32:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:39 2026 by rpki-client