Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File:                     oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier:          THDS/iaDRSQBw1DmEJGvAfDmY0SDujKp1tl1lU2gFEU=
Subject key identifier:   35:68:3F:49:FF:14:55:B4:5D:CE:54:F2:56:52:FE:75:AA:46:01:C5
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer:       /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial:       019CAB6AF89EBE81485864653F64E26124A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 22:00:40 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:40 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:40 +0000
Files and hashes:         1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: v+KnmTOdUr/VC64/wcYTym5J6lxjIivK2NEkBM5t4H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:f8:9e:be:81:48:58:64:65:3f:64:e2:61:24:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
        Validity
            Not Before: Mar  1 22:00:40 2026 GMT
            Not After : Mar  2 22:00:40 2026 GMT
        Subject: CN=35683f49ff1455b45dce54f25652fe75aa4601c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:ab:87:cb:d8:7d:a2:2e:93:19:a3:75:68:
                    23:c6:6c:ec:04:c0:10:2c:1f:42:b7:e1:5f:6e:2b:
                    73:40:28:04:5d:23:0e:e5:bb:1b:b1:7f:d2:bc:7a:
                    12:51:f1:c2:63:1a:30:58:b5:9b:c1:42:18:60:12:
                    5e:c8:37:21:d4:38:c9:50:9a:20:f2:ba:bc:f1:f5:
                    38:a1:6e:7d:9a:b1:c2:11:52:2e:79:60:96:7a:9d:
                    2d:10:d5:50:b9:73:24:7b:70:36:5b:29:d5:1e:62:
                    e6:ad:b8:5c:7e:bd:2b:04:54:7a:da:d0:ff:f1:d1:
                    37:20:ad:ab:ba:0a:8f:c8:d0:02:10:9f:04:bc:9e:
                    2f:a0:35:bc:1f:c0:a9:7d:33:d5:0b:88:69:7d:f9:
                    c2:62:53:97:52:f3:85:19:9e:86:cf:b9:0e:c9:4a:
                    e2:06:35:97:6b:e9:17:77:82:cb:14:85:0d:72:a2:
                    0a:0c:7c:c3:d0:92:1e:09:79:a3:2f:8c:e9:3c:46:
                    04:aa:bb:a9:09:98:29:82:87:d7:58:a4:7e:90:b9:
                    2d:50:48:68:40:b7:db:71:57:cc:46:15:02:80:04:
                    f4:2b:b5:b1:6a:18:03:1b:4c:f6:6e:e2:4e:9d:b0:
                    14:fc:b1:69:fb:81:02:1b:0b:7c:59:32:76:b7:a7:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:68:3F:49:FF:14:55:B4:5D:CE:54:F2:56:52:FE:75:AA:46:01:C5
            X509v3 Authority Key Identifier:
                keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:7c:40:0b:d9:5c:98:07:d3:23:2b:52:f5:aa:77:fe:08:
         e8:dc:2a:10:42:e8:65:8f:f1:d6:76:fa:b2:42:8f:8a:fa:bf:
         10:4f:49:b1:71:5e:e9:e4:80:1f:c6:37:22:63:79:70:59:f3:
         e4:63:e5:ca:65:d4:78:1a:75:69:db:e3:1a:47:63:2e:fc:c0:
         90:2d:20:37:29:03:a8:58:40:06:a5:0f:8e:33:08:31:40:03:
         dc:48:7f:ff:1f:98:a8:fc:18:6d:d4:92:1f:bc:e4:66:b0:28:
         92:cd:69:f6:93:32:18:77:09:b9:7d:71:6b:52:2c:31:c3:7b:
         ef:cb:64:dc:9a:ec:a2:d8:00:2f:b2:93:19:f5:06:16:31:9a:
         f4:a3:88:90:aa:d3:57:b9:15:f0:ca:c1:51:5b:aa:d9:51:29:
         6a:f6:9f:bf:50:f2:15:68:76:23:98:0b:c9:f7:7d:a7:bf:c9:
         d6:21:29:fc:1e:5d:07:db:a3:66:8c:e4:d3:80:3a:dd:3a:e4:
         92:1d:0c:af:81:f5:02:39:2e:e4:5f:e7:f9:9e:6d:85:54:09:
         16:31:00:27:eb:d2:b4:b7:94:fb:b2:d3:fa:b3:cd:2b:a0:46:
         77:ea:0d:d1:57:2d:f6:a4:c9:df:f8:10:1a:9f:9e:d3:75:58:
         53:89:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:32 2026 by rpki-client