Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
File:                     3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft (raw, json)
Hash identifier:          SkNj4VdxaORhkEpiGp8O0THarULyVHG1NeLgK38o4xE=
Subject key identifier:   10:FD:AD:81:FB:62:48:34:E1:42:C3:D8:05:B1:06:26:3C:D0:30:5A
Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
Certificate issuer:       /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
Certificate serial:       019CAD227243A320D722726DCDDA55AFD7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 06:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:41 +0000
Files and hashes:         1: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl (hash: W9ay6tWv1EVclumf+MC+8p5Pl82sq5PPTrvp4etEoVo=)
                          2: _yiSgUOzwENT6HWFGMrWkl5JgGo.roa (hash: 0WyaaoMTpom+arYMmqs6/I0vff3v73Sx2KKt3/t+tGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:72:43:a3:20:d7:22:72:6d:cd:da:55:af:d7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
        Validity
            Not Before: Mar  2 06:00:41 2026 GMT
            Not After : Mar  3 06:00:41 2026 GMT
        Subject: CN=10fdad81fb624834e142c3d805b106263cd0305a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:0b:20:79:6d:24:06:e9:b2:45:0c:5b:13:
                    dd:4a:3b:d8:41:67:17:b7:f9:93:67:0c:15:0b:9e:
                    f5:4c:fd:b9:0f:03:5d:01:85:4a:76:86:d4:67:69:
                    ac:57:d8:c0:c6:da:69:80:b6:e1:92:ce:93:8c:c2:
                    47:f0:aa:8d:d9:1d:7b:69:ca:bf:35:48:1d:7f:59:
                    cd:13:e2:2c:26:66:d7:67:57:43:14:fa:59:af:4c:
                    48:3e:8a:d7:64:fd:4d:63:ab:d6:37:eb:d0:b0:4b:
                    c4:f0:d0:f9:45:72:40:8e:51:7d:3c:06:4a:da:29:
                    42:b0:c5:83:af:ca:34:10:fe:af:2f:5a:fe:a9:69:
                    2f:83:db:88:fb:c6:a3:32:3a:04:ac:e2:a1:a2:15:
                    4b:a6:0a:92:53:44:34:82:68:82:fb:cc:5d:27:9f:
                    f2:4a:e5:df:0a:b8:9c:79:6f:84:2c:cf:40:b3:43:
                    f6:a1:51:7c:6e:7e:42:4a:12:00:c0:1f:57:cd:63:
                    ce:04:05:c1:05:f2:44:9b:47:39:b5:2c:3a:20:34:
                    e2:01:c7:5b:2f:bd:20:87:a9:e9:5a:1f:f2:75:25:
                    9f:15:30:46:d9:d5:36:32:07:80:52:4e:c4:b8:be:
                    16:7b:14:c8:cc:20:f4:0c:b2:be:33:64:59:37:ba:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FD:AD:81:FB:62:48:34:E1:42:C3:D8:05:B1:06:26:3C:D0:30:5A
            X509v3 Authority Key Identifier:
                keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:cb:75:73:e9:ab:71:73:53:71:47:dc:a0:a5:33:b2:95:
         2e:6a:c8:c0:57:74:9b:93:b8:15:de:1d:65:db:87:69:ea:9b:
         25:d3:2e:36:fd:68:8f:61:29:65:df:39:94:66:a4:6b:30:48:
         58:57:fb:33:81:88:d6:59:11:89:75:78:43:ea:18:03:c3:1d:
         24:7c:69:e7:8e:9e:02:b4:fd:29:fb:53:da:0c:25:39:08:3e:
         8e:7a:8d:bb:3f:74:58:34:b8:23:eb:e3:94:6f:36:15:f2:38:
         51:59:f7:bd:0e:b0:1f:29:0a:60:8b:0f:48:39:b2:cb:13:e1:
         48:4b:97:6d:eb:36:2c:10:b6:2a:05:99:eb:2e:6c:1a:3e:3c:
         b3:ad:0c:ea:ab:8b:46:ae:4b:13:7f:2a:2e:fb:a9:5c:2b:36:
         41:12:ce:a7:41:a2:f6:63:22:14:cd:de:22:43:e4:76:5c:a0:
         47:ac:7e:4e:4b:f2:3e:ad:30:a9:c2:9d:59:fa:dc:ea:99:53:
         f8:94:ae:c9:a0:93:64:21:3f:8d:52:71:41:b6:cf:a4:8f:2b:
         2d:48:11:60:38:21:7e:a3:08:ce:ba:b9:e4:a7:1f:ba:0e:d0:
         8d:de:28:46:20:05:63:96:10:5a:7b:3a:39:78:4b:d2:94:6e:
         84:18:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:27 2026 by rpki-client