Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File:                     d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier:          yI0wUqeBqtj0FKrag71vOhTpJxD0hVtRhRuB2kVEnFg=
Subject key identifier:   7C:54:43:8C:10:B3:60:6C:44:43:92:19:99:25:13:86:A6:9E:67:B0
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer:       /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial:       019CAB6BF2ECC0161030CF2E13CC4D70F851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number:          1844
Signing time:             Sun 01 Mar 2026 22:01:44 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:44 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:44 +0000
Files and hashes:         1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: ALX7bSLGZUU1L5n22kvRx7FWc8+IsdfO4assTl3hroQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:f2:ec:c0:16:10:30:cf:2e:13:cc:4d:70:f8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
        Validity
            Not Before: Mar  1 22:01:44 2026 GMT
            Not After : Mar  2 22:01:44 2026 GMT
        Subject: CN=7c54438c10b3606c4443921999251386a69e67b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:9f:aa:da:3f:7c:15:b9:c9:98:7d:8e:bf:
                    b9:c7:22:81:60:c9:02:4b:47:45:7b:a7:81:4a:4c:
                    d1:4c:42:b8:08:93:42:12:93:16:12:0a:8d:b1:80:
                    02:bf:30:15:3a:51:9c:26:7e:ed:f7:89:77:a3:b7:
                    36:77:1b:4d:cc:a5:73:11:c5:67:e3:c3:c1:e3:70:
                    44:fa:e2:10:c2:dc:33:6e:4f:e3:0a:fc:4f:2a:ee:
                    2e:35:f5:47:9a:b0:66:fc:b5:23:21:05:1f:02:9c:
                    b8:85:9d:82:7b:e4:04:f1:59:0a:59:c2:ab:7a:01:
                    73:9b:7a:5c:66:a5:bb:6b:b8:3f:46:de:97:32:b2:
                    7f:9d:50:0d:1e:75:e0:13:23:9d:75:01:7f:e0:30:
                    91:b6:be:1d:88:f8:8f:fb:a4:0b:51:39:e2:89:47:
                    e9:80:ec:8a:60:5d:37:f0:90:c5:c1:6f:8c:e6:d1:
                    65:5e:fd:dc:85:f5:ec:7b:33:19:7c:0b:18:48:10:
                    02:de:40:02:89:56:60:49:9c:99:ba:c2:ec:1b:4c:
                    5b:fc:ad:69:19:c0:4c:33:4e:e4:ee:c6:86:7b:45:
                    8b:91:fa:78:0d:38:1a:e3:69:f9:74:d1:d2:9a:75:
                    2c:b4:1e:3b:23:db:ee:5a:95:85:b3:4a:13:91:6b:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:54:43:8C:10:B3:60:6C:44:43:92:19:99:25:13:86:A6:9E:67:B0
            X509v3 Authority Key Identifier:
                keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:f9:29:bf:18:13:95:bc:19:a8:65:25:88:56:fb:b5:8b:
         9b:3f:72:d9:bf:57:ee:fa:3f:1f:bc:74:98:29:cf:20:68:1a:
         8d:7a:5a:d2:f1:f2:88:c7:f5:72:0c:2e:2b:bd:4f:24:d9:e8:
         6b:e1:b0:76:68:88:c8:73:79:1d:96:91:5d:8f:85:e1:08:39:
         0c:64:bb:e1:ea:76:38:44:96:02:f6:e0:77:40:0b:94:1e:12:
         fb:1d:d7:9c:50:17:29:a0:10:fa:bb:5c:ae:db:5e:0c:10:79:
         75:ab:11:19:0b:17:3a:a5:e6:01:d3:03:c8:b5:ab:52:6b:c5:
         cd:53:6d:5d:d6:e2:92:23:58:6a:17:b0:c2:fb:70:16:c5:3e:
         e4:97:ae:78:b4:6c:fd:6c:e7:9d:2c:22:29:d2:1d:70:10:07:
         cc:7a:bc:7f:c9:1e:c6:dc:d1:8f:4b:70:72:78:db:f1:ed:a2:
         1c:97:e5:ed:33:05:e6:1c:b0:b8:1f:9f:46:c9:b3:fb:65:dc:
         db:d4:9c:a0:fd:0e:18:61:8b:41:48:9e:16:37:3e:b0:c7:c5:
         45:ab:19:6c:41:4b:c7:7d:18:70:71:34:3f:c9:17:0c:62:12:
         ba:89:c1:89:68:34:eb:68:17:98:52:a0:d1:31:4a:94:24:0b:
         4f:3a:23:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:27 2026 by rpki-client