Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File:                     OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier:          8GhhNql2BIZmtaBy+oQrVqXyPOLS/JHDkbf7moLOEOE=
Subject key identifier:   A6:D7:AF:CC:B0:7D:F9:E7:52:D7:CD:80:22:50:18:D0:B3:7D:E5:B0
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer:       /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial:       019CAB6BB5A04CAA9AB5C69002829FD1EE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number:          180F
Signing time:             Sun 01 Mar 2026 22:01:28 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:28 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:28 +0000
Files and hashes:         1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: t8XluGnOHcVXvqbPoLJHKUGu3KIT+L83aRwg4kSsfLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:b5:a0:4c:aa:9a:b5:c6:90:02:82:9f:d1:ee:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
        Validity
            Not Before: Mar  1 22:01:28 2026 GMT
            Not After : Mar  2 22:01:28 2026 GMT
        Subject: CN=a6d7afccb07df9e752d7cd80225018d0b37de5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:b9:8f:88:70:6d:ad:d6:91:ed:7d:d7:b3:
                    15:3f:17:85:8b:14:f5:b8:e6:f2:c2:5a:ec:f5:1c:
                    d2:e0:d4:fe:a1:99:a6:f0:57:03:97:25:c9:e8:b3:
                    be:e7:c5:fe:53:49:67:0d:97:d9:99:7e:e2:93:68:
                    10:97:a1:9e:0b:ec:e8:b7:dc:a9:1c:b3:95:eb:b7:
                    59:93:ca:48:d0:df:ac:24:ef:b6:e2:df:ae:41:97:
                    f1:1f:df:09:d6:18:c1:20:da:68:63:ea:c0:ac:27:
                    7d:ec:4f:b0:94:bb:0b:14:5b:02:f8:1c:7b:93:57:
                    9a:82:94:05:05:b0:c2:f9:37:74:07:bd:e9:d8:ab:
                    cf:74:51:5e:19:c1:e3:93:c7:17:ef:e0:00:7d:1a:
                    92:c5:67:db:c0:c2:ee:01:53:6e:90:bc:02:13:e2:
                    15:b3:ef:7d:4d:ca:94:23:74:f2:60:31:36:b8:52:
                    a1:7f:0f:80:64:a6:e3:b7:f1:2e:cf:ef:86:e2:b3:
                    85:2c:9a:23:42:74:56:48:9a:55:8c:6c:6f:70:f9:
                    a9:bc:05:b3:b9:42:fb:89:c9:62:88:0e:1d:ff:01:
                    d1:21:7e:d0:4d:ad:d5:2f:8f:1f:53:45:2d:e0:92:
                    92:ef:d7:69:8c:f8:cb:00:09:aa:72:c1:48:e3:18:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:AF:CC:B0:7D:F9:E7:52:D7:CD:80:22:50:18:D0:B3:7D:E5:B0
            X509v3 Authority Key Identifier:
                keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:26:ed:0c:2b:d4:26:6c:6d:2c:8f:56:fc:bf:90:d3:df:
         ce:f7:d2:c5:13:d9:51:cc:75:26:3f:98:04:f6:d4:e4:8e:87:
         bc:b0:e7:3d:59:34:d0:d7:96:21:4a:9e:e8:d8:b1:14:13:63:
         1e:b1:75:73:26:fc:03:8f:92:08:f2:fa:76:48:f7:0e:c6:bd:
         50:3e:6b:92:4e:78:b0:6c:46:97:27:32:c4:82:4c:43:21:7f:
         85:5c:e3:3a:87:21:de:85:28:60:8f:0e:fb:d6:51:4a:39:7a:
         fa:a9:46:85:68:3c:39:38:4c:6c:5c:c4:45:0f:45:e0:a6:db:
         29:62:0c:62:f1:85:bb:cc:7a:7d:e9:63:98:50:f9:9e:fd:27:
         c1:a2:1e:9a:1e:cd:a2:c2:d8:28:0d:9f:64:2f:03:f1:ba:7d:
         e5:9b:76:82:ef:57:3a:2d:73:e9:e0:a4:6d:54:bc:ac:fe:07:
         73:ba:59:ae:04:f6:eb:89:a5:d7:28:89:0a:61:a1:e6:54:f4:
         d4:e5:bc:8d:62:f0:f8:75:6f:f3:88:b3:6c:b6:38:70:87:59:
         84:39:e9:e0:33:8f:0e:47:bf:c9:00:64:38:21:f7:5e:58:d0:
         c6:97:04:a6:2b:b5:a7:81:86:9d:5c:9a:34:96:5a:d9:7b:99:
         11:65:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:15 2026 by rpki-client