Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File:                     82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier:          OOE+sDxMSG+5/4aAi+toorpClq+PDuYz8djwAUCwTSk=
Subject key identifier:   0A:41:0E:B4:F4:7C:83:0F:F3:13:58:1D:CA:75:D9:68:19:5B:68:B5
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer:       /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial:       019CAA58DB245E8906BAD768C6D34163CD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number:          07B6
Signing time:             Sun 01 Mar 2026 17:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:15 +0000
Files and hashes:         1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: eLbIQZmmDoSTnn0Bvi2HgdIYs3G9tR8IIGUTC6R7dAk=)
                          2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:db:24:5e:89:06:ba:d7:68:c6:d3:41:63:cd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
        Validity
            Not Before: Mar  1 17:01:15 2026 GMT
            Not After : Mar  2 17:01:15 2026 GMT
        Subject: CN=0a410eb4f47c830ff313581dca75d968195b68b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f9:d0:d4:bc:75:a8:ad:54:e6:35:1d:16:fd:
                    24:23:5a:88:77:93:f7:43:b4:cc:8f:0d:30:82:3a:
                    05:78:3c:b3:9e:92:a1:f6:26:60:2a:62:c2:31:0a:
                    8e:cd:78:30:37:b8:2f:07:3a:b4:a4:2c:63:09:b1:
                    df:5e:c9:af:8a:70:89:05:22:1b:fa:51:99:54:08:
                    14:9f:cb:ef:c0:6b:23:49:60:3b:f7:53:c4:65:a0:
                    e3:1e:50:9c:d6:37:5e:e9:95:7e:13:70:fd:5b:46:
                    f4:e4:5a:61:73:48:40:5f:15:0e:9f:11:61:74:db:
                    5c:82:62:be:a9:5e:18:4c:9e:8b:bf:0d:a8:cc:0e:
                    9e:bb:6d:91:34:b6:ee:7e:20:15:3b:82:0e:30:93:
                    ba:f7:03:84:92:96:0d:e4:ad:ca:61:5f:eb:cd:bb:
                    25:77:ee:57:58:b0:74:82:e1:c9:0a:04:60:56:39:
                    c4:0c:b8:46:e8:c5:9a:3e:fb:f4:50:5d:02:7f:31:
                    0e:ce:a7:99:ca:60:7d:42:4d:0f:df:77:b1:be:90:
                    df:5b:63:78:af:7f:51:7c:a7:f0:4b:34:d9:c9:95:
                    00:31:37:93:95:1e:70:dd:09:18:62:41:6e:b1:c5:
                    c7:42:fd:cc:cd:b8:7a:5a:2d:dc:57:61:48:ef:3c:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:41:0E:B4:F4:7C:83:0F:F3:13:58:1D:CA:75:D9:68:19:5B:68:B5
            X509v3 Authority Key Identifier:
                keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3e:f3:d6:5d:72:2c:77:c5:c4:2a:ea:58:63:b9:25:36:62:
         5d:04:dc:74:a1:15:e9:90:f4:6d:56:53:38:21:a0:4d:49:c2:
         6b:81:c7:b0:c0:b0:d5:f3:0e:5f:19:97:7b:c6:52:81:ee:ca:
         f3:89:b4:76:d3:ae:42:27:d0:04:df:a4:61:ad:3e:de:56:92:
         cf:8c:f4:c6:1b:89:ad:55:51:72:c2:4b:5e:04:38:b1:41:85:
         11:2c:d6:99:f2:5b:0c:46:f6:90:8d:06:98:e7:f8:30:c1:16:
         91:0b:13:53:48:6f:f5:61:06:f4:7f:09:5a:e4:78:03:54:5e:
         6f:2e:c3:dd:53:23:47:1c:3e:09:6f:28:a9:56:dd:36:7d:73:
         6d:1d:92:de:b6:11:86:02:a8:59:07:45:f4:25:c0:6a:cd:99:
         b9:84:bb:d3:b7:69:68:b1:68:80:08:6a:a8:2c:23:a5:3b:40:
         70:04:7c:52:72:e8:a6:d6:64:9b:a7:68:10:d8:15:cd:09:7c:
         f5:95:b1:42:29:b7:86:89:e1:8b:c1:e5:18:41:28:14:0b:a4:
         c6:a6:2b:98:cf:15:b0:4c:fb:ea:bc:3b:ef:bb:ab:ab:23:9d:
         b6:1a:f4:de:dd:e2:32:65:0d:c1:39:5f:5c:1b:1a:2f:ac:18:
         54:7d:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:26 2026 by rpki-client