Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          acvUPLOQM89Xty8N5KtZGCJKsMEQ44nNr5eArn2np0g=
Subject key identifier:   FB:84:54:7F:8C:1F:DD:14:43:DE:AF:A5:07:02:32:31:12:6D:F7:19
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019CAD22447B1AC44127A7BC9AD167713F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          145C
Signing time:             Mon 02 Mar 2026 06:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:29 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: aklwDFG35ygM/hTnxXtFbLZ7bE9nHtxeWMtvxMwxQqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:44:7b:1a:c4:41:27:a7:bc:9a:d1:67:71:3f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Mar  2 06:00:29 2026 GMT
            Not After : Mar  3 06:00:29 2026 GMT
        Subject: CN=fb84547f8c1fdd1443deafa507023231126df719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:50:20:fe:d5:f2:eb:bf:b3:9f:16:b6:33:
                    75:aa:50:3e:7b:75:bb:a8:6b:41:91:d8:87:ff:c5:
                    ec:1f:9e:67:80:1d:76:6e:b5:be:7b:c4:5b:12:69:
                    73:19:a5:63:8c:96:6c:cd:6e:33:91:ff:ac:a3:37:
                    07:ef:c2:7c:fa:d1:65:c1:17:22:a7:6e:b8:91:3e:
                    e0:7f:9a:0f:03:73:d0:51:83:ad:7b:38:7b:b5:ea:
                    a2:5e:ec:80:fb:83:4d:3c:ef:d8:5c:4c:d3:65:9e:
                    c4:8d:76:eb:f6:f6:d5:de:d8:78:f9:b8:42:33:c9:
                    e8:9e:74:9e:c1:57:94:3b:9d:c3:ab:fd:21:35:ff:
                    f9:6a:4b:06:1e:e3:b8:d3:35:50:4a:ad:95:f0:71:
                    6a:ba:22:8c:8d:b4:fb:14:60:58:07:66:97:ad:0c:
                    57:5a:b3:b5:9b:bc:b2:a2:fd:04:f9:e9:32:82:e2:
                    d6:ae:ac:29:9c:45:4f:15:66:64:ae:61:b8:e2:38:
                    8d:ab:96:d4:f8:33:99:c0:ac:17:7d:70:23:ec:ab:
                    79:0b:38:b0:ad:7e:26:96:3b:eb:b0:e9:3e:58:29:
                    a9:af:e2:1a:1d:57:2c:30:c5:83:44:5e:3d:70:75:
                    98:79:39:51:78:c7:31:2a:0d:7a:cb:ce:5d:40:4f:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:84:54:7F:8C:1F:DD:14:43:DE:AF:A5:07:02:32:31:12:6D:F7:19
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:86:05:c2:e6:ef:fc:7a:98:4f:c7:ff:6a:c3:31:51:ae:5c:
         40:1e:82:08:10:ba:2e:07:94:c4:3f:ad:f3:aa:9a:14:0b:19:
         fa:35:d7:47:72:a5:06:fa:8d:96:f4:02:50:da:82:88:7c:dc:
         9d:13:e9:fb:9b:91:7e:30:3f:db:ec:05:d3:b1:98:57:d4:96:
         ec:ee:c0:6e:38:c3:2e:7e:e3:a2:41:25:a1:cf:bc:c9:27:37:
         12:a7:97:3a:12:d4:36:20:4d:c0:f0:30:20:6d:a6:a4:0a:16:
         9c:f0:ec:3a:df:bc:bd:9e:a2:82:69:d7:97:0a:4c:9e:f3:42:
         e0:e1:19:b9:ca:70:37:e5:9c:36:20:79:54:8c:cb:9a:7e:d1:
         e1:22:0c:2f:77:16:42:8d:fe:bd:d4:87:3f:61:0e:5f:3b:2e:
         c9:f1:59:23:aa:8d:77:0e:ae:0d:98:ec:2c:0a:3b:fb:58:af:
         88:3c:d9:9d:65:77:b8:c8:70:e0:b8:73:fa:a5:96:86:f3:07:
         21:4f:29:c9:45:3e:ea:53:64:74:ba:2f:f0:2b:28:ec:3e:d2:
         bc:7e:cb:54:c7:3c:37:75:2c:92:48:6c:f8:bd:d5:3b:fa:67:
         fc:a1:28:0a:f3:39:96:e9:6c:5a:ae:5e:5d:bd:7f:e5:23:32:
         2c:82:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:30 2026 by rpki-client