Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          pBl+GKoV341WMU/viIGYnHSaQCXEA5wtLhZGYq2AnDY=
Subject key identifier:   AB:A8:E4:DF:E5:61:13:1B:49:22:C5:D5:32:BD:1E:7A:98:88:21:D6
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       019CAB6BC1BBDE03BF3644C6E4907C9D35A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          174C
Signing time:             Sun 01 Mar 2026 22:01:31 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:31 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:31 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: 71yBDGS1Eof7FZE3DwYwE8ojeZpFDIkNA2QH6Ys4R0k=)
                          2: OkVoScbKIL9TXKvP438rB5FRYb0.roa (hash: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c1:bb:de:03:bf:36:44:c6:e4:90:7c:9d:35:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Mar  1 22:01:31 2026 GMT
            Not After : Mar  2 22:01:31 2026 GMT
        Subject: CN=aba8e4dfe561131b4922c5d532bd1e7a988821d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:cc:fd:09:d2:3b:2c:ba:2e:99:7c:cc:9d:
                    a7:c3:13:71:04:88:33:db:06:b7:e1:22:3c:66:c4:
                    78:31:c6:df:34:90:af:23:3c:60:f9:7d:8d:6f:c6:
                    65:db:dd:a3:46:e8:4a:a8:be:76:70:ce:79:a9:02:
                    94:4d:04:a9:b7:fd:01:57:bd:25:31:4b:3d:60:4f:
                    c4:32:71:db:f0:21:63:0f:8c:05:bc:4d:ff:de:70:
                    3e:e2:32:fb:e5:66:86:d9:48:10:cd:68:a8:5a:37:
                    8e:46:6b:b5:5d:0f:f9:99:82:dd:90:6d:2a:1c:d6:
                    4d:84:7d:d1:2b:9b:51:06:78:16:52:07:5c:50:a7:
                    54:5f:43:3f:9f:51:13:20:c7:f6:f3:e0:2f:82:e0:
                    14:2f:1c:eb:ac:a8:3b:89:94:f1:e9:a4:02:29:52:
                    44:b9:75:04:3c:37:c2:d2:00:1f:74:85:d0:ce:8d:
                    d7:e0:04:5c:7f:37:b7:2a:24:5e:37:6b:9d:0d:24:
                    8d:b4:cc:af:44:29:7e:69:21:79:78:0b:03:49:e0:
                    1f:8b:1d:69:66:10:d8:11:7d:b6:27:9e:02:f4:00:
                    3f:cd:4f:bf:4c:8f:00:74:d9:08:c6:f9:f0:1f:c5:
                    90:9b:d6:e2:46:aa:68:c7:af:fe:46:ab:98:62:09:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A8:E4:DF:E5:61:13:1B:49:22:C5:D5:32:BD:1E:7A:98:88:21:D6
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:e6:3f:4c:41:d2:7a:4a:a5:97:23:cd:5d:39:ee:f8:73:
         b3:ec:bb:44:92:04:56:7f:81:eb:b3:b2:b2:bf:14:c1:01:8c:
         a3:ce:51:2a:d8:5e:14:3a:dd:50:9a:54:86:64:e0:7f:b8:52:
         ab:f4:6a:70:84:d7:8e:a8:51:67:9f:6b:90:aa:f0:de:71:a0:
         4b:9b:dd:28:fc:63:13:ca:7e:05:4f:82:0d:a8:5b:d4:ae:c0:
         70:18:06:80:8e:b7:46:aa:d8:58:0d:18:99:97:d4:ee:c3:e2:
         9f:10:5f:22:d5:28:fe:b9:80:19:2c:a9:f2:ec:9e:a4:1b:0a:
         ba:14:71:e5:4f:0c:85:14:ca:b7:97:32:d1:10:d3:89:50:b6:
         c5:28:79:a2:78:a7:c1:c8:70:65:5e:7a:11:42:78:06:4d:ac:
         18:64:19:d7:2a:b9:cf:3f:d4:9a:e9:ce:c8:ed:8f:ab:29:91:
         00:42:19:09:23:6b:b2:26:9d:85:1d:e4:94:58:da:bc:df:6d:
         a2:6e:52:45:93:44:7c:07:a3:01:c0:b6:4a:ec:1e:2e:31:9d:
         61:b2:fe:2d:f1:0b:81:bb:a5:fb:e7:3f:da:7d:0e:14:59:30:
         cf:79:07:3d:f3:d4:f4:53:57:34:ba:59:8d:33:fd:c7:a0:e0:
         e4:b8:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:49 2026 by rpki-client