Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          +SycDdFw8UyVYr5rNGO7REMmy8tSYXFKw6yEhN21aOI=
Subject key identifier:   6E:91:23:BB:37:3F:2F:8B:CF:F1:EB:7A:FB:74:D4:3A:8F:C7:E4:E5
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       019CE47F365E2764C048E48C28D77575BD2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          1898
Signing time:             Fri 13 Mar 2026 00:01:08 +0000
Manifest this update:     Fri 13 Mar 2026 00:01:08 +0000
Manifest next update:     Sat 14 Mar 2026 00:01:08 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: C3uHPxu0o2hOE+ZFxKx6l1JbKtX2RiH6hC+qmHQZUrY=)
                          2: Uznpkkv0JYkSUm9kbpD4n2vwDL4.roa (hash: 88Ax8PWskGYROIxixKAI4HTq+EJ3yI4/MFKViDiNQbE=)
                          3: h9KbqLk4l9OdFUryCLxx3sI2isA.roa (hash: fZEOu/cTrhQZAFPdCAE4MFKCzUOwnwenGIyGoQIgw98=)
                          4: jGULnpXc7X0DKIgl_rNlGpKqIjU.roa (hash: lw+a4+maCEBqZrjOLmldoah84X0jz3MXMLP1m2iIGaw=)
                          5: q-8noEh6b2f7clZvsd5WphsHq0A.roa (hash: Pn5ZPx0J/yGGt821PM9wYpMm6lTxTXU+s7PYclcgTP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:36:5e:27:64:c0:48:e4:8c:28:d7:75:75:bd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: Mar 13 00:01:08 2026 GMT
            Not After : Mar 14 00:01:08 2026 GMT
        Subject: CN=6e9123bb373f2f8bcff1eb7afb74d43a8fc7e4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:86:6b:7d:81:1b:79:64:87:7c:85:e9:4f:
                    e1:b8:1f:2c:4b:31:3f:e3:fb:a5:4a:74:6f:89:1e:
                    73:b7:6e:79:f9:3a:73:4f:9e:2c:3e:7d:da:63:6f:
                    8c:1f:fe:d6:8d:72:ee:a4:6d:4b:ee:23:6f:85:f4:
                    c6:1e:55:db:ea:96:91:2e:79:48:6c:ca:e9:5b:8c:
                    d1:10:93:b9:f3:02:09:f8:f3:fd:86:c9:67:3c:32:
                    86:32:09:a8:5f:37:04:b2:3a:c5:72:a8:52:a2:0a:
                    78:0f:04:be:68:c9:cf:8d:e6:05:42:4f:cf:e3:06:
                    74:24:ac:58:94:25:e1:a3:c7:3b:20:4f:12:73:4e:
                    40:41:f4:c7:19:a4:32:31:ac:27:ab:7e:a6:67:e2:
                    84:b0:17:be:36:cb:2b:ae:58:91:b8:eb:cc:89:c8:
                    25:62:f8:37:bf:9e:7e:57:02:db:85:da:1e:19:40:
                    9b:51:df:35:8a:ca:33:c2:aa:43:7b:b7:69:75:bf:
                    95:ce:0b:fc:60:3e:66:a6:44:43:ef:84:34:08:16:
                    57:78:ba:12:d0:47:00:d1:cd:fd:e7:f7:54:99:1c:
                    53:06:38:74:01:0a:11:90:93:43:0b:e5:3f:86:ac:
                    6a:29:fa:f0:12:d2:e8:5c:c6:db:b3:a3:8c:02:41:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:23:BB:37:3F:2F:8B:CF:F1:EB:7A:FB:74:D4:3A:8F:C7:E4:E5
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:90:11:56:6b:1f:85:12:10:24:25:8b:2e:a3:d3:6a:71:1a:
         6d:e5:09:55:39:43:7c:c8:72:4c:ec:0b:63:99:a8:b0:35:34:
         86:48:53:c5:1f:75:c7:9e:d6:29:bf:47:b5:46:a4:db:60:a0:
         da:40:a2:3a:f6:fe:da:47:db:be:8b:d1:db:a1:5a:75:18:3b:
         08:69:33:c6:bb:4f:38:5d:f5:3a:8b:e6:b8:8f:92:a4:5f:77:
         cd:30:4d:55:ab:8c:ae:8b:18:96:de:74:49:b3:96:71:71:8a:
         31:c1:08:0f:9c:19:86:c6:71:f6:5b:22:3c:58:1e:98:e7:a3:
         af:45:4b:87:86:fb:bc:72:e4:f2:48:0b:44:1a:36:44:5c:0a:
         e7:22:4d:e8:c7:b0:73:79:32:83:51:5f:9a:c6:3a:d7:a1:ab:
         f8:cc:13:53:76:1e:ed:8f:0a:f9:23:f5:57:0c:f3:f4:00:f4:
         5b:1f:1e:f4:e1:88:88:a1:2b:62:df:40:6e:fb:af:60:16:d2:
         ae:25:3e:b3:41:c6:78:fc:c7:ed:14:31:4d:a0:a5:87:22:7b:
         0f:2f:0d:42:db:c6:57:8a:40:39:c5:4b:43:fa:04:7b:00:1f:
         d0:87:78:a7:fa:73:4a:60:65:53:19:4d:2d:99:4e:ea:1a:97:
         b1:20:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:52 2026 by rpki-client