Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File:                     CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier:          nBTpwXlkkcb4yS5lWmABcSJCVflmxVH1rnQs2KSqw2k=
Subject key identifier:   F4:40:A1:B8:83:87:71:71:BE:43:1B:23:4C:47:F1:B6:F6:1C:EB:FD
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer:       /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial:       019CE4B617A91C16925CAAA5B479A2BB8AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number:          1384
Signing time:             Fri 13 Mar 2026 01:01:04 +0000
Manifest this update:     Fri 13 Mar 2026 01:01:04 +0000
Manifest next update:     Sat 14 Mar 2026 01:01:04 +0000
Files and hashes:         1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: hxi3lo+AUQ5SeeC7Li/C/6fqwUm842hJlSomwAjsXrM=)
                          2: RyL4c5_NFeavotjlWc9ltdGX7O8.roa (hash: dSsA+dzaiaqYnBINWY6V92uBT2cKWLJnMg9X5b/Herc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:17:a9:1c:16:92:5c:aa:a5:b4:79:a2:bb:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
        Validity
            Not Before: Mar 13 01:01:04 2026 GMT
            Not After : Mar 14 01:01:04 2026 GMT
        Subject: CN=f440a1b883877171be431b234c47f1b6f61cebfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:05:55:07:d4:18:7a:a7:df:79:3e:63:b0:
                    09:34:1a:7e:db:43:ad:f0:73:ad:7a:6b:98:01:cb:
                    76:ce:8d:9b:a9:12:01:a7:4c:19:ac:a9:c3:91:29:
                    ab:1f:10:07:74:4b:15:e8:ea:3f:f6:be:e6:16:f6:
                    8c:fa:ce:78:29:b7:9f:27:5f:2e:12:34:ec:1e:56:
                    23:c6:43:4b:d9:bf:c2:ae:21:57:39:11:1e:68:87:
                    0f:a0:db:32:08:f2:15:3e:12:f3:fe:fb:2b:52:12:
                    0f:10:54:e8:4f:ad:bc:ca:3b:de:dd:55:a1:de:46:
                    0c:11:05:59:56:3b:c0:7e:dd:42:b2:9a:16:fc:48:
                    77:bf:0c:47:29:af:91:5b:d8:6e:bc:3b:65:24:d7:
                    56:9c:f5:47:86:3e:c7:df:08:81:79:21:d0:b6:f4:
                    88:b0:03:49:63:11:3e:fc:ee:73:3b:d5:2f:84:4f:
                    d1:87:99:91:76:68:68:5a:4f:49:b4:b4:ea:7b:a0:
                    79:10:6b:e4:95:c4:26:b7:28:56:2c:32:bf:d3:99:
                    aa:17:99:62:31:e5:f0:c0:15:fb:81:7a:68:c5:be:
                    21:89:e4:96:48:c4:3c:49:5f:9f:c1:6d:12:49:85:
                    8d:03:39:a4:a5:79:90:d6:83:9e:17:6e:0c:58:36:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:40:A1:B8:83:87:71:71:BE:43:1B:23:4C:47:F1:B6:F6:1C:EB:FD
            X509v3 Authority Key Identifier:
                keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:93:06:0b:fd:6c:86:c9:0f:66:2d:9d:5b:39:48:f0:2f:79:
         0c:c0:26:59:0e:f9:7f:9e:1d:43:60:de:ea:86:25:96:21:9c:
         7f:0d:7a:7c:be:ad:bf:65:ec:16:53:43:c4:e3:85:80:c3:0b:
         1b:3c:fe:85:37:ee:1e:5f:f7:24:11:0c:5d:55:14:44:be:58:
         87:98:6c:b2:65:4e:aa:26:b3:81:1b:ea:31:2d:02:b6:50:10:
         78:eb:43:10:80:02:3d:bb:24:3a:81:61:3b:c1:9a:c9:ab:dc:
         2c:d9:7d:e5:d0:a9:d5:89:12:b3:e3:e5:d9:ad:6a:ba:23:f9:
         31:2c:28:f6:d8:bf:67:b1:5a:41:84:bc:13:9a:ae:de:4d:bc:
         ce:6b:5f:13:c0:ba:e8:77:8a:76:d5:9e:9c:74:9c:38:ed:db:
         49:06:96:39:1a:4c:91:2a:69:9c:21:73:19:0d:c9:53:d0:b1:
         e0:61:ad:5e:8e:b4:dd:ab:ec:d0:0d:e1:40:ba:77:6d:ce:ca:
         bf:92:65:98:fc:ce:ba:23:83:27:47:03:9a:25:b6:2e:41:91:
         74:64:31:81:49:5f:fb:26:ae:2d:5c:0c:30:cb:28:ce:5a:57:
         32:6d:de:c1:9e:fd:4a:39:60:e5:41:66:bc:9d:06:9c:97:ec:
         73:ad:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:49:38 2026 by rpki-client