Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
File:                     51B9sIinyBoNvsjxrdtS-VvRAUM.mft (raw, json)
Hash identifier:          ZOl9XOmwdxBJ2wIHANOEw0dhnS7YU3Adfex0qRZSV/0=
Subject key identifier:   40:16:EF:A0:78:06:93:FD:E0:5F:41:80:D9:9F:57:B1:10:26:ED:AA
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Certificate issuer:       /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial:       019CB9CBF9CF4D3F93BF563DB964F6065E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
Manifest number:          1850
Signing time:             Wed 04 Mar 2026 17:01:18 +0000
Manifest this update:     Wed 04 Mar 2026 17:01:18 +0000
Manifest next update:     Thu 05 Mar 2026 17:01:18 +0000
Files and hashes:         1: 51B9sIinyBoNvsjxrdtS-VvRAUM.crl (hash: KR83+s8//Y6tJ7dQ6RqrIHLh4NhwtdcCL4wCdnHnydM=)
                          2: 7kYVFuyM-RfK26RLFo6DMjfTwzk.roa (hash: KbmoPpiA6XOiH7OL5wKdZhHaSYMgcT7lmpKJIFLFmlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b9:cb:f9:cf:4d:3f:93:bf:56:3d:b9:64:f6:06:5e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
        Validity
            Not Before: Mar  4 17:01:18 2026 GMT
            Not After : Mar  5 17:01:18 2026 GMT
        Subject: CN=4016efa0780693fde05f4180d99f57b11026edaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:a4:fe:fd:c9:ac:52:d6:66:90:a4:38:ff:
                    76:1f:2f:57:10:18:ba:b1:03:c7:a3:83:6d:75:fc:
                    31:0e:57:3e:4d:b9:bb:d5:09:5e:a7:78:ab:9e:9c:
                    0f:ed:96:81:2c:39:b1:d0:36:b7:f0:82:11:95:f1:
                    31:17:00:f8:92:cd:eb:1e:49:e6:23:2e:52:8a:b8:
                    1e:a9:34:7d:19:fc:89:9e:24:23:4d:b1:05:29:b4:
                    9e:a9:2e:ca:37:84:93:92:d8:3b:4e:4d:b4:a9:47:
                    78:ea:76:a7:66:44:d0:a6:e4:aa:66:51:6f:2a:ce:
                    2f:46:80:e0:e2:0f:15:cf:6c:06:51:9b:46:a3:6b:
                    8e:38:19:d6:a3:07:d1:e6:bc:9a:ce:aa:e1:77:59:
                    b4:44:82:2e:61:f4:7d:d0:15:06:1b:f8:c4:b4:ed:
                    0c:bc:c3:2b:6a:d2:04:30:4c:47:3d:15:bb:c4:c7:
                    b6:3d:ab:6f:b2:f3:65:76:33:60:42:b9:aa:b1:cc:
                    55:55:59:78:c7:e1:ae:8c:3d:a6:3f:51:c2:ac:7e:
                    27:46:9e:80:61:57:5d:f6:cb:c7:db:74:50:f6:6b:
                    ca:79:eb:08:8b:58:d3:8f:b7:ee:93:6c:62:9b:56:
                    38:78:51:a1:52:3a:d5:39:9b:29:ba:58:a1:6a:8c:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:16:EF:A0:78:06:93:FD:E0:5F:41:80:D9:9F:57:B1:10:26:ED:AA
            X509v3 Authority Key Identifier:
                keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:d5:a4:fb:9d:20:4f:81:f0:0a:55:b7:11:b2:e7:a3:c3:
         32:0c:57:14:99:6c:cd:cf:5b:d7:9d:6c:c1:07:f3:62:23:dd:
         30:e4:35:14:b8:2f:c1:0c:cf:46:2d:23:38:93:ce:04:33:66:
         44:55:8d:42:f4:2f:df:25:1d:ee:67:b2:7d:2b:2a:06:b7:a0:
         30:1a:17:9e:03:78:95:e9:98:2b:e3:d4:cd:21:77:48:b3:dc:
         18:0a:2b:23:22:d3:24:13:9b:be:3f:47:e9:a7:8e:d6:a8:f5:
         f3:b9:6f:f9:1a:d9:39:a6:92:4a:a7:03:98:20:03:e0:96:2f:
         a2:fb:49:f9:86:87:96:e8:12:4b:d2:76:9f:f1:e8:1c:b1:e6:
         f0:6b:47:c6:cd:f5:63:03:22:6a:46:eb:b2:47:66:19:38:43:
         a1:24:19:75:d5:b9:65:49:3b:40:6f:b4:1f:8d:8e:92:3b:32:
         ac:ea:fc:b2:f1:c6:7c:64:43:82:8e:6b:fa:2e:36:eb:9c:2a:
         a1:21:73:fe:5a:2c:67:f5:dc:81:35:71:da:5d:72:38:df:c1:
         37:02:28:47:0c:1d:49:85:f0:82:58:c1:74:c5:1f:54:8a:9a:
         79:28:bd:22:e8:9e:a6:a5:42:92:25:32:71:16:54:8f:50:92:
         89:50:41:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 23:36:58 2026 by rpki-client