Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
File:                     tDlkbascuAzWConx-qE0bzlSO_o.mft (raw, json)
Hash identifier:          6fWOCCkKy7yZOkB/Q8L1fgTDMMxsuwSWQCYFS5MF6S0=
Subject key identifier:   10:B7:B1:43:AB:3A:1D:F3:8D:BA:13:2E:1B:D7:FD:F8:65:85:EC:F0
Authority key identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
Certificate issuer:       /CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Certificate serial:       019D27048DA172659CB133B6D181B0032682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 22:01:42 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:42 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:42 +0000
Files and hashes:         1: tDlkbascuAzWConx-qE0bzlSO_o.crl (hash: UCfh/FmcUFgNNqeKHE+Od/L/irZjQXmr/nFugGc/agI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:8d:a1:72:65:9c:b1:33:b6:d1:81:b0:03:26:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
        Validity
            Not Before: Mar 25 22:01:42 2026 GMT
            Not After : Mar 26 22:01:42 2026 GMT
        Subject: CN=10b7b143ab3a1df38dba132e1bd7fdf86585ecf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:76:e1:48:46:1c:82:47:4f:cb:89:de:a6:
                    fd:ca:ff:8e:d0:a1:9a:2c:74:e1:54:76:c2:71:18:
                    4f:f6:bc:f8:3c:65:2a:cf:33:85:47:cb:c5:b4:c1:
                    71:38:9c:61:91:e5:6b:23:25:1b:d8:46:04:14:1a:
                    8d:3f:2c:38:17:dd:33:3d:19:f9:fd:5e:31:f6:f3:
                    af:83:59:7d:03:4b:2a:e5:e4:a5:94:4e:81:12:76:
                    29:37:9c:82:a3:de:c3:f6:02:2b:9e:d8:fd:c7:3a:
                    2e:56:a0:2f:aa:20:0a:e6:52:dd:97:c9:ff:1c:df:
                    c8:3d:c8:f1:2b:2f:18:c5:5c:5b:39:ea:8e:bc:06:
                    8a:80:07:97:b5:23:af:41:9c:7b:3c:d2:72:28:2d:
                    0f:54:61:98:43:b1:df:78:23:15:c4:6e:f7:9f:ae:
                    82:b3:7d:de:65:d0:ba:2f:db:cb:ca:ad:cd:b3:91:
                    6f:a7:d0:4e:38:92:6f:42:75:b2:38:21:7c:d7:42:
                    ed:68:51:01:6f:a0:67:49:64:00:63:b1:dc:e8:41:
                    b6:23:c0:c4:d0:25:01:e3:2a:d4:5b:b5:f2:fa:06:
                    67:ed:62:dd:df:76:9a:eb:cd:9c:7f:f8:d3:f9:2a:
                    8c:27:39:b6:c3:63:8d:c4:d9:cd:51:78:17:ad:5d:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B7:B1:43:AB:3A:1D:F3:8D:BA:13:2E:1B:D7:FD:F8:65:85:EC:F0
            X509v3 Authority Key Identifier:
                keyid:B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:8b:03:7b:04:23:d6:c6:06:00:9e:5e:6d:7d:5b:2d:1e:
         a5:2e:87:8b:be:b7:61:57:c1:12:f0:4f:44:58:82:3a:a5:7a:
         b3:d3:8c:f9:ee:e1:f8:b6:01:e5:e8:7a:83:f9:bf:ac:29:a6:
         88:b9:0b:88:9a:99:12:bf:4c:4c:ea:e9:63:4f:7a:40:ca:eb:
         a4:bf:ee:63:c0:c4:32:53:05:86:3b:13:68:7c:74:19:0e:36:
         9a:21:bd:91:bd:af:c4:73:39:b8:b5:ea:eb:36:be:c1:fe:26:
         cf:65:9b:c6:76:d6:1f:24:25:c1:77:d3:f2:0c:22:a1:40:8b:
         a0:8c:b5:09:90:9d:2f:96:12:c6:ba:c7:d4:8f:50:97:e1:11:
         99:57:89:2e:49:52:90:f9:f8:05:a9:cd:cb:39:a2:5b:f0:59:
         41:e2:ff:3b:38:35:ed:dc:af:03:e0:a8:e3:fe:86:00:5c:5e:
         90:86:be:f6:be:93:7f:56:12:d1:06:df:02:ab:7d:4f:73:36:
         a2:24:56:49:53:bc:d5:f8:c3:d9:0d:8b:03:ec:7f:03:c1:82:
         d5:d3:63:52:5f:d9:2f:cc:70:d2:0f:6a:ed:a6:1b:8a:23:cd:
         49:ca:8a:0d:9c:be:e3:3f:f7:72:13:10:1f:c9:24:eb:71:5a:
         72:a0:54:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBI2hcmWcsTO20YGwAyaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Mzk2NDZkYWIxY2I4MGNkNjBhODlmMWZhYTEzNDZmMzk1
MjNiZmEwHhcNMjYwMzI1MjIwMTQyWhcNMjYwMzI2MjIwMTQyWjAzMTEwLwYDVQQD
EygxMGI3YjE0M2FiM2ExZGYzOGRiYTEzMmUxYmQ3ZmRmODY1ODVlY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu124UhGHIJHT8uJ3qb9yv+O0KGa
LHThVHbCcRhP9rz4PGUqzzOFR8vFtMFxOJxhkeVrIyUb2EYEFBqNPyw4F90zPRn5
/V4x9vOvg1l9A0sq5eSllE6BEnYpN5yCo97D9gIrntj9xzouVqAvqiAK5lLdl8n/
HN/IPcjxKy8YxVxbOeqOvAaKgAeXtSOvQZx7PNJyKC0PVGGYQ7HfeCMVxG73n66C
s33eZdC6L9vLyq3Ns5Fvp9BOOJJvQnWyOCF810LtaFEBb6BnSWQAY7Hc6EG2I8DE
0CUB4yrUW7Xy+gZn7WLd33aa682cf/jT+SqMJzm2w2ONxNnNUXgXrV0fVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC3sUOrOh3zjboTLhvX/fhlhezwMB8GA1UdIwQY
MBaAFLQ5ZG2rHLgM1gqJ8fqhNG85Ujv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZDRmNGQtYWE1OC00YTJmLWEzYzUt
N2U4YzU0NWE5N2FlLzEvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jZDRmNGQtYWE1OC00YTJmLWEzYzUtN2U4YzU0NWE5N2Fl
LzEvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIeLA3sE
I9bGBgCeXm19Wy0epS6Hi763YVfBEvBPRFiCOqV6s9OM+e7h+LYB5eh6g/m/rCmm
iLkLiJqZEr9MTOrpY096QMrrpL/uY8DEMlMFhjsTaHx0GQ42miG9kb2vxHM5uLXq
6za+wf4mz2WbxnbWHyQlwXfT8gwioUCLoIy1CZCdL5YSxrrH1I9Ql+ERmVeJLklS
kPn4BanNyzmiW/BZQeL/Ozg17dyvA+Co4/6GAFxekIa+9r6Tf1YS0QbfAqt9T3M2
oiRWSVO81fjD2Q2LA+x/A8GC1dNjUl/ZL8xw0g9q7aYbiiPNScqKDZy+4z/3chMQ
H8kk63FacqBUCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:35 2026 by rpki-client