Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File:                     C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier:          6uICglIM/BOYGS7bK4T0ImgtthIDbqlq7bsxH7SCBLw=
Subject key identifier:   9B:C4:BB:94:E7:2B:95:CF:A0:E3:C2:16:31:76:93:2A:BE:FF:A7:D1
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer:       /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial:       019D28BB787A9F8C634880F23AE78091D5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number:          1814
Signing time:             Thu 26 Mar 2026 06:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:07 +0000
Files and hashes:         1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: ja7pcO97mezUVC67Eoc5fj+jK8ED3up0CDNmJWT0fT0=)
                          2: iDMRka__bTiV5xrVoUOEpgx8MLc.roa (hash: NSjhiVi7Zw8dUQYUc4aNh0C9JclGyQ0OuMzHtV0fFdU=)
                          3: znqHTKf5hikGTTRKQK2RyfL6LM4.roa (hash: Wto4vlIcm8g0DdMSPQIRXQ7Ap5BLyjHEXHh3w55Efk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:78:7a:9f:8c:63:48:80:f2:3a:e7:80:91:d5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
        Validity
            Not Before: Mar 26 06:01:07 2026 GMT
            Not After : Mar 27 06:01:07 2026 GMT
        Subject: CN=9bc4bb94e72b95cfa0e3c2163176932abeffa7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:16:90:e7:a2:d9:38:82:6d:c7:da:36:d5:90:
                    33:ef:e1:c1:c2:d6:6e:de:c1:7f:4a:79:6c:37:ff:
                    d0:56:a6:ff:8d:a4:2c:d1:e2:6c:f5:15:eb:54:fd:
                    53:b9:bd:f5:ac:22:d1:44:ac:09:bd:01:48:62:87:
                    5f:f5:4e:cd:2e:28:d8:49:14:e0:8c:8a:7b:09:bb:
                    98:4f:1e:4a:8a:78:e2:6e:76:d8:f3:7f:14:fe:ab:
                    87:35:66:fd:3c:1c:f7:92:99:68:e2:64:fe:aa:86:
                    26:66:bd:d9:f3:76:e4:28:d2:c4:ca:14:10:ba:12:
                    bc:f0:d4:bd:72:46:7e:e1:e4:fc:ff:66:82:d0:16:
                    92:5f:cb:c9:51:3b:9e:ba:01:60:7a:de:b6:ba:15:
                    3c:a2:3a:f4:47:96:9e:66:ab:1e:b1:69:2a:ee:01:
                    03:19:b0:25:f8:c6:b6:e9:cd:1c:a0:b9:f6:c3:81:
                    2e:7c:9e:b1:e7:cd:d9:bc:f0:1a:bb:d6:5a:dc:a0:
                    a2:de:97:88:08:07:f4:80:43:e4:a6:07:85:b5:1f:
                    df:95:a5:79:ec:99:5c:b4:3d:4c:c7:c6:a9:58:32:
                    e4:b3:e7:54:74:64:65:c3:8b:cd:f4:6d:ea:72:3c:
                    91:c7:2f:c6:46:05:16:31:b8:59:88:f9:20:0f:59:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C4:BB:94:E7:2B:95:CF:A0:E3:C2:16:31:76:93:2A:BE:FF:A7:D1
            X509v3 Authority Key Identifier:
                keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3c:7c:8c:69:f8:9f:82:f7:19:48:3b:d0:55:83:84:0a:98:
         6e:e4:af:9a:b0:54:0a:65:49:74:5c:38:ab:a2:d1:cc:13:01:
         40:97:39:7b:f7:0d:c2:e5:f0:7b:5b:06:a3:02:a8:a3:aa:38:
         e1:3f:b4:3a:87:d4:17:03:94:cb:da:54:48:d2:c2:85:a5:70:
         db:a1:44:11:5e:8a:14:27:37:38:3b:ca:d9:9f:78:a1:bf:6c:
         b3:66:e2:98:ca:2c:dd:34:d8:8e:25:0a:d8:56:81:c7:c2:39:
         4e:eb:79:6e:dc:4f:44:f7:be:d5:10:87:5f:24:1e:56:a5:33:
         79:22:2e:c9:ae:45:6f:95:e4:77:1b:4c:43:70:60:bb:2a:f2:
         e8:e1:e6:00:c4:cf:6f:22:1c:a8:02:45:fa:59:43:f2:99:ce:
         62:cc:28:a2:1d:28:84:d1:a5:96:81:68:b9:e5:3b:d7:6b:c1:
         d6:e5:95:bc:32:6f:37:54:aa:bd:3b:f1:f2:63:f5:1d:39:fb:
         7f:fe:21:e9:38:1d:d3:7c:dc:26:d6:6c:c2:b2:53:f7:68:cb:
         ca:99:f9:b1:7e:4f:00:af:2e:05:59:6b:c8:fe:42:5e:a2:d7:
         32:a4:42:de:27:09:9e:51:ad:fe:11:69:72:28:49:72:78:10:
         e8:67:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:18 2026 by rpki-client