Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          zsWIUOEKI45Ih0kZj84y5DwYOfdrqClYIF5lhS62Oh0=
Subject key identifier:   5E:DD:55:30:A9:92:CC:F9:9F:95:4A:77:AE:5D:EB:0F:B0:BB:63:68
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019D29CE8EB7B0C52488C3FE0FEC5A2ECC02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 11:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:35 +0000
Files and hashes:         1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
                          2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: jW3O7Xvboubipgx+7T5iRcwWRZTgwcmLsw8AbA4H668=)
                          4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:8e:b7:b0:c5:24:88:c3:fe:0f:ec:5a:2e:cc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Mar 26 11:01:35 2026 GMT
            Not After : Mar 27 11:01:35 2026 GMT
        Subject: CN=5edd5530a992ccf99f954a77ae5deb0fb0bb6368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:18:93:98:e2:36:23:e2:17:5f:af:5f:6b:
                    43:f8:15:88:9a:8a:9c:81:80:87:dd:33:9f:b3:47:
                    cf:d9:7f:d2:d7:d9:d3:46:c7:e1:4b:7e:67:26:4b:
                    50:25:1d:85:42:9c:db:6e:31:9a:a3:56:41:d3:c9:
                    d2:e3:2b:9c:36:b9:c3:5e:1e:3e:76:3f:0d:fa:7d:
                    44:0f:24:86:7b:0e:01:f8:e7:57:c1:00:4b:9a:8b:
                    3b:a9:f9:9a:28:7f:d3:ff:4f:ec:91:41:74:5d:41:
                    90:52:93:2e:04:b1:e9:c0:80:00:37:f4:dd:e2:4e:
                    e1:95:e5:4b:e2:39:3f:27:8d:65:f8:b2:be:af:9a:
                    3d:36:2c:e0:11:80:e6:be:48:1c:3f:c8:7b:3a:a8:
                    99:97:68:a0:ab:42:e9:83:bd:cc:e1:fd:a9:82:d5:
                    7d:e8:c3:67:d2:fc:6c:2d:08:90:49:c9:d2:64:38:
                    a4:68:7c:7a:c0:96:d7:d9:a5:29:27:73:39:1a:2a:
                    5d:83:fa:e4:ac:2c:04:7f:30:ea:eb:cf:41:10:b1:
                    12:c7:26:a8:98:71:f5:a2:1f:74:b2:01:aa:dd:71:
                    30:54:28:a4:71:11:af:e8:9e:db:6b:dc:cd:bf:cd:
                    08:53:46:c0:3a:7f:4f:75:2d:b6:2d:cb:41:d2:46:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DD:55:30:A9:92:CC:F9:9F:95:4A:77:AE:5D:EB:0F:B0:BB:63:68
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:12:af:4a:0e:03:d5:6f:2c:9e:50:85:04:c4:a8:5b:5e:5e:
         1c:88:8e:0c:e7:16:e0:6f:40:64:dc:d3:ec:d1:fd:87:4e:e5:
         30:a3:04:27:00:24:88:ef:af:c9:82:06:d0:52:80:11:13:a4:
         15:7e:ec:ab:19:fa:d6:0a:8a:39:17:26:66:b3:2f:c0:24:e8:
         fb:a7:2c:50:44:c8:58:23:3e:6a:66:2c:f2:14:a6:62:52:39:
         de:1b:ce:d4:54:8e:34:54:63:5e:23:d9:de:b4:93:ed:49:8a:
         2c:de:df:de:cc:18:92:81:fd:fa:eb:12:05:a0:01:64:36:0f:
         cc:7a:96:0e:e4:7b:bb:d2:6b:2f:17:fb:7f:16:44:31:ea:37:
         66:99:a4:81:f5:43:61:6c:be:1f:a5:47:16:14:81:a7:06:24:
         f1:60:de:b9:4c:37:b1:f1:3e:98:8d:51:9e:ee:3c:9e:d6:e9:
         5a:49:11:87:f2:60:26:7a:4d:34:1d:d7:09:ab:fd:e0:7d:33:
         6b:df:92:0d:6e:86:c4:66:a2:fc:f8:91:4b:ce:b0:a6:45:db:
         d9:25:fe:3a:58:60:28:ef:55:61:fa:74:93:e8:78:4d:9b:77:
         51:f2:89:f2:bb:58:a9:08:f7:e7:3c:db:7c:21:a7:ee:c4:53:
         1c:e2:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:35:26 2026 by rpki-client