Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          fQWgJab27V9FvfOaGPw9znqaBOgiyHo7Lyt7x8IsXN4=
Subject key identifier:   EE:64:7A:BE:AD:BD:33:9F:F2:37:09:E5:A3:02:BF:47:15:E1:55:7E
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       019D2AE0A7535AFF5F761F0D22353AEFC554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          18E2
Signing time:             Thu 26 Mar 2026 16:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:58 +0000
Files and hashes:         1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
                          2: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
                          3: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
                          4: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: /X6k/QKCbBgIv7DvdrmC/J85cZPc91dHnXJH1+eN9wA=)
                          5: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
                          6: cJQS8fS-O8i7V76vhCyJB9FEPWM.roa (hash: TgEJTeq8+mkc1QDXvsict0jWR8MmE1D2+GheMUVEGNw=)
                          7: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
                          8: y8QrPFFnowbyEB1e4cX-SGfAUXU.roa (hash: 40C2vdKtg7IsQHAJfuBHflTE/JunmjNJtaThIp/bruc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:a7:53:5a:ff:5f:76:1f:0d:22:35:3a:ef:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Mar 26 16:00:58 2026 GMT
            Not After : Mar 27 16:00:58 2026 GMT
        Subject: CN=ee647abeadbd339ff23709e5a302bf4715e1557e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:53:58:12:b9:b1:96:f2:e4:5d:15:31:22:
                    54:9a:c1:a2:23:22:36:9e:e3:33:a2:ef:e4:26:1b:
                    88:cf:70:e7:73:97:28:bc:33:64:0d:37:d6:91:0b:
                    94:e0:e7:d7:d2:bf:58:e3:35:47:c9:06:38:a9:0a:
                    03:84:3f:46:02:39:a8:fb:e6:87:58:67:93:34:aa:
                    a2:80:05:bc:80:4d:96:25:2c:8a:c4:a1:7c:99:02:
                    ed:f2:b3:fe:c9:bb:c1:a0:39:ff:fb:a7:ed:0b:21:
                    bd:20:a5:b1:82:53:60:01:95:66:f7:c8:78:aa:da:
                    2d:a3:0f:4f:da:7b:a7:6a:a1:9a:01:4c:91:ea:66:
                    31:cc:21:62:03:cc:fe:d8:4a:2a:a2:4d:28:4d:88:
                    7e:9d:0a:b0:03:2c:2e:4a:2d:73:cc:f6:5a:ce:2c:
                    2c:4f:5f:89:5d:10:4b:e8:34:49:08:2e:26:7e:71:
                    8d:66:7c:41:dc:71:be:47:9a:4f:5c:2d:c2:77:fb:
                    0b:82:3c:29:93:df:20:26:1f:4f:cf:42:ca:ea:2d:
                    ca:96:b0:fd:9e:69:28:27:39:7a:b9:ec:61:23:a8:
                    8b:63:8b:a5:5f:c4:c0:69:b2:95:9e:1e:47:b1:76:
                    5e:98:d3:3c:43:22:b2:f6:e7:56:6a:c8:33:0e:de:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:7A:BE:AD:BD:33:9F:F2:37:09:E5:A3:02:BF:47:15:E1:55:7E
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:97:8f:cf:61:8a:a9:d3:9b:c5:41:0f:35:b0:56:39:dc:46:
         44:7f:96:5e:34:bc:84:0a:60:52:64:51:43:31:2d:97:41:40:
         33:8c:ec:74:e8:da:74:cb:4e:de:8b:fc:ca:59:bd:9e:53:7a:
         b7:bb:4b:07:f6:cc:b2:92:96:e9:18:6c:5e:8c:87:e8:61:8a:
         bf:93:d0:d4:9a:32:c4:46:9f:6e:2b:f9:f9:e5:45:b7:5a:06:
         11:0c:0e:05:b8:2c:73:3f:0b:c8:18:a9:df:61:9a:c2:d7:af:
         a9:fa:c3:a2:d1:dd:8a:57:4a:72:fc:06:ae:26:d2:1e:2b:aa:
         b0:ec:af:db:e4:24:ca:f1:dd:8e:84:50:87:47:bb:76:7c:0a:
         68:8c:a6:26:e9:bf:19:31:ca:64:9c:c7:3b:1f:cd:0d:80:ca:
         51:cf:8f:98:53:59:ba:af:2d:42:22:ab:a7:91:83:16:de:ce:
         c9:c2:fa:d1:af:c6:3f:81:a3:6e:a1:ff:4d:43:9d:8d:a6:cd:
         ce:34:66:38:f9:b3:5b:1d:5d:e6:64:d6:2a:4e:6e:1b:14:27:
         aa:84:6a:33:6b:db:90:09:a2:90:4a:36:58:a1:1e:44:42:af:
         91:cc:de:83:98:28:6f:60:7f:58:90:18:f6:72:d2:00:eb:65:
         71:68:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:17 2026 by rpki-client