Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File:                     A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier:          er2X4FBRR0bhUFiImSKwWvxxSIk2Lmx1VY2BSDBWl/Q=
Subject key identifier:   BC:19:E1:E7:9E:D9:46:4F:70:47:B4:44:F9:27:7A:97:4B:37:10:B3
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer:       /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial:       019D265FA77FE35E5C5DE01D52EE896E5153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:36 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:36 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:36 +0000
Files and hashes:         1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: PymeA/vPcJg/IAflQRzJunT1K4MDnngc0b6Iwdb3hRk=)
                          2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:a7:7f:e3:5e:5c:5d:e0:1d:52:ee:89:6e:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
        Validity
            Not Before: Mar 25 19:01:36 2026 GMT
            Not After : Mar 26 19:01:36 2026 GMT
        Subject: CN=bc19e1e79ed9464f7047b444f9277a974b3710b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:25:50:61:c3:ad:27:cc:0b:8d:e0:7f:80:45:
                    cd:6a:82:51:1d:d2:54:ed:4c:16:62:dd:f8:69:05:
                    68:a4:a4:d0:42:28:f6:5f:21:73:04:c4:cc:b2:e8:
                    22:6e:5e:f4:81:51:b8:83:bc:f4:17:36:43:99:8f:
                    0d:0a:a4:4d:ff:6f:3d:fb:57:3f:52:a4:25:58:9c:
                    3e:22:30:ca:af:38:a0:02:55:05:ee:d8:01:86:d1:
                    01:05:ae:c2:e1:8d:86:ad:10:ad:7e:53:9a:a9:3b:
                    94:04:17:4b:52:cf:33:81:9f:af:88:3e:92:48:04:
                    f9:a7:05:97:2a:e0:1e:93:a1:d3:b0:4c:9d:6e:81:
                    af:fb:50:3e:a8:40:c3:82:8c:09:2c:dd:db:ce:b3:
                    93:61:65:51:01:5c:a1:c5:93:4b:55:b5:7a:40:db:
                    34:31:32:3e:51:4a:3b:0f:4a:f5:0a:b0:1e:49:83:
                    d0:c7:a6:89:fc:18:cf:59:da:16:72:5c:1d:f4:d7:
                    bd:e7:bb:ad:91:f0:a0:37:46:f0:02:cf:2a:02:c0:
                    06:d7:b6:e2:5a:b6:9f:b4:63:09:ec:c3:f5:f2:0d:
                    82:d1:bd:18:67:41:7e:16:27:48:e5:03:7e:d9:2d:
                    fd:59:af:16:b6:36:6a:38:bd:b7:27:34:ea:cd:8a:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:E1:E7:9E:D9:46:4F:70:47:B4:44:F9:27:7A:97:4B:37:10:B3
            X509v3 Authority Key Identifier:
                keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:69:74:33:10:6b:66:69:86:fb:d4:18:e7:3c:af:5a:12:f3:
         3b:95:f5:cd:89:59:58:c2:9b:e2:5b:cb:cc:ef:de:9a:b5:e6:
         c6:9e:e4:6f:e7:df:15:89:35:0c:ea:68:3a:9b:eb:e0:48:03:
         97:6e:9e:9e:a9:0e:68:d5:ab:1c:03:af:5c:c4:14:fe:3f:b8:
         fa:ec:41:f1:bc:78:bf:ae:70:80:70:66:cf:4f:9c:b7:2c:7b:
         d8:9e:d9:d2:b6:d5:a6:a8:19:28:16:29:84:db:dc:5d:3d:0e:
         79:9f:23:55:ad:42:46:a3:66:3a:9b:7c:12:39:75:38:62:4a:
         01:4f:4c:ac:22:b4:e7:95:45:c6:34:d9:de:37:fc:6e:0f:5c:
         34:19:ec:60:1d:ec:2b:76:98:37:a4:70:b3:9c:35:38:d1:36:
         01:b3:54:bd:e1:c9:8c:f0:bc:86:dd:24:c6:22:b5:d6:58:45:
         64:40:e1:bd:0a:8d:82:bc:24:e0:82:a4:01:9b:be:00:44:0c:
         f0:63:fe:22:77:2c:16:c2:63:91:2e:18:ff:9a:c6:77:d9:98:
         8c:44:dc:22:08:45:5a:f3:2c:8f:35:2a:b8:ad:e2:de:3c:7b:
         88:30:c4:76:d1:e4:39:0b:06:8d:e0:de:d1:e7:02:a0:69:4d:
         3a:c0:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:35 2026 by rpki-client