Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          j22pW4R0NJ66egN/VZRnYdeOmyD9lOE2rNXsLBqL558=
Subject key identifier:   D3:43:E9:95:30:C4:C7:AF:45:3F:EB:4F:C1:98:F5:8E:F0:13:18:E5
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       019D277254F32AA9A7BF2822F83E1459E8B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          051B
Signing time:             Thu 26 Mar 2026 00:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:37 +0000
Files and hashes:         1: U_ZTyzand_WYQHwaGLdDZJKVTxU.roa (hash: pVHYAJp1u51cRGJyOQT+SjKcxp5OZfdjLVWKDZ8gDhk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: S1cAgPTH6HO/W+IRd8YYB7rXdFgdqhynOOqEjVGwpLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:54:f3:2a:a9:a7:bf:28:22:f8:3e:14:59:e8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Mar 26 00:01:37 2026 GMT
            Not After : Mar 27 00:01:37 2026 GMT
        Subject: CN=d343e99530c4c7af453feb4fc198f58ef01318e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:12:6e:17:d7:51:58:84:7f:30:e9:70:27:
                    82:e9:12:61:fa:72:be:22:8c:7a:cf:9b:50:84:6d:
                    1f:95:3b:ec:4e:7a:02:25:0c:49:54:f1:08:cc:f3:
                    90:56:07:96:9c:98:2f:49:02:35:8b:d1:4f:87:f4:
                    80:a7:90:cf:c5:a3:8f:bd:16:ff:6c:96:6b:b2:87:
                    7d:63:a8:f8:3b:72:4a:b0:8f:bf:40:5c:00:ad:f0:
                    ec:e5:26:e9:d0:20:10:b5:08:08:a6:96:e8:e3:b9:
                    74:1a:d7:18:de:d7:27:36:ec:37:ee:92:de:21:27:
                    3e:37:42:cb:b1:e4:09:b6:d0:79:69:2e:a2:d9:8a:
                    ea:0c:22:72:17:c4:f2:d4:e2:1e:f4:4b:52:42:a7:
                    14:c5:d9:a4:15:2e:bd:4e:e7:c6:6e:4e:62:b9:2a:
                    a2:66:ba:10:69:75:a7:c5:f3:c2:f7:f5:8e:56:10:
                    9b:f3:3f:de:d1:8a:d9:17:4f:0e:a4:af:48:d2:e8:
                    3c:47:e9:7d:bc:9f:67:da:af:5c:fb:c1:83:29:84:
                    44:61:64:1f:53:5c:aa:60:4f:95:13:56:75:6a:d0:
                    43:fb:3b:f6:68:14:b9:be:0c:90:eb:2a:06:0a:da:
                    6f:e0:e5:b3:a4:9d:83:1f:31:52:18:5d:11:8c:4c:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:43:E9:95:30:C4:C7:AF:45:3F:EB:4F:C1:98:F5:8E:F0:13:18:E5
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:57:48:ca:be:2a:f1:79:04:2f:0d:4c:0c:ea:d1:37:6d:
         10:ba:6f:b4:c3:9d:da:4c:8b:2e:32:1a:59:77:ce:b2:c0:d2:
         a9:36:e2:2e:20:4c:a8:2b:b9:e3:35:de:e7:6a:9f:e4:d8:e3:
         eb:dc:62:b6:4f:68:b8:d5:4e:38:4b:ce:ec:68:20:e8:b8:21:
         7d:ac:eb:77:9d:b8:38:2d:8e:0b:ea:05:3f:40:6d:63:94:52:
         c9:38:77:4b:11:8a:78:bc:77:28:b2:dd:c5:65:ab:04:0c:54:
         98:ee:5b:a1:eb:6a:65:2a:c4:4c:f0:48:ee:f0:62:0f:9a:dd:
         5e:4c:c6:08:a4:7f:1c:96:67:84:cf:f0:8c:29:b7:89:26:b8:
         1d:c5:27:bf:7b:f6:39:6e:7e:42:27:6d:62:ee:05:52:6a:a0:
         60:48:c2:9d:e0:07:45:ea:85:0b:86:8e:16:54:6f:3d:2d:e5:
         13:89:79:b7:77:45:a6:c0:28:a9:cb:e6:f0:6c:2b:10:b6:ac:
         b0:71:23:b5:ef:a8:1d:98:ba:b1:62:24:0c:93:cf:2a:d1:7f:
         1b:20:81:a1:e8:ae:2b:62:69:44:e6:f0:11:3e:d7:37:76:ae:
         20:d2:1d:44:52:ec:23:dc:f8:ae:4d:4f:87:f2:df:d0:04:ae:
         d7:0f:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:07 2026 by rpki-client