Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File:                     I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier:          5VHMS+3VvA3q/Tb1rnSYnogeKoHD7rJK/Mop8ai73zs=
Subject key identifier:   9D:D4:5F:8F:BB:F9:A8:90:9D:DF:76:20:D2:D2:34:D8:54:B5:CB:8E
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer:       /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial:       019D27DF842C76B4C278C8A1AA5B0C5764B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number:          0BCF
Signing time:             Thu 26 Mar 2026 02:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:52 +0000
Files and hashes:         1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: bxZmldBmojBlU6euS9YXy4wDRWucR3DJ01WWoOUCeyU=)
                          2: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (hash: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:84:2c:76:b4:c2:78:c8:a1:aa:5b:0c:57:64:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
        Validity
            Not Before: Mar 26 02:00:52 2026 GMT
            Not After : Mar 27 02:00:52 2026 GMT
        Subject: CN=9dd45f8fbbf9a8909ddf7620d2d234d854b5cb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:11:f2:c9:e2:5e:e4:32:f7:f0:86:f9:f6:
                    76:fc:c5:e8:1b:ab:1c:e0:53:cf:37:c9:d2:ce:5c:
                    fe:3a:c4:d7:c5:f7:a1:cf:fd:9f:83:a4:ca:3c:76:
                    38:ce:20:c1:6a:7f:1a:f0:6f:8e:71:46:07:64:7f:
                    d4:c7:fd:66:ad:a3:01:df:2b:24:a7:ff:fe:0a:fb:
                    93:39:69:ca:9f:a2:93:d8:4e:52:62:52:89:c2:9d:
                    24:0f:6a:87:4c:40:d6:f6:00:41:b3:86:6a:4a:48:
                    f5:51:a9:7f:b7:3f:22:51:45:c5:2d:77:8a:30:f3:
                    1b:05:af:d5:09:e5:fa:8f:4c:ad:33:ee:0f:0d:3c:
                    9c:8e:5b:9d:b5:d3:6d:97:11:53:8f:30:c6:ce:ee:
                    61:1a:a6:d8:8d:73:22:d1:6b:72:58:28:41:b6:06:
                    fc:49:e7:66:d7:b6:79:6e:b6:bb:a1:92:64:76:76:
                    ce:7f:6d:ef:73:bf:eb:12:62:5e:9e:0f:fb:00:1e:
                    f6:73:11:62:5d:0f:ee:6e:25:9e:4b:b0:76:aa:69:
                    a6:c5:94:dc:1b:c6:a8:ac:d7:73:c9:26:18:a6:21:
                    1c:bc:63:75:a0:97:6a:58:94:87:34:9c:51:cd:6e:
                    03:c7:cb:be:bb:2e:c0:b3:c8:d0:d9:50:7d:09:de:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D4:5F:8F:BB:F9:A8:90:9D:DF:76:20:D2:D2:34:D8:54:B5:CB:8E
            X509v3 Authority Key Identifier:
                keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:17:53:ba:bd:c5:1d:c6:cb:1b:7d:5d:74:7d:fa:50:a0:41:
         3a:19:57:02:af:28:05:f0:b2:6e:29:fa:95:aa:56:88:d2:e5:
         98:1e:0b:9c:60:13:29:df:dc:a9:94:6b:0f:29:29:56:c1:48:
         a4:5d:9f:4a:35:7e:6c:e7:58:9b:45:3a:d3:f4:ed:0d:37:30:
         8f:0b:ff:2c:f7:6c:56:39:9f:56:cf:e6:78:d6:9e:e3:32:d3:
         f7:e7:4e:73:1d:f1:8b:ef:fa:58:6b:b9:e6:ef:15:7e:33:09:
         c2:d9:4d:52:0f:4b:3a:a3:64:7d:cd:76:7a:64:0e:ac:f0:8a:
         6d:79:f1:de:e9:37:f7:69:31:82:29:96:64:bc:9b:a2:66:51:
         ff:12:8a:fe:67:e5:9e:23:a8:85:1d:f2:71:d3:7d:42:c5:a1:
         cd:dd:1d:30:2a:4f:66:7d:cd:04:18:e1:41:c1:1c:c7:c1:7e:
         93:79:66:f4:32:aa:87:5a:bd:d2:72:2e:7a:34:42:99:8f:19:
         72:a8:1b:f8:66:ea:7e:d3:24:67:4c:9f:f8:60:c0:e4:89:08:
         1c:64:8a:ba:27:5a:f5:be:e5:1b:17:f9:55:3e:78:96:68:b8:
         5b:2a:54:5d:8f:42:a7:11:86:2b:15:59:40:49:4a:3a:1a:49:
         7d:c8:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:01 2026 by rpki-client