Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File:                     pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier:          lJJQHFolL3fBUIJOk7itfv1F4iyjROdzYG+89eIvYkA=
Subject key identifier:   19:C0:C4:BF:02:DA:E6:F5:02:D2:00:28:D7:01:64:5F:D9:87:F1:AD
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer:       /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial:       019D284E62619E5AD6193973F3B0D0CB6C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number:          E9
Signing time:             Thu 26 Mar 2026 04:01:58 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:58 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:58 +0000
Files and hashes:         1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
                          2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: dwV53waOCfV/3DG4jyJI8SKECxFBuVSM+7I2cciHveY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:62:61:9e:5a:d6:19:39:73:f3:b0:d0:cb:6c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
        Validity
            Not Before: Mar 26 04:01:58 2026 GMT
            Not After : Mar 27 04:01:58 2026 GMT
        Subject: CN=19c0c4bf02dae6f502d20028d701645fd987f1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:18:4c:13:65:5a:59:8e:71:59:c5:55:0a:
                    aa:52:89:00:16:33:be:c1:4c:a2:96:42:88:2a:95:
                    96:74:94:1a:23:8f:b7:85:f9:a1:cc:2c:b8:8d:ab:
                    fe:c9:b7:a9:ed:17:c9:3a:b7:b2:05:44:9c:d0:8c:
                    c8:00:9e:82:07:24:3d:dd:7c:73:a3:a9:41:cf:91:
                    15:67:4d:d8:31:1f:12:56:ac:c0:16:52:89:ed:6c:
                    97:36:78:47:e2:6d:ac:29:ef:21:ba:f1:87:76:1e:
                    85:18:fc:5b:4e:03:b9:50:bd:9a:18:62:81:5a:b1:
                    c0:69:3c:67:04:80:71:7e:d4:0b:fa:0e:8c:7c:d8:
                    e9:c8:03:a2:fc:3f:9e:27:0d:1f:a7:ce:3d:b7:ff:
                    11:af:4a:ea:ac:4d:05:50:13:e1:15:7a:31:64:d9:
                    61:8b:37:0c:c0:58:30:6b:fe:d8:83:18:6d:2e:f6:
                    7b:20:8f:40:9f:ef:6d:d1:1e:99:68:ed:f0:91:87:
                    46:e4:6c:8b:7d:fe:19:45:9e:3e:33:5c:4a:77:92:
                    9e:08:c9:27:e6:38:7c:3e:46:6b:82:cf:9d:93:e6:
                    ad:05:9a:83:db:39:47:50:ee:5f:10:c7:e8:c7:79:
                    94:c9:4c:36:c6:92:83:2a:77:e2:20:e8:5d:3b:11:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:C4:BF:02:DA:E6:F5:02:D2:00:28:D7:01:64:5F:D9:87:F1:AD
            X509v3 Authority Key Identifier:
                keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:90:96:a1:86:c1:c5:f5:b5:84:72:ab:b9:b1:7f:9e:f2:
         8e:63:4e:65:36:80:65:6f:20:05:15:b5:17:38:6b:d3:c7:c8:
         96:70:d2:f9:0c:11:4a:40:60:ab:ba:a1:ed:5e:85:ef:4a:90:
         34:b5:1c:04:d5:09:eb:5e:ac:2f:67:3f:6f:0e:c3:01:db:5a:
         48:6f:c9:b9:46:89:1c:aa:6e:24:ab:70:06:ed:bc:21:de:47:
         bf:a8:8b:17:3e:a7:38:26:3b:7e:e6:6e:cb:93:3c:45:f7:2a:
         59:27:5b:fa:5a:f4:61:32:57:de:1c:15:d2:4a:6f:82:aa:19:
         8b:0d:54:b5:5b:8e:41:60:0d:57:26:be:f0:21:6d:87:80:a9:
         da:dc:09:7e:c2:0e:ef:37:7b:37:73:b7:8a:57:2f:69:51:0a:
         8d:a8:0e:b7:a8:78:f5:0b:e5:9f:a4:4a:60:ee:76:8d:0c:e1:
         96:d7:0e:0a:fa:3a:08:04:0b:53:fb:66:63:68:5d:94:aa:7a:
         36:75:49:62:56:96:8a:42:6e:98:f7:df:ff:d6:d8:d7:7c:7a:
         53:e4:d5:01:32:0a:bb:64:17:2a:3c:1c:8f:fe:a6:71:35:51:
         53:51:1d:75:30:d8:6d:5f:39:87:4f:ce:b7:d8:8b:0c:73:88:
         d9:9f:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:11 2026 by rpki-client