Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
File:                     1E3mWXWbAnQSSntIHQl2hAt63gY.mft (raw, json)
Hash identifier:          xtXdFqkU8kBsq9Rp8QsHoGZVlwyXA0j6FAFnPLYpbDM=
Subject key identifier:   78:EC:88:6D:FA:22:82:FE:8B:69:77:98:47:68:57:AB:93:2B:2F:D8
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Certificate issuer:       /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial:       019D284D31C5CF84822290F6C4114B82E3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
Manifest number:          1896
Signing time:             Thu 26 Mar 2026 04:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:40 +0000
Files and hashes:         1: 1E3mWXWbAnQSSntIHQl2hAt63gY.crl (hash: h6lLBPMG4snFFfp65R65DSTw7VtoxzJO8VkLgDwSprM=)
                          2: Pt0M7NnxrDEjh0WRvtZuGbZ1UJA.roa (hash: ON1158FpBOF9o3UWP6p7ZLz3OaCeEIQthwTlVtzYN/c=)
                          3: Wwcp1RNRxmA9uF4tEDDVqEKz3bE.roa (hash: 4QLAV/UZO06tZYqJje4l4uj7W3xOnuhocRHE1UC7XUg=)
                          4: Ye2GEDhazaeP2-cVb6Ll0YyHos0.roa (hash: D4xycm19E4MZpyyHq3gT/6x9Pb6wa/VQKyOsseee/GY=)
                          5: rKJI_5vgHPazIibiny0M3pEZG_4.roa (hash: ZTXWO4j1M3rBY3Zk/wDufutDDLtgGbRt+vTWZKesVQ0=)
                          6: sQ-PGm3V00xBDT0qqPPPgHHq11M.roa (hash: o5ucqRn0DHHqYoHJ+Qw03dH+VXUyTmU4LwJejoQASVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:31:c5:cf:84:82:22:90:f6:c4:11:4b:82:e3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
        Validity
            Not Before: Mar 26 04:00:40 2026 GMT
            Not After : Mar 27 04:00:40 2026 GMT
        Subject: CN=78ec886dfa2282fe8b697798476857ab932b2fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:19:17:ee:6e:76:25:e0:69:2e:e1:55:2b:
                    9f:c7:c8:bb:af:92:9d:65:19:2c:7e:c5:f9:4f:57:
                    e7:97:d4:ab:22:bc:80:17:d3:b2:39:55:09:11:e8:
                    aa:4e:9b:c8:2a:f3:1c:4c:fe:80:20:70:83:f2:6a:
                    4a:aa:0c:ae:f1:15:d6:da:07:68:ab:b2:77:2e:e8:
                    50:97:b8:80:9b:d8:48:ad:83:5f:d5:41:b8:16:a4:
                    ae:f5:1a:cd:8c:f5:c5:15:e7:9d:8b:a9:d0:c7:a2:
                    9d:18:fd:97:4f:13:d7:c8:e2:3c:78:13:c0:d9:84:
                    12:e3:93:32:da:42:20:d3:32:d7:53:c4:6f:bd:69:
                    a0:d1:3b:0e:bf:ee:24:5c:65:3f:1d:a9:15:88:5d:
                    0c:07:1a:0e:7d:8c:c4:37:55:25:e3:7c:4a:86:27:
                    4f:4e:60:d0:32:a0:30:f2:d0:66:ae:1f:16:6c:ce:
                    82:d8:32:46:78:61:53:1c:41:29:f8:e8:55:7b:dc:
                    43:9e:40:4e:8b:bc:4b:fc:e6:6a:7c:0d:48:47:7a:
                    13:e5:0d:d7:77:4b:cd:8b:2c:1f:21:de:06:b9:ce:
                    fb:98:fa:77:31:7c:cf:65:34:53:c0:00:d7:bd:e3:
                    43:20:8a:3d:1e:3e:4a:ac:21:3d:bd:d3:ab:d9:0c:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EC:88:6D:FA:22:82:FE:8B:69:77:98:47:68:57:AB:93:2B:2F:D8
            X509v3 Authority Key Identifier:
                keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:d9:46:36:8f:59:eb:ad:1e:ba:33:1b:6e:43:c6:3e:e8:
         58:32:3e:06:e6:90:64:56:8a:9a:34:18:22:df:b3:40:d7:6a:
         84:72:74:62:5a:2c:93:80:0e:23:dd:b2:d5:61:4a:1e:9e:2a:
         ca:60:b6:c4:e2:2b:ed:ef:6c:8b:21:ba:7d:aa:0d:e5:ec:59:
         da:65:06:54:65:5e:6c:0f:27:0c:ea:5a:a7:69:00:f7:ef:04:
         1c:be:cd:ec:6c:9b:72:50:54:65:36:8e:39:1e:88:38:cf:d0:
         74:43:59:bc:c6:55:3d:94:d1:c1:75:93:af:9d:3a:92:de:ec:
         4d:23:b7:78:82:7a:f3:41:4e:45:df:e0:72:5d:50:77:07:f7:
         f8:60:90:fb:66:fe:30:35:87:c4:56:bd:b9:8f:2d:c7:82:ed:
         ed:6c:31:6d:08:39:b7:74:ae:d6:e3:59:4a:3b:8b:66:9c:13:
         ff:9a:03:47:d6:db:2c:65:25:dc:21:cb:00:10:c4:1c:e3:d4:
         0f:27:47:8a:ea:9a:39:1e:98:ca:2b:d1:15:92:5f:23:2d:d9:
         35:5b:05:e5:18:93:2f:bc:b9:56:2e:78:ed:4d:fe:53:09:db:
         4e:9b:a3:25:2e:3b:7e:14:6f:6f:e9:52:99:09:3f:87:33:60:
         b2:a0:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:56 2026 by rpki-client