Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File:                     aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier:          3WETd5SWbeFJ6k6k7yWGavz8RQZadVCM+KcHQljt0mw=
Subject key identifier:   93:AE:05:9D:4C:13:35:5D:E2:5E:0A:6C:E9:7A:5C:8F:4F:67:4A:BC
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer:       /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial:       019D273AD4A86CFEABCEA9846DF508B2C602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number:          05D8
Signing time:             Wed 25 Mar 2026 23:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:00 +0000
Files and hashes:         1: 4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (hash: Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=)
                          2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: GKTul2/1WEy8SRK0MP0eBRzCZYCGOqVKMmIkMmskjDo=)
                          3: dE-JGprnxw6rfyqiHGwVstJ3B-s.roa (hash: P5+Wa8hBNG0OAzbkWpR9P6pZV6VqpgnBr0Mr7oMWvCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:d4:a8:6c:fe:ab:ce:a9:84:6d:f5:08:b2:c6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
        Validity
            Not Before: Mar 25 23:01:00 2026 GMT
            Not After : Mar 26 23:01:00 2026 GMT
        Subject: CN=93ae059d4c13355de25e0a6ce97a5c8f4f674abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:39:69:0b:92:7f:35:d4:ff:80:8c:96:2f:
                    cc:bc:e2:11:94:a9:eb:2a:e9:77:d3:25:7c:cf:e4:
                    6c:d4:1e:a7:86:cb:01:8e:60:22:9d:46:28:c3:19:
                    26:d7:c0:8b:2f:46:10:e2:50:45:3a:c9:7a:28:5e:
                    04:54:f2:1d:06:47:3a:d8:c0:d4:52:6e:0e:83:b7:
                    8e:75:1e:e1:d1:1a:0e:18:0f:cc:ea:28:45:3f:4d:
                    b3:3a:5c:7e:10:35:e4:ee:e9:ee:b4:c1:e8:04:0c:
                    0a:75:5d:88:13:9c:ef:5a:a5:ea:65:b3:a1:17:b2:
                    db:78:64:b5:0c:a3:15:05:d9:e6:f8:47:42:1d:2f:
                    5f:06:61:a8:69:cb:94:5d:f2:f2:f3:8f:05:92:4a:
                    6d:c6:5d:03:33:9e:99:45:44:76:94:80:a5:bf:db:
                    58:1f:21:93:b6:ee:08:19:e0:b2:c2:69:f0:c8:72:
                    60:75:4b:fd:0f:b4:4f:d5:24:13:9a:ff:14:47:0e:
                    fa:b0:a2:3e:bc:68:2d:c9:f4:ff:e7:0a:de:03:11:
                    d5:96:2f:11:b9:b5:31:c3:65:01:f6:5e:4e:5d:73:
                    a5:d4:67:7f:54:b3:3a:61:35:f7:25:78:4e:57:b6:
                    84:e8:8d:1e:fe:54:81:96:90:7b:7d:42:3d:24:e1:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:05:9D:4C:13:35:5D:E2:5E:0A:6C:E9:7A:5C:8F:4F:67:4A:BC
            X509v3 Authority Key Identifier:
                keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:81:df:a8:b4:e5:a0:3c:91:4f:04:ba:08:91:71:9c:f4:05:
         2b:64:a0:74:37:b4:2a:1c:22:4b:d9:19:38:bd:b0:45:cf:b6:
         3f:e5:42:52:22:c4:b5:83:f5:ad:be:bc:8f:84:5c:60:d9:95:
         1d:4c:af:10:73:4d:76:e9:08:f8:46:1a:24:4b:91:f4:bb:00:
         11:3b:10:7c:e3:bd:f1:c6:7c:d9:84:18:ce:50:e9:3c:05:47:
         f8:cd:ab:2d:1e:b1:50:38:f6:dd:7b:0b:c3:76:ab:cd:b8:92:
         23:21:79:d7:8b:f1:0f:22:df:81:fe:aa:fd:76:9c:ec:f6:d3:
         01:72:53:ba:44:75:f0:7c:a5:a8:94:dd:fc:00:de:19:2c:a4:
         cf:a7:f5:73:f2:be:ad:e6:59:a8:b1:1c:b8:4c:2e:6d:01:92:
         dd:ea:1c:79:99:1b:d9:06:72:9d:e1:99:8d:fc:8d:90:37:f1:
         f0:f9:70:70:68:44:3d:30:5e:cf:5a:ec:84:24:23:48:06:4d:
         0e:13:48:82:aa:30:98:1c:18:d1:07:fb:93:22:08:c0:71:23:
         7b:e0:d8:a1:00:82:39:9a:74:2b:ff:15:91:f6:55:b0:20:10:
         98:b5:be:e1:50:86:16:c3:a3:d4:39:39:b9:42:97:aa:74:7f:
         8f:14:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:46 2026 by rpki-client