Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json)
Hash identifier:          36WPEevAsV3OVwXpdAJdtZ9MFSxHG2v+CMsIpyOwefU=
Subject key identifier:   69:D6:3A:13:09:46:6D:08:4C:2E:50:71:1E:81:0A:47:28:B5:30:20
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Certificate issuer:       /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial:       019D27DFB782099BC524901A4E95A5054867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 02:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:06 +0000
Files and hashes:         1: 0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa (hash: 2PcsF5G0Mq3lPMeGvxmpYXNXSdp0a4eMQFAaAmAvtYY=)
                          2: B_S5icIbEZu3NRi7pO3M0FoxLBY.roa (hash: NpXzXVIDrJc5PoL2K8nkZP6JJq6luR8bBGM3/nlrQ3I=)
                          3: _w8qU7QLDWariPOfRN9OMYuyNWM.roa (hash: 7rGZ50HKoADJZt0gKXjNdUDKxe/HyV19YQRWiM3XHAo=)
                          4: awc83yGNtXzyjqzRMTElkzhM-Io.roa (hash: PQ/L7qMRaTtcJZl8Z1BC36Zg7hT94D0vhYdETaZzx5c=)
                          5: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: xF6nFzKexDd9+EGr1RR4al2fGMs1Ek+Ux4HFlZFX8I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:b7:82:09:9b:c5:24:90:1a:4e:95:a5:05:48:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Validity
            Not Before: Mar 26 02:01:06 2026 GMT
            Not After : Mar 27 02:01:06 2026 GMT
        Subject: CN=69d63a1309466d084c2e50711e810a4728b53020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:e3:ab:5a:63:cf:6f:9d:db:7c:04:7a:79:
                    c5:57:63:69:86:17:13:26:74:cb:23:6b:f4:1c:f6:
                    9f:28:86:63:53:e9:15:d4:1d:ff:66:ea:12:e1:54:
                    49:15:73:92:b1:fe:b9:cd:49:39:9b:54:c3:43:fc:
                    d4:1c:c1:85:64:fa:e6:37:50:2f:51:95:b8:f8:be:
                    71:1d:84:dc:86:ac:47:8d:7a:63:89:99:6d:9a:0d:
                    1f:1a:90:93:d1:03:6d:11:16:41:9e:c2:e3:94:78:
                    75:4a:96:a3:fd:d5:fc:80:14:da:1d:1b:e8:7a:70:
                    cf:52:37:af:52:5f:1d:ac:ea:7b:fc:aa:d3:ad:87:
                    3b:9e:f8:d5:9b:fc:e8:f9:63:93:ff:dc:fe:3e:90:
                    eb:17:a5:46:60:35:3f:6e:c5:fd:c5:f1:8d:2a:32:
                    44:9d:d3:c4:c8:49:92:c6:22:5b:cd:6e:e5:20:dc:
                    69:88:b9:c1:7b:f3:24:44:11:19:48:22:66:b4:b5:
                    23:37:12:e6:72:e5:61:44:dd:c3:54:97:49:2d:89:
                    65:ea:cc:1a:4b:48:8b:b5:e2:b3:60:c7:49:44:31:
                    0e:b8:25:ee:2c:69:50:50:51:19:7a:3d:ef:57:7e:
                    1d:51:4f:6d:ee:1b:68:d6:ca:4e:8d:64:9c:1e:5a:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:3A:13:09:46:6D:08:4C:2E:50:71:1E:81:0A:47:28:B5:30:20
            X509v3 Authority Key Identifier:
                keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:8d:09:1e:b3:ab:97:e6:5d:e2:ba:15:cc:de:1d:39:ac:
         1a:9b:38:d4:24:e2:fd:18:e9:fc:b0:d7:2c:6b:d3:85:80:67:
         56:5b:03:94:bf:1a:13:4d:14:1d:30:0f:9e:c8:66:5c:c6:fc:
         86:c9:d8:da:43:9f:2c:76:01:ab:7a:de:18:0a:8f:02:2d:d1:
         24:cd:e1:5a:f0:b2:ea:ac:cd:91:ba:40:bf:21:f8:e3:68:ff:
         67:3f:5c:40:d2:9c:ab:86:c8:34:71:b4:68:17:4c:6f:e6:da:
         52:c3:79:da:d7:f7:72:2e:b4:c0:06:5d:52:52:4f:40:29:c7:
         53:d3:40:c5:75:a8:8f:9e:31:04:93:4c:a4:b8:da:84:0c:c2:
         ef:05:7b:2c:ca:c5:a9:e6:4a:3f:11:83:21:db:3c:91:50:33:
         5c:6b:62:01:dd:ec:de:ef:99:38:46:5f:aa:f1:09:89:7a:f9:
         e7:76:b9:f8:0e:8c:03:90:4a:95:24:66:3e:2d:b5:23:a0:56:
         3d:e4:31:3e:0e:b5:a4:16:94:a0:25:a4:bf:37:c6:6c:c7:4e:
         5b:72:a8:bd:b0:61:d2:9c:8d:bf:b1:01:bd:c1:55:40:b8:04:
         a2:7d:29:17:3a:2a:c0:04:de:04:ca:7d:00:ad:dc:7f:96:21:
         3b:2b:46:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:55 2026 by rpki-client