Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          zkoAjKS3qVImIkVxLiZeoHNt1z+AV/uTGJ578bHH9LY=
Subject key identifier:   C9:37:9C:D6:CC:1D:22:1E:AA:CA:71:C6:31:6F:AB:D1:A5:52:9B:12
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       019D2816D599E66D3A51C42084D0931BB0E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:18 +0000
Files and hashes:         1: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: srBUSHPcqZ1Iqjz1ms7Pzvi15bBaZAXkPmJjcfDfR3Q=)
                          2: vfVgwYQtTWQH5Svk8hRtQE6LdZs.roa (hash: nMz4GkfTsgm1Yz/uiD26MI9xBVzaezRNvPq8yPwMur0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:d5:99:e6:6d:3a:51:c4:20:84:d0:93:1b:b0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Mar 26 03:01:18 2026 GMT
            Not After : Mar 27 03:01:18 2026 GMT
        Subject: CN=c9379cd6cc1d221eaaca71c6316fabd1a5529b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:e1:ab:74:f3:67:b4:db:9e:32:33:56:ce:
                    3f:ff:e3:e4:93:e6:28:e6:f4:21:0a:a1:f0:c8:bf:
                    87:53:32:29:f2:41:76:c1:77:82:68:1b:40:ed:59:
                    4c:6b:bc:ba:92:c3:10:3f:65:99:69:45:6c:f1:4d:
                    1e:62:35:96:5d:68:6a:7b:ee:a1:23:5f:56:af:01:
                    02:93:78:f2:3b:1f:f2:ea:18:db:5d:83:e7:89:37:
                    1b:71:16:8f:db:22:d7:e9:49:d7:44:10:d1:27:90:
                    d9:df:2e:c8:a5:32:2e:9a:6f:41:f6:da:5f:52:07:
                    d5:0a:18:69:a9:de:54:a6:ca:36:ab:9e:9d:5a:3c:
                    b5:28:20:f9:5f:b1:60:e3:3c:9b:a1:3b:94:12:23:
                    36:92:c8:39:d9:37:82:a1:74:85:1c:53:52:5d:d9:
                    67:54:20:cb:43:ee:96:c6:ff:d7:7f:f3:b8:6d:2c:
                    69:53:47:3b:c8:31:32:77:a8:ef:5e:7e:40:1a:82:
                    8f:4c:4a:fc:19:7d:45:e3:61:9f:88:d5:99:7c:e3:
                    b7:b3:54:0a:af:61:77:34:41:d1:73:42:65:1e:fa:
                    f4:5f:ef:81:a7:19:72:64:9f:56:fe:02:32:e0:00:
                    02:4b:12:01:03:c8:ec:21:31:da:ab:63:3d:3a:4e:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:37:9C:D6:CC:1D:22:1E:AA:CA:71:C6:31:6F:AB:D1:A5:52:9B:12
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:b1:96:f7:cd:c8:cc:96:ce:58:37:83:ee:06:02:c6:1e:
         94:04:ac:e7:d1:01:14:1c:62:84:c0:aa:62:f6:84:68:4e:05:
         9b:85:82:00:ea:db:82:2a:18:1a:1e:d3:2a:25:00:94:15:8f:
         5e:99:f6:bc:bf:91:7c:cd:ce:96:23:ef:f5:fc:86:07:1b:65:
         95:db:44:60:4b:53:0b:9d:e7:91:62:f3:fa:8f:94:77:ff:b5:
         02:f4:cb:bb:c0:d6:b5:30:6c:0a:2b:03:5f:83:76:39:fa:20:
         66:10:3e:1f:cb:a8:00:23:30:90:ea:33:73:41:17:16:5d:85:
         0a:47:cc:72:dd:6e:be:a8:c3:f7:6c:6a:e6:a2:d8:9c:74:e4:
         93:c8:23:35:b7:d3:e4:64:d5:33:ce:09:7b:df:74:6a:f4:6b:
         e8:7a:4a:da:c1:72:08:64:2c:a7:95:ca:68:9b:d8:23:80:25:
         5a:7c:05:75:7e:c0:c5:8e:db:80:b8:65:21:c0:db:d2:a8:9e:
         7a:14:61:fd:39:fa:a6:39:1b:0c:a2:61:80:b0:56:87:3d:3e:
         a1:e5:d2:c4:17:2c:19:3c:da:9e:36:95:cc:96:cb:e9:31:66:
         96:3c:8a:e5:8f:f5:b5:fb:ff:eb:9c:3b:db:ad:95:7b:c0:97:
         57:b5:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:03 2026 by rpki-client