Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          3AfU+3AVPulv4Yb07H1yDGcNeUsADf/VdJ/WqCP+Bus=
Subject key identifier:   33:E6:F1:63:1C:2F:9A:10:61:16:31:98:B3:35:48:99:F7:22:87:6D
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       019D2884976B0E2EAE656577025FE530669E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          1898
Signing time:             Thu 26 Mar 2026 05:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:11 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: mW1wtMp3Fm2smn8hjUIT2ntoOAeT14C6j3KkgLURtuc=)
                          2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
                          3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
                          4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:97:6b:0e:2e:ae:65:65:77:02:5f:e5:30:66:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Mar 26 05:01:11 2026 GMT
            Not After : Mar 27 05:01:11 2026 GMT
        Subject: CN=33e6f1631c2f9a1061163198b3354899f722876d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:3b:ab:d6:e1:e6:23:3c:f3:17:f6:c1:0b:
                    6c:c1:96:4e:00:2a:c2:0d:5a:3f:5e:ef:df:94:16:
                    f7:56:a0:93:c8:6c:58:89:99:bd:12:28:89:75:af:
                    76:f8:20:97:99:ae:1f:49:8f:3b:ce:18:35:68:84:
                    57:80:22:49:7c:77:59:30:b2:8d:3f:3b:66:80:b4:
                    47:4a:df:e3:46:1a:48:7d:1b:58:3f:5a:3e:aa:9c:
                    d5:be:4e:b5:20:86:0b:97:f0:d0:e6:b5:8c:89:5b:
                    d4:15:ee:52:9c:67:41:a6:9f:98:b2:13:ec:e3:95:
                    e1:1a:f8:ab:76:e4:42:23:fc:6f:00:c5:13:ef:39:
                    d9:70:64:e1:58:6b:b0:a9:07:74:4f:9a:e2:8b:69:
                    c0:70:92:7c:b4:bd:35:88:89:11:f7:bf:34:4d:a9:
                    f0:84:b1:65:1b:4b:9a:84:6a:8b:75:40:c2:54:d2:
                    dc:4c:d5:fc:7b:8d:a0:ba:a9:8b:a9:7b:02:90:70:
                    0c:93:71:28:24:a2:2d:a5:81:fb:f5:09:28:c0:59:
                    61:cf:b4:a2:2b:92:52:45:30:78:0c:36:9e:8e:cf:
                    c3:15:88:bd:7f:5f:bc:30:68:47:8f:90:b0:57:c8:
                    db:80:3c:d8:55:02:c5:67:08:eb:06:0b:2c:21:90:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E6:F1:63:1C:2F:9A:10:61:16:31:98:B3:35:48:99:F7:22:87:6D
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:0c:cf:2e:ab:80:ca:c7:cc:60:db:f4:64:0d:92:99:31:
         1f:72:0c:ab:1b:42:4f:49:d7:c7:b0:3f:33:84:3e:c9:ef:13:
         ae:32:df:9d:56:9b:e3:6b:37:8d:38:86:78:b4:13:12:c4:a3:
         b7:8f:b1:09:59:ed:7a:f6:b4:b3:69:e9:61:53:3e:48:0b:a4:
         e7:6a:df:08:1d:06:f2:9d:70:2f:24:ba:ba:08:ee:82:53:a1:
         7e:4e:6f:e9:64:09:b0:61:ba:72:f6:62:31:bf:62:61:2d:ae:
         01:b1:5e:ea:94:f9:04:41:16:97:67:98:09:56:e1:ff:28:c4:
         20:2f:c4:26:d2:87:87:83:5d:73:ce:55:49:0c:fa:6c:d5:87:
         7c:22:aa:52:ac:6a:fa:71:6a:ac:01:51:2d:02:e4:20:1a:89:
         ac:ff:23:e1:f2:02:d5:fd:b3:a1:89:41:6f:25:96:1e:7f:79:
         8e:8e:cb:55:0f:b6:90:c1:76:23:ba:7c:ab:aa:30:4f:9c:aa:
         64:b2:ba:cd:ff:7b:10:b8:1c:75:03:1f:8f:72:37:4c:1c:23:
         54:30:d1:85:3f:21:55:14:d5:41:83:b2:cd:12:45:5b:41:54:
         81:ec:76:a6:cf:e7:ec:a4:d9:c5:4f:83:d6:0e:bd:93:b1:ca:
         92:8a:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:06 2026 by rpki-client