Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File:                     x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier:          6rbOk33X/Q9apwFzOsfkXF+eopitOUD3+QD2ko4wGcM=
Subject key identifier:   19:57:1D:D7:B9:D1:9A:DF:5D:81:DF:B9:83:14:32:09:CF:8F:FF:AF
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer:       /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial:       019D2771D355A12A255BAD3CFDF08CEFE345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number:          0D2D
Signing time:             Thu 26 Mar 2026 00:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:04 +0000
Files and hashes:         1: 7873A-doZHT3z3WdUC9-3ek1dsM.roa (hash: GiS1ksDLyImHjpb2W7ngtoEXY3bCfhYHNgRK23R2O8Q=)
                          2: SJYIkLcX_CNS1SprQ_soGckZIGQ.roa (hash: eDm4/cj9IxvpczJ1uU/Y+99aLmMJiA5yew/A11GEYVs=)
                          3: rf5y8gSq5wsa5gp2pUsrZdvorF4.roa (hash: LhVJmNP7LYW2COhuVTfB4/5Ch+7vx0bLlcnCO+/fQfk=)
                          4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: nyw/Xw02Cc8rd0tlgSdZ7VpELVHuCCGQzK3ajKblLVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:d3:55:a1:2a:25:5b:ad:3c:fd:f0:8c:ef:e3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
        Validity
            Not Before: Mar 26 00:01:04 2026 GMT
            Not After : Mar 27 00:01:04 2026 GMT
        Subject: CN=19571dd7b9d19adf5d81dfb983143209cf8fffaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:65:fa:7e:fc:ce:bb:c4:07:26:6a:dc:9f:
                    a2:2c:ea:0e:07:00:c2:38:c8:4e:ba:4f:bd:fe:10:
                    61:cc:d6:d1:5b:33:42:4d:60:8c:89:e1:40:72:57:
                    a2:13:83:20:02:45:00:64:0c:94:87:fc:cd:cf:3d:
                    07:fa:4c:45:a5:54:d5:d5:69:45:52:f4:79:22:7a:
                    f6:c6:2d:fc:a4:e1:98:a2:e4:64:58:4a:e6:07:c6:
                    28:55:a2:ba:fa:12:c5:ac:8a:ba:b1:eb:1f:17:ec:
                    a2:61:a4:8d:83:35:c0:a8:05:78:36:74:e1:00:26:
                    f7:95:54:46:e5:58:88:3a:01:03:ff:09:5d:f8:0e:
                    8d:e1:1e:c4:2f:ff:0e:d3:9f:c8:d8:1e:8f:8c:09:
                    59:93:7d:77:2b:b6:f6:67:77:59:7c:b3:68:38:1a:
                    0f:23:3e:5c:4c:7a:2f:8b:9d:5d:e6:58:19:d7:a0:
                    af:ef:e0:98:27:27:6f:f0:e2:e3:c6:ff:ba:69:cd:
                    e3:e4:22:13:5d:e2:cb:e3:04:53:3a:99:6f:15:1d:
                    4f:77:0b:63:55:86:4a:38:e6:10:85:27:d9:f0:9b:
                    ec:fc:8a:b1:3a:2a:20:a9:33:66:b5:ba:a8:77:6d:
                    45:48:17:f8:76:35:34:9e:19:09:3c:66:3b:35:bb:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:1D:D7:B9:D1:9A:DF:5D:81:DF:B9:83:14:32:09:CF:8F:FF:AF
            X509v3 Authority Key Identifier:
                keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:a3:e4:c4:f1:1c:74:ab:dd:4b:fb:a5:74:6b:a0:9c:6f:
         54:1c:8f:6e:c2:db:c3:bf:18:30:c1:93:2e:19:03:ea:14:c6:
         67:4c:d9:70:6c:d8:82:ca:52:20:22:00:01:e4:bb:3f:1f:96:
         a0:09:a3:81:55:1d:9d:da:61:87:6c:dd:51:ef:a1:45:54:10:
         62:d4:f0:ad:61:94:97:e3:cf:9d:29:72:35:46:cf:d5:8f:9a:
         22:38:90:d8:90:cc:33:54:ad:31:6d:ca:37:6e:46:fc:a6:76:
         35:74:e4:16:75:5b:14:29:ad:64:eb:06:85:4b:c0:06:2f:8f:
         2e:f5:14:d9:f2:57:3b:90:d3:51:3d:5a:07:aa:5d:8b:e0:15:
         ae:e0:a3:9a:67:51:98:87:75:ff:bb:15:0b:5b:db:9a:08:b3:
         3e:fc:fa:9d:c1:c1:39:1b:7e:9d:2d:cc:7a:af:f3:76:06:48:
         41:b1:f3:43:92:0b:cf:b7:c7:2c:40:ce:1f:b3:4d:58:69:75:
         87:3a:16:72:26:63:5f:aa:26:1e:3c:4a:3e:8b:d0:75:bf:0e:
         f5:8e:20:9b:83:e6:a6:fb:b0:e7:f2:d0:38:d7:44:e6:af:21:
         35:6e:f6:73:65:76:c8:ce:f4:74:e1:85:5f:4d:76:2f:fe:91:
         a7:8e:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:06 2026 by rpki-client