Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File:                     4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier:          cyItgg+w4dyz5kZXmBB403cAIG47CBBLjsTPOLsdC4c=
Subject key identifier:   AC:A5:69:6B:91:2F:46:81:B1:E7:7D:34:53:3A:E6:D2:6F:91:EE:DB
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer:       /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial:       019D2884C5C835D2CF119202F9B16D32FFBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number:          1142
Signing time:             Thu 26 Mar 2026 05:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:23 +0000
Files and hashes:         1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: 2Vtg/ZdEUnvG3AJhxKk3qHKcOEWiTUFEnR/M+5j495E=)
                          2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:c5:c8:35:d2:cf:11:92:02:f9:b1:6d:32:ff:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
        Validity
            Not Before: Mar 26 05:01:23 2026 GMT
            Not After : Mar 27 05:01:23 2026 GMT
        Subject: CN=aca5696b912f4681b1e77d34533ae6d26f91eedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:18:9b:d0:db:9e:29:bc:cc:8d:a0:3b:19:
                    cd:1b:97:92:7f:f7:05:8b:8e:ed:a6:be:05:fc:a7:
                    00:27:01:2c:f0:67:57:69:43:a7:a8:81:8e:73:8f:
                    58:d7:68:f8:77:b7:7b:1c:37:9f:83:ef:5a:96:3a:
                    6f:8b:fe:8a:d7:78:bc:38:7f:6e:45:81:39:f4:19:
                    d2:7d:ca:8d:4d:31:50:6c:f3:31:ee:f3:f3:66:cf:
                    6d:55:b6:6f:51:92:5c:b5:42:03:1c:ed:cb:eb:11:
                    30:4e:d3:e1:91:60:23:17:67:45:24:3e:08:26:73:
                    fc:d7:bd:e6:54:db:48:ca:21:59:22:d6:6c:79:26:
                    35:b2:0c:aa:4a:32:4f:d2:af:bb:ab:da:c3:41:df:
                    35:3c:a3:50:94:70:ad:27:27:8b:70:68:c2:3e:4d:
                    d6:89:90:54:9b:ee:99:eb:7c:4a:94:44:a7:52:50:
                    09:aa:66:1b:78:82:06:88:45:b0:e0:2c:58:94:74:
                    e5:76:7e:ed:a8:50:4d:30:04:38:88:15:63:12:80:
                    e6:39:68:a3:60:b8:2c:4d:75:a0:68:d5:f8:bc:30:
                    91:21:63:22:c2:41:e8:4b:70:31:35:04:87:f4:68:
                    c8:17:d4:c4:eb:b3:b0:8e:79:61:c6:06:60:d1:de:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A5:69:6B:91:2F:46:81:B1:E7:7D:34:53:3A:E6:D2:6F:91:EE:DB
            X509v3 Authority Key Identifier:
                keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:b5:d5:23:a9:ad:64:06:11:60:6f:79:ef:aa:76:20:45:
         6c:d8:90:73:32:4a:12:74:65:87:00:5f:1d:53:58:3f:9b:11:
         89:c7:9a:e1:cf:04:83:91:d9:1c:9a:7c:f1:d8:50:1e:5f:03:
         63:4f:48:81:7a:56:29:76:03:59:99:30:0c:77:f6:64:ef:aa:
         8b:37:9f:73:15:8e:d9:c9:61:fa:6a:1d:bc:da:af:08:25:df:
         bd:27:13:76:d6:82:fb:88:0f:4b:13:a3:47:cd:d1:b6:ac:34:
         ea:1e:a9:db:20:1d:c2:5d:de:41:f0:b9:76:00:b0:3d:33:5b:
         b0:87:72:91:ce:d0:fc:74:8d:5f:5f:ed:61:b0:ef:e7:5e:81:
         02:82:0d:65:c3:9e:17:c3:e8:45:aa:0c:ca:4a:3e:e1:57:ac:
         24:7b:11:91:74:bf:6e:b6:5a:c9:dc:3c:bf:e6:69:47:db:1e:
         d1:03:60:40:7f:b0:ad:cf:37:7f:a0:b6:1b:ee:63:4c:51:0f:
         8c:ea:53:05:af:c5:dc:9c:b0:b0:c2:67:46:03:0a:c0:0d:cb:
         0c:83:ba:43:44:55:5b:c3:b9:f4:6e:26:4a:0f:e9:3f:85:66:
         ca:1e:7d:5b:28:9e:1f:da:f5:05:3d:ef:d2:79:e3:5e:28:0d:
         2d:97:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:55 2026 by rpki-client