Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File:                     _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier:          iGNUMVgy0/Lm+l0LJDrLCOk8X4HQMHydSOh5SeOigTc=
Subject key identifier:   51:5F:2F:17:A2:8B:66:B6:E1:EE:F2:CD:C8:E8:17:1C:DD:E3:3E:B7
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer:       /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial:       019D27A86E788BAE01032B23021D4DD0883D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 01:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:42 +0000
Files and hashes:         1: XObKO3ltJwjAm9or7k6NYiYPt_c.roa (hash: 7lZy4Wbsa7zNjERhyll32LTZE7YzAMI3aWuq/di2LaU=)
                          2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: IJ8HpoCjjGRemc8o/7TCoMJNTgPsjtqocgv+GHuoAaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:6e:78:8b:ae:01:03:2b:23:02:1d:4d:d0:88:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
        Validity
            Not Before: Mar 26 01:00:42 2026 GMT
            Not After : Mar 27 01:00:42 2026 GMT
        Subject: CN=515f2f17a28b66b6e1eef2cdc8e8171cdde33eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:35:0c:84:e8:e3:fd:fe:1b:ad:1e:f0:be:
                    c4:9d:e8:8b:5e:ab:f7:4b:e5:29:2e:8c:50:d5:06:
                    d9:30:ae:18:d4:09:d2:6c:6f:ad:df:cf:91:10:fb:
                    0d:c0:9c:30:14:d4:51:14:cd:61:b5:f2:bf:0b:59:
                    24:59:81:68:35:d2:ed:b6:78:cb:90:99:35:d8:73:
                    96:2b:d8:0c:f9:55:1a:1e:51:2c:5a:2d:96:b9:a8:
                    d0:05:7a:46:1a:64:f0:45:40:c0:7d:29:47:f7:3d:
                    9b:47:dd:aa:8a:0f:64:b9:86:57:c1:2d:d7:bb:fd:
                    d8:93:2d:49:d2:2a:56:25:ca:79:56:c9:43:55:21:
                    8c:73:0a:e4:49:09:97:3a:be:27:6a:4c:f3:85:47:
                    aa:d1:9c:cf:04:7c:1a:55:92:49:fe:82:2d:25:8f:
                    b5:db:35:12:d1:8c:0f:33:5f:f0:c6:1f:6f:72:96:
                    0f:8d:fc:9b:ad:f8:16:71:b1:7a:7f:75:7e:c6:3c:
                    7a:8f:7e:55:70:37:88:f5:91:8f:73:53:c4:7f:16:
                    e6:e3:43:2f:81:c3:32:d7:50:00:72:ba:ba:4f:df:
                    5a:91:ad:89:be:d8:60:02:82:2d:76:89:ba:35:25:
                    de:a1:ff:13:a2:d8:47:dc:50:60:a4:84:50:0f:50:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:2F:17:A2:8B:66:B6:E1:EE:F2:CD:C8:E8:17:1C:DD:E3:3E:B7
            X509v3 Authority Key Identifier:
                keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d8:61:4d:6d:87:15:64:b2:71:c9:6e:27:5c:b2:61:78:f3:
         ef:ae:4f:81:d4:3d:62:dc:f1:ad:99:de:00:8d:58:70:cd:27:
         ac:40:1a:3c:6b:b8:ce:23:9e:1d:5a:c5:58:25:8f:41:a7:b0:
         18:54:36:f9:5b:cb:76:58:b5:0a:04:34:10:6f:00:d0:8a:fa:
         0f:6a:05:6c:bf:10:62:20:a7:11:44:80:33:d0:8e:d4:4d:44:
         83:26:8f:e0:16:07:41:6a:7d:1a:d3:a1:a1:e3:ef:1d:f3:11:
         e5:c0:15:b7:0e:41:3c:fa:8e:59:2d:b9:9f:9f:ee:50:9d:8b:
         3c:cf:3b:d0:19:12:2c:df:4d:bd:39:4f:22:49:a8:34:bf:40:
         38:71:a1:b2:55:4c:a3:4c:aa:a6:9e:9f:63:5b:b1:b4:a2:91:
         47:04:77:6e:e9:1c:0f:ab:3b:99:80:c9:fc:af:5b:03:c6:7b:
         9d:2f:48:dc:f4:d4:5b:07:08:d7:98:97:ea:1d:6c:5b:01:9a:
         04:78:4d:6a:f2:e8:6f:4e:3b:9b:a3:b1:f7:5b:54:70:f9:b5:
         6e:43:19:62:be:6f:83:47:9e:a5:be:28:bf:d9:4b:47:ec:92:
         3e:ad:07:16:db:9f:5e:65:30:7c:b5:be:0c:dd:6c:30:34:5e:
         93:b2:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:38 2026 by rpki-client