Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
File:                     7xU1l4vmsK16nLcOsFIvjJUJgqk.mft (raw, json)
Hash identifier:          9HB06EETlhjCb25Bza7Hwgn6Qo50GgH6Olxb5sjM604=
Subject key identifier:   3D:0F:33:A8:FE:D7:00:12:10:70:DB:87:37:C9:68:22:D1:1A:9E:B0
Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
Certificate issuer:       /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Certificate serial:       019D29CE0927E7A8771C144D51E616BBFAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
Manifest number:          0198
Signing time:             Thu 26 Mar 2026 11:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:01 +0000
Files and hashes:         1: 1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa (hash: 51tw/udP13YguOvYrb1xizkGBlXzZHexEK8HlcpRMGs=)
                          2: 2VIoG8QN-zjnAemqLtXlhO_Jltw.roa (hash: cZjTIR9f7TdWlH+cvp6k0DHUwZH3r7HLXpRNG9UZVIM=)
                          3: 7xU1l4vmsK16nLcOsFIvjJUJgqk.crl (hash: coI02VXULl+hBRmfyPdfDY3G6FsBe6qu5IxKYmuPHZQ=)
                          4: EJwMuFYK1wsM5hee91ic9tZZCHs.roa (hash: AQoucDoJ40lM0+JsqQe1B2wvG+y+JOvu/h9zeWafMiQ=)
                          5: aMiNXiZTn0auDW0z6jWzMcVy5es.roa (hash: mTYhpZfI6W//js6v7bdR+EJfQ3pBaYPmRe515ss9poI=)
                          6: w_c3ITOoCkFf0DnaSmtgq6Rn678.asa (hash: J6tFhX6N1Hura0xZcR4F7V51t3AR4eoZPi1JRBlD4q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:09:27:e7:a8:77:1c:14:4d:51:e6:16:bb:fa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
        Validity
            Not Before: Mar 26 11:01:01 2026 GMT
            Not After : Mar 27 11:01:01 2026 GMT
        Subject: CN=3d0f33a8fed700121070db8737c96822d11a9eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:8c:1a:5d:8a:a0:90:4a:c4:99:e1:30:06:
                    5b:6b:68:ac:48:a0:ff:03:26:72:63:6c:0a:ac:04:
                    ef:95:e0:aa:7b:5a:fa:db:88:07:ca:32:b3:18:9a:
                    43:2b:b3:e8:70:92:f8:a6:95:61:5a:af:c5:2e:62:
                    32:0a:d7:7d:2b:32:59:e5:ae:da:fe:db:ce:98:0a:
                    e9:e2:41:4a:f9:03:ad:c8:6e:e2:5b:73:95:48:96:
                    76:9e:80:bb:c7:d0:f8:53:e2:ab:f1:6b:bf:ba:af:
                    6e:6a:a3:38:b5:bc:a9:4b:f2:63:9c:9d:b6:39:75:
                    b1:09:a8:47:e8:d9:f5:2a:57:e2:ec:cc:03:d2:01:
                    60:b7:e9:dc:f7:39:63:27:94:51:bd:a9:76:c3:e5:
                    19:2c:b2:d0:52:b9:07:60:54:d9:d8:2b:ab:65:d3:
                    94:59:05:93:e4:6e:af:32:fe:2d:b6:0c:08:b8:26:
                    49:46:a8:74:9e:98:72:ca:63:1d:60:ff:5d:90:3f:
                    49:8a:6a:94:d7:d5:77:64:fc:db:58:4d:73:21:1e:
                    f0:4a:eb:e9:af:80:cd:27:69:ab:97:3a:50:c9:03:
                    56:ac:30:56:26:0e:cb:20:ac:a2:6e:77:f5:b0:3d:
                    69:81:71:53:7e:10:9a:2f:cf:30:ed:46:7e:7e:2b:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0F:33:A8:FE:D7:00:12:10:70:DB:87:37:C9:68:22:D1:1A:9E:B0
            X509v3 Authority Key Identifier:
                keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c8:70:97:8e:7c:25:af:70:72:66:5a:e0:a6:47:28:f2:02:
         4c:8a:00:62:4f:54:a4:b8:37:b3:49:2b:6c:a3:f5:be:70:f6:
         d1:6b:13:12:ff:49:2b:4b:ba:d1:98:23:37:96:9e:62:f2:23:
         28:ac:7b:64:8b:73:15:8a:9a:0a:9f:18:8b:a3:6c:7a:8f:b8:
         ff:6c:31:09:c5:7b:8a:eb:50:ba:d5:d3:e7:d9:ca:4c:5f:fc:
         d6:90:63:d6:41:ee:00:3e:13:f0:2e:aa:7c:7c:cc:ce:6d:f5:
         c2:6e:93:8e:c2:51:14:36:0c:cd:80:bf:93:f3:42:83:99:0e:
         cb:7f:6b:a9:0f:05:47:b4:fd:5c:10:2a:fb:86:a2:42:2f:f7:
         99:77:8e:01:11:94:fd:2d:23:82:b8:f5:db:1e:f4:72:bb:26:
         ac:5b:97:d1:67:0e:21:a8:ef:da:57:c7:0b:eb:35:b1:27:31:
         4b:05:48:d2:91:8e:3b:89:6f:6c:e4:cb:e8:7b:3f:04:c1:17:
         d4:c3:55:20:26:c5:53:99:29:40:51:1f:91:05:fd:1c:7a:38:
         f4:c6:72:ed:f1:3f:e6:21:3c:c4:58:7d:33:6e:82:97:dc:8d:
         5f:ce:39:ba:16:dd:d2:29:9d:79:3c:95:5c:aa:d8:da:1c:d2:
         55:13:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:06 2026 by rpki-client