Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File:                     V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier:          iLtsLg/CdJX+2KcxR/cEH1hMvJy+6IDLrjqY2pfFsL8=
Subject key identifier:   28:A5:13:16:C6:10:F7:FE:A9:2C:95:AB:F8:0F:7C:5B:4C:2A:3E:9E
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer:       /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial:       019D2997A7AF4D5A7D3CD8C0C0123884A805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number:          181A
Signing time:             Thu 26 Mar 2026 10:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:37 +0000
Files and hashes:         1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: oJs9FlvUzCKbm+LWldwdNzSkni7Ny8lmm6WjaDYMfN8=)
                          2: wqUca6hdhuPK8izyY-5u-NB8hFo.roa (hash: HRKsMqKaEiIwseli6i4ZQRouG3dOlIyMlhskACBVj8Y=)
                          3: yOVUwpawosnLEvEpWeBu0ZksdtE.roa (hash: ecVfRjOLZ9OqmXqMU4m+THLoypH/3fTNLWWn4EOFi9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:a7:af:4d:5a:7d:3c:d8:c0:c0:12:38:84:a8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
        Validity
            Not Before: Mar 26 10:01:37 2026 GMT
            Not After : Mar 27 10:01:37 2026 GMT
        Subject: CN=28a51316c610f7fea92c95abf80f7c5b4c2a3e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:11:f1:24:89:6b:8b:be:f6:5b:8c:e2:a4:
                    ea:56:77:0f:a8:99:fb:b3:83:e9:ce:16:28:24:45:
                    54:f1:90:b7:a5:ac:3c:f1:e5:66:87:93:31:14:07:
                    81:e0:36:10:81:15:20:e3:ce:84:a6:a7:bc:b7:65:
                    d0:1d:29:73:e1:af:49:4c:9c:39:d6:31:26:29:c4:
                    58:fd:b1:75:ff:b5:dc:9c:49:8c:3d:a5:8b:0e:cc:
                    2f:fd:c8:a4:95:4b:95:f4:d0:bb:b5:69:4d:c2:24:
                    6b:3e:56:79:5e:f4:85:13:1b:35:3a:5d:1c:73:64:
                    02:ef:b3:13:8b:80:56:8d:b0:ca:5a:be:7a:e4:fc:
                    83:54:64:fc:4c:57:19:d3:3a:5b:5b:09:07:c7:45:
                    4e:60:28:d5:9f:ce:f9:3d:bc:50:fb:76:e6:7f:23:
                    68:96:87:93:b4:89:81:1f:da:55:16:06:77:38:36:
                    ee:23:a3:44:79:89:69:96:9c:e2:e4:af:07:4e:ce:
                    dc:42:12:ef:2f:ce:9e:8e:77:06:1b:49:74:c2:de:
                    43:32:2e:20:50:1b:10:0d:e6:19:a5:21:23:b7:52:
                    1b:e6:0f:28:e7:24:d1:be:21:f9:80:9e:eb:b8:38:
                    01:0a:fd:04:4c:f4:dc:80:55:cf:04:d4:99:78:3f:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:13:16:C6:10:F7:FE:A9:2C:95:AB:F8:0F:7C:5B:4C:2A:3E:9E
            X509v3 Authority Key Identifier:
                keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:aa:73:93:c6:bd:51:a2:9a:71:fb:ff:51:cf:56:dc:31:
         eb:a1:f2:dd:07:b2:66:d5:23:7e:6a:53:1a:d3:68:32:1e:3d:
         69:83:76:6a:9f:e0:ca:cf:c1:88:62:c7:cd:08:61:41:19:61:
         4a:c3:93:80:9c:94:99:ae:e9:11:20:78:1b:b2:df:12:72:a8:
         c2:1a:55:c4:e3:3e:f3:4f:2d:83:41:f7:4d:8f:11:46:c7:16:
         00:6f:22:4e:94:c1:c8:f2:7a:af:a8:07:58:64:83:6f:84:bd:
         c9:3a:eb:22:8b:c2:01:c6:af:b4:32:bb:8c:59:0c:62:cd:93:
         ee:2f:a5:bf:93:17:84:9c:72:45:e3:c1:52:09:a5:f1:55:d3:
         ad:98:51:50:1e:da:9c:d8:10:9a:5e:db:a2:f0:d6:a4:f0:a0:
         01:af:50:5f:7d:5c:3e:47:64:e9:39:c0:e5:e6:52:0c:41:29:
         ee:08:25:2c:6b:8d:9d:71:43:cd:29:fc:35:8c:92:fe:2e:c0:
         ba:1f:27:bc:f0:26:24:a9:47:c9:01:2a:cf:e4:a5:b3:e8:cc:
         a3:95:20:9c:22:64:07:2e:29:ad:f8:01:a1:ad:82:82:99:d1:
         12:8b:e1:e6:1d:b3:b0:d3:42:57:1a:9e:1a:21:35:18:db:b4:
         ba:70:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:47 2026 by rpki-client