Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File:                     sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier:          qnKph+75o4PBAdtdABWoEIUplGPRV3RZt2PrcGqaRd8=
Subject key identifier:   B6:3C:6C:5D:44:CB:CA:83:05:4D:33:7E:08:10:72:B7:44:58:77:8E
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer:       /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial:       019D265FB39324CB611E109023F7EEFDCC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:39 +0000
Files and hashes:         1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
                          2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
                          3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
                          4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: //5z4cgI2AkzSN1f6fgohVG6c6l5rRMlXM0k/0G8/eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:b3:93:24:cb:61:1e:10:90:23:f7:ee:fd:cc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
        Validity
            Not Before: Mar 25 19:01:39 2026 GMT
            Not After : Mar 26 19:01:39 2026 GMT
        Subject: CN=b63c6c5d44cbca83054d337e081072b74458778e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:a3:7f:63:c4:21:08:b0:79:57:4a:aa:fd:
                    eb:78:99:be:01:7b:eb:12:cd:2d:12:1b:f4:3b:b0:
                    a9:49:b5:91:8d:83:5a:21:7b:f7:c8:44:47:15:b6:
                    64:29:b8:bc:9e:0d:2d:61:18:0e:aa:49:9d:a4:f0:
                    33:e1:f2:b3:9a:ec:84:4f:8e:3d:e3:37:7c:f5:22:
                    b5:ef:d5:ab:6d:8b:7c:9c:3d:53:62:14:af:57:29:
                    2f:23:dc:dc:02:30:56:e5:fb:0b:a6:5e:ba:93:5a:
                    74:c2:2b:ad:cc:cb:03:34:12:11:3c:bf:ab:a0:30:
                    67:d8:d5:fe:cb:11:ab:4d:b7:69:24:8d:61:84:7f:
                    55:6e:56:18:2c:1d:2c:07:25:0a:05:51:8a:f9:54:
                    e2:ad:c8:02:db:c7:30:2a:b2:b3:95:66:1a:26:d0:
                    4a:ec:44:a7:fa:58:ca:ca:0f:9b:2d:e9:1f:d4:46:
                    a2:3e:3e:30:42:ad:14:33:7c:3c:a5:0b:74:df:dd:
                    c3:4a:52:0f:af:50:48:4c:03:b9:26:7b:8e:e2:44:
                    d2:b1:36:8a:96:fa:5a:74:60:4f:14:a0:ec:44:cc:
                    0e:7f:5a:03:74:1a:d7:16:13:28:be:a3:15:9e:be:
                    75:31:dd:83:7e:40:7f:44:c2:5d:20:5d:51:38:d6:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:6C:5D:44:CB:CA:83:05:4D:33:7E:08:10:72:B7:44:58:77:8E
            X509v3 Authority Key Identifier:
                keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:c4:f3:2c:51:ff:33:49:10:6c:49:dd:99:d6:ac:e2:84:
         b8:9b:4b:18:9e:b1:f1:97:74:11:37:ef:1e:db:fe:e1:53:a8:
         9e:83:9d:eb:8d:22:85:2c:d3:58:a6:cd:da:6a:22:1f:5d:02:
         41:d4:67:ef:e3:34:8d:03:48:a5:d4:a2:85:84:a4:b9:af:e8:
         fb:95:dd:2a:07:da:b7:49:a4:03:30:9b:e1:54:eb:b4:d9:b5:
         36:aa:07:21:dd:b7:9f:2a:55:63:c2:26:0e:39:7e:46:25:4b:
         93:eb:17:74:74:98:27:15:8d:18:7a:e5:ef:94:a5:a9:48:5c:
         f1:0c:ba:a8:eb:19:39:b7:8d:09:6a:92:0e:a9:60:a6:c9:ac:
         e1:fd:f5:aa:8f:d9:9f:05:8f:ce:3c:37:93:54:bc:ae:1b:9f:
         f1:3f:3f:73:cf:6e:2d:30:d3:18:ad:5e:ab:8f:3d:e0:59:fd:
         54:29:80:72:3c:4e:cf:7f:ab:a1:ba:ef:22:7e:fa:3b:4d:9e:
         2c:9f:6f:70:3a:97:33:5d:9c:ab:2b:a0:3f:17:0e:ae:2a:f5:
         70:19:ae:10:e8:70:08:1e:02:52:91:dc:40:b7:b1:90:9e:54:
         03:40:12:e8:33:68:2e:77:73:7c:c0:59:fa:ba:35:39:89:c9:
         4d:90:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:46 2026 by rpki-client