Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          uKonLgq/7Ip7EqvkoEP5LnlgP9ToLfTqSldIzlCIxTA=
Subject key identifier:   FC:0A:8B:A0:22:4A:CE:70:F6:FD:AC:2E:45:ED:DD:5E:0C:06:28:2E
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       019D292926690806662C258FE913D4EA7904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 08:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:55 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: lAukBetf2HZTe3P67LfySXKCYNUvnZQB3YUBdoA8syo=)
                          2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:26:69:08:06:66:2c:25:8f:e9:13:d4:ea:79:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: Mar 26 08:00:55 2026 GMT
            Not After : Mar 27 08:00:55 2026 GMT
        Subject: CN=fc0a8ba0224ace70f6fdac2e45eddd5e0c06282e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:63:ea:15:2f:04:40:3d:0a:6e:b9:be:2d:
                    44:a5:b0:63:31:dd:68:88:81:ee:bd:ac:58:51:1d:
                    84:cf:cf:92:dd:f0:87:21:7b:d3:a6:a3:e6:20:7a:
                    3d:f6:45:eb:1a:3f:77:3e:8f:33:90:be:63:c8:1c:
                    d1:21:b6:7f:8a:8a:07:66:45:16:64:64:50:22:bb:
                    c7:9b:e6:6b:b2:7d:8f:52:33:00:e0:a5:1a:69:76:
                    a6:b6:3c:3d:be:06:d0:85:96:ba:b7:7e:7c:73:d2:
                    bc:e8:3c:20:d8:a0:ae:58:72:62:96:6d:8a:f0:9c:
                    0c:8c:3c:b0:16:2f:2a:91:69:5a:25:c5:65:82:45:
                    af:29:88:bc:49:2e:64:53:ec:cc:43:20:85:dc:72:
                    8a:17:e8:00:fd:52:f3:ed:e6:8b:8b:14:eb:dd:34:
                    28:8c:25:4e:31:d2:53:17:81:37:8a:83:e4:3e:d1:
                    62:58:a0:27:e9:37:04:41:da:5a:17:20:e5:43:28:
                    67:87:85:eb:ef:c9:f2:06:37:82:0f:bd:2b:fd:11:
                    42:ad:ac:c6:e5:c5:91:97:fa:14:07:4d:24:0f:81:
                    19:65:bf:05:9f:e2:45:b1:19:0a:4e:82:a4:32:a2:
                    b8:46:f9:6e:75:7c:c3:4a:19:06:a1:de:a4:ae:32:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:8B:A0:22:4A:CE:70:F6:FD:AC:2E:45:ED:DD:5E:0C:06:28:2E
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:13:8b:ae:27:cc:c9:ec:37:44:41:90:f0:e5:de:b7:6a:
         7c:7f:ab:76:38:f4:fc:42:7b:1d:5d:6f:91:ce:10:49:59:85:
         f9:c2:3d:7c:1d:83:ba:32:02:55:bb:fb:e8:c0:fc:39:46:b4:
         ce:3b:eb:b9:23:cf:78:3f:39:24:98:29:bf:48:09:17:0e:ce:
         24:84:0c:44:61:c9:4b:11:37:71:cb:a9:aa:ee:9d:2a:dd:e7:
         11:bc:1d:bd:68:b8:80:01:b3:56:81:a9:ad:f1:04:9a:e5:60:
         13:d5:dd:40:1f:7d:37:79:51:2c:c4:48:9b:56:11:ce:5b:1c:
         3b:c8:69:14:19:c3:a5:6d:26:f2:33:65:92:a7:8b:84:5e:4a:
         60:88:f3:97:35:41:a6:2c:e7:d7:d2:be:f7:45:dc:34:53:34:
         f7:7f:78:37:2c:12:95:22:2c:fd:2f:77:69:5c:6b:2a:e2:98:
         78:95:0b:72:3b:fe:d1:a3:b6:6f:28:2b:02:32:e4:8f:0d:fe:
         b3:77:4a:31:fe:b5:6a:00:b4:52:18:87:4c:a2:dd:79:a4:25:
         40:c3:0b:d4:f9:d6:13:46:30:39:4e:cd:d2:b7:bf:a6:c3:4e:
         3f:54:ce:52:06:cb:4b:ba:02:76:44:6c:da:46:05:1d:d0:62:
         99:6f:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:26 2026 by rpki-client