Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File:                     UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier:          1BcWEcOZKCw8Nbqyptv2gK8Ot/PHM9j+ilMNI7HLSaQ=
Subject key identifier:   D1:16:34:B9:77:5C:DE:80:85:EE:23:97:7A:15:FB:D3:F8:06:A5:66
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer:       /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial:       019D2771CAD3D9B08F4EDBE1DF29E52E8A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 00:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:02 +0000
Files and hashes:         1: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: 1tA/jheAdyopZVGPytW7rX0xPxfGbKaKfO36MwFi2zI=)
                          2: X1sqaOrwTlRea4PTO-bEVyyZxO4.roa (hash: 4Hp7TjPy2qpQAZmmlctfISCQD880xKjDbZIgwRkmGhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:ca:d3:d9:b0:8f:4e:db:e1:df:29:e5:2e:8a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
        Validity
            Not Before: Mar 26 00:01:02 2026 GMT
            Not After : Mar 27 00:01:02 2026 GMT
        Subject: CN=d11634b9775cde8085ee23977a15fbd3f806a566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:36:90:44:7f:2d:04:d8:2e:6b:d0:a3:ec:
                    09:e9:4c:d5:62:cb:5b:63:33:3e:bb:2f:cc:7c:6a:
                    df:fe:90:69:f9:c9:fb:a6:ed:0b:1e:4d:60:24:66:
                    f7:2b:ec:f2:17:aa:4a:a2:37:b0:80:d7:53:8e:b4:
                    79:1c:35:f9:42:07:ad:1d:ee:21:40:9c:e3:73:4a:
                    74:a9:f4:cc:17:cf:5f:5b:7a:b3:e2:54:7d:4a:b4:
                    b2:e6:90:e0:64:d0:8f:26:b5:e2:83:de:98:db:1f:
                    31:24:4a:cc:20:6a:1e:ae:15:ef:ae:69:d8:5f:3f:
                    76:9c:80:33:11:7d:ef:9a:81:4d:0f:63:7c:06:99:
                    c9:6a:99:45:7f:f9:78:9e:6a:a2:44:3a:f7:5a:66:
                    21:fb:9b:7b:2e:3b:d4:3b:09:5e:75:01:8a:f0:b2:
                    04:81:55:6e:4c:1c:de:b7:ee:18:0e:25:23:3d:e7:
                    ad:2b:7e:c8:dd:4c:42:74:0e:86:4a:28:f0:7f:f1:
                    2b:a1:17:16:b9:42:cc:3c:b3:2d:d7:bd:52:8d:ab:
                    b4:86:de:03:ea:9e:80:ec:80:62:2c:24:76:a0:7c:
                    9a:be:bf:6b:f2:3d:2c:1e:a1:2b:ec:b7:b3:4a:fe:
                    ef:98:67:50:5d:25:bf:93:c7:e6:52:7f:4f:07:7c:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:16:34:B9:77:5C:DE:80:85:EE:23:97:7A:15:FB:D3:F8:06:A5:66
            X509v3 Authority Key Identifier:
                keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:82:82:74:e0:81:44:1f:2b:27:11:36:bb:28:b4:a4:9d:43:
         82:b5:08:a9:29:9b:49:dc:61:21:36:a4:c8:83:ed:4e:10:6a:
         00:47:12:17:7b:2e:2a:85:5a:80:ec:f7:46:02:c0:d2:bf:43:
         c7:01:95:87:f0:3f:3b:19:82:cd:72:6c:74:a1:5f:7e:91:b1:
         3f:2d:44:c2:19:a1:0e:92:8f:79:ac:7c:0a:5b:7a:d6:2d:c1:
         f2:a5:ee:64:86:c9:a6:38:16:b0:8d:d5:e6:b4:b9:b8:19:a4:
         f4:ef:08:ab:c5:51:ab:88:5d:5b:1e:db:9e:43:6f:1f:4f:41:
         45:af:9f:dd:29:8c:8a:38:ca:5d:fd:12:e4:d8:5e:9b:a0:60:
         2c:a1:99:e9:d5:92:15:05:56:c5:d2:6b:bd:58:04:51:20:c4:
         74:15:96:97:f6:c7:65:d0:d5:a4:f2:e2:eb:1b:dd:d0:1e:9f:
         08:63:35:e8:0e:16:d5:20:7f:6a:56:e9:8f:6c:dd:c0:4b:77:
         84:36:90:3b:70:70:17:ab:c9:f2:2f:d3:1b:08:5b:17:31:d4:
         b9:9d:12:48:13:f2:2c:98:1e:a1:2a:07:7c:56:f1:33:0e:c2:
         5c:3f:15:27:54:9c:8e:71:87:e0:17:3b:9a:df:d0:04:ff:25:
         2d:bf:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:16 2026 by rpki-client