Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          dda0bHeHohcwrwiOuLgzFeupbCLiMPt8Gy9sFgz3O4M=
Subject key identifier:   3A:A9:E9:4E:33:F0:45:A3:73:E9:0D:63:6F:B5:29:9A:2C:11:69:2D
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       019D2772806E01812AEA80595CD2D22F3375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          0927
Signing time:             Thu 26 Mar 2026 00:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:48 +0000
Files and hashes:         1: 5Rn1RAOss5QRo2nXIX6C-Rbfd9o.roa (hash: FiZwjSG8YgcEqrITJJIdRm7Vzqa1sJ3XlnJTDKYCv2g=)
                          2: KGtAb2AW0M0YASRqB3QhsbsdLzI.roa (hash: qiwS5fFaCXqMzeOtWduxw1//aM7SqgaRPEME58iPEIM=)
                          3: ZsX0X8j83nFRfqZL9IrfnwTMxLg.roa (hash: X4nHEceCDxp75N1VWD8XfrlsC2PNim++24YcWl4Dids=)
                          4: kvIzttk50ypIvqgfMfZSFIXct9U.roa (hash: CPJdiTd4yiPmDnbfp5PHDpiZmVQZeyBl1ypSYm3eBYc=)
                          5: mdkFOAwMWkblGp-2mwbEq419z_I.roa (hash: CE2MgK18UC9X5aZF3fSj7NZCbOTDD1izqKPMKawtpc4=)
                          6: oBn8NIdRfMZZpm_iynqTQu6nc38.roa (hash: D3Bz4QySZ6wj7xhT4hW/fF4crmIqCiPNU7hJ9/zZtR4=)
                          7: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: n4G+VUjVRqQrkgfkgl1Moqv0nAObJo2F1BcD+k6Lqe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:80:6e:01:81:2a:ea:80:59:5c:d2:d2:2f:33:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: Mar 26 00:01:48 2026 GMT
            Not After : Mar 27 00:01:48 2026 GMT
        Subject: CN=3aa9e94e33f045a373e90d636fb5299a2c11692d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:69:62:cc:17:ef:8b:b6:ae:0a:ba:5e:60:
                    f5:4f:7d:26:d9:45:37:fb:58:80:51:80:cd:a0:97:
                    7f:92:73:bc:3a:50:55:d8:3f:45:27:79:d5:52:15:
                    8b:2b:11:8e:54:e4:22:1b:38:95:96:5d:c8:ca:ce:
                    87:bd:e4:9b:db:75:4a:9d:f5:55:ec:59:a5:2d:04:
                    a1:49:18:49:ed:2b:3f:a5:e2:c2:b6:7a:2d:12:79:
                    97:bb:06:76:e4:ad:0e:e0:b0:ad:42:6d:a7:2b:76:
                    7a:fd:35:85:c7:6e:80:39:61:7e:13:9f:83:87:c6:
                    16:da:4f:bd:f5:17:ea:c9:5a:0a:8d:4e:75:a8:67:
                    42:c3:72:66:f3:af:47:8a:71:01:2e:f6:7c:ad:a5:
                    77:c6:21:27:ba:3b:6a:55:5b:d7:34:52:ce:80:87:
                    ba:03:1b:ad:3a:cd:ad:c8:6a:5b:71:d1:a8:a4:78:
                    f5:52:00:08:59:bd:f4:05:c5:a9:80:85:11:b0:33:
                    ba:7f:95:2e:40:80:80:63:fa:af:b3:52:00:8a:d2:
                    d1:f8:ba:f3:3f:fe:dd:2c:48:ee:88:23:e0:95:fd:
                    83:2a:03:34:0a:0f:d5:75:bc:39:75:74:24:03:8f:
                    b0:95:c5:55:fc:8d:9b:ec:71:42:ba:36:d1:31:fd:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A9:E9:4E:33:F0:45:A3:73:E9:0D:63:6F:B5:29:9A:2C:11:69:2D
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:39:a9:dc:20:76:47:6c:76:81:b8:6a:71:93:ab:4c:f5:50:
         5d:26:48:d3:38:aa:e9:c3:90:db:a8:f7:d4:e6:52:d0:39:75:
         33:7a:31:b0:db:c2:a6:c1:1c:be:f4:ad:17:b5:da:6a:be:81:
         8a:c3:40:ba:29:3a:67:fc:04:1b:66:44:17:fa:55:48:78:c6:
         82:5f:23:9f:3d:e0:32:a7:b1:72:8a:88:55:26:76:02:04:5d:
         90:c9:a8:53:8b:ed:1d:a7:7b:45:19:2d:ff:52:17:35:dc:cb:
         58:0f:80:3c:51:40:89:b5:33:da:55:d0:64:5e:87:88:84:8b:
         a2:a9:cd:c6:06:d7:4d:52:bf:d6:61:5c:32:8f:58:bf:77:d2:
         65:0b:18:e2:6c:00:e8:93:d3:17:de:20:25:19:b8:f7:5b:07:
         62:b0:49:00:77:1c:7d:66:c1:8f:35:62:2c:43:9b:53:3b:73:
         a9:b3:b5:7e:68:7d:f9:9a:a2:57:86:fd:da:17:5c:a6:95:77:
         4e:ed:e7:7c:12:df:fb:52:2d:c2:51:04:59:7a:0a:42:b8:98:
         67:00:ad:08:fb:51:6d:e3:31:f5:79:e5:f4:0e:cf:46:4c:83:
         6c:13:54:27:23:82:79:49:0f:89:16:08:89:1d:27:9d:99:31:
         04:b4:82:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:01 2026 by rpki-client