Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
File:                     95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json)
Hash identifier:          AatOmb9fWcaymESiTu5Xib02Eip7Tmf4F6Lk8x6UBSY=
Subject key identifier:   E7:1C:C2:9D:FE:73:A8:D4:BF:E6:47:06:B0:97:2B:21:68:E5:93:B9
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Certificate issuer:       /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial:       019D2816E168A72320ACC05962F3AD192ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:21 +0000
Files and hashes:         1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: NGx2/QwwFg0mZ12kby/Bnq+ZeUwzVIbFhTfuXrlPvZI=)
                          2: wcTBVnf35_NIZbe8iI9wOnq94MM.roa (hash: cNxB2jzcwkyyFD+d0tJNZcO3QM57Dig2ypBOPVIdUQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:e1:68:a7:23:20:ac:c0:59:62:f3:ad:19:2a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
        Validity
            Not Before: Mar 26 03:01:21 2026 GMT
            Not After : Mar 27 03:01:21 2026 GMT
        Subject: CN=e71cc29dfe73a8d4bfe64706b0972b2168e593b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:ef:0f:5e:41:57:18:3f:3b:0b:b0:ee:6a:
                    9a:9a:65:5f:6a:99:9a:ae:20:25:8d:a2:6f:9a:4a:
                    44:71:41:2c:60:e7:e7:f4:8c:eb:3a:3a:99:d2:4b:
                    bf:11:cd:9a:1b:f0:72:00:d9:fd:7e:29:a1:fb:dd:
                    53:b1:b2:1b:59:8b:2c:f0:e0:ee:84:a4:2c:25:1e:
                    06:0c:9c:bd:f8:ec:42:ff:0e:b9:8b:1e:71:16:32:
                    51:aa:08:c5:2b:8b:5c:5d:a1:d1:05:fb:58:cd:f1:
                    8b:62:ae:25:48:f4:83:a9:d3:e3:0c:0d:a1:ad:9a:
                    5a:52:2d:f8:9c:b0:a9:dd:fd:46:ef:02:95:a2:e9:
                    50:b9:d1:eb:bc:ee:b8:e3:6c:d5:8e:a7:08:f1:b7:
                    ef:ad:b0:f1:cb:a6:d9:c1:af:4f:70:a1:05:7b:50:
                    37:91:69:f5:d9:39:92:16:a0:40:c9:a4:c0:46:9e:
                    dc:b7:12:2c:9f:a4:1b:5e:fe:1b:74:80:9e:87:aa:
                    97:9e:8c:88:b5:8b:47:f1:d9:39:4e:33:03:f3:1f:
                    eb:2b:4f:a2:99:07:c1:7a:a1:b6:60:28:ab:a0:15:
                    1f:8f:08:f9:2a:05:78:5b:0b:07:31:07:f7:71:4c:
                    8d:ea:11:46:73:23:3e:58:83:ad:53:4c:e9:cb:5a:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1C:C2:9D:FE:73:A8:D4:BF:E6:47:06:B0:97:2B:21:68:E5:93:B9
            X509v3 Authority Key Identifier:
                keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0d:97:7c:5c:f7:46:7e:12:7f:26:92:7d:20:c1:b1:a9:56:
         86:ba:0b:4f:02:f3:26:67:c0:83:dd:b0:49:b9:20:12:d6:fd:
         f3:20:45:7f:04:d2:3c:4d:ae:aa:80:ab:dd:2f:03:3e:b4:33:
         96:e1:fd:55:3a:d8:47:71:da:ac:bc:d3:4d:a9:74:4f:f2:a2:
         48:80:0f:77:f9:87:5a:82:39:da:ba:d7:35:bb:8b:0f:64:e9:
         fd:3f:ae:fe:5f:bb:39:c8:07:17:1a:76:cf:ac:a6:1b:fc:25:
         a0:2b:90:de:62:4e:41:d8:76:86:b8:e5:3e:ef:d7:f7:e7:60:
         b4:e3:b3:2d:36:c1:a8:c2:5f:fa:e6:f5:0d:ba:bf:c3:02:1a:
         fc:1a:0b:78:d7:2c:c1:b8:6e:13:5a:35:e6:ea:c2:9f:44:fb:
         cb:74:92:dd:30:42:0a:36:53:2b:7e:8e:7b:f7:bf:a9:fe:2e:
         ec:81:2a:79:ed:e1:0c:6a:76:1c:40:24:74:4c:45:29:81:f8:
         69:a6:1e:19:f9:57:7f:88:2d:6d:cd:f0:a3:b8:3f:57:41:b2:
         08:d2:b8:b2:15:eb:90:2e:8f:8f:95:29:12:1b:7c:40:5c:d5:
         14:3d:0e:47:2b:05:7c:98:da:fd:8f:ab:d9:5e:41:af:7f:42:
         d2:d6:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:08 2026 by rpki-client