Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          nYhBcgyKk1vtVuoG45/AW9vL3S8eJjr2k5tuV4LsEI4=
Subject key identifier:   9D:67:CD:96:79:6B:9E:B8:1D:2E:BB:58:8C:8C:F2:99:57:E7:30:40
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       019D27DFC1E102B9885C2A2F444EB409B68A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 02:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:08 +0000
Files and hashes:         1: 99ukKo0G5E-X61ucxhUYzuXviMg.roa (hash: klMpZV7tFP7vNV7veN/nv8e/MQyS41qIS69khsoXMUw=)
                          2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: q3j9bFzuO8UDFuHwNWD+O4FxMixqwU7rXzjLRVDjLqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:c1:e1:02:b9:88:5c:2a:2f:44:4e:b4:09:b6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Mar 26 02:01:08 2026 GMT
            Not After : Mar 27 02:01:08 2026 GMT
        Subject: CN=9d67cd96796b9eb81d2ebb588c8cf29957e73040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:e2:c3:1c:e6:ab:4b:2b:cb:38:65:14:31:
                    f7:e5:98:09:fd:e4:5c:fa:31:6b:01:c6:46:3f:4e:
                    ed:5f:78:b5:d8:6f:02:9a:92:e3:7b:66:62:06:e1:
                    2e:4d:a1:fe:4f:f5:c9:d2:0c:89:04:60:a3:a3:8e:
                    64:fd:64:de:57:af:11:3a:e5:9b:a4:c2:8d:32:9a:
                    ff:ac:a8:90:66:77:0d:88:fe:fa:33:9d:0d:17:c1:
                    84:0b:61:af:35:32:fc:8d:08:32:f7:c0:e0:f6:d0:
                    e6:a6:7c:d4:b5:84:99:46:5a:ae:62:3a:e4:aa:ce:
                    59:4d:b9:d2:84:0d:97:0b:8e:2d:7a:3f:49:59:5a:
                    7a:85:f9:0f:2b:9d:12:a9:8f:37:c2:3f:5c:43:a2:
                    db:ea:ae:8f:5f:7d:1a:75:0d:a7:66:a3:68:f8:b3:
                    73:95:10:79:44:fb:1b:5b:2e:b6:52:f7:59:03:84:
                    87:f7:0b:ea:00:9b:f4:27:f0:43:5d:42:b4:9c:0d:
                    08:10:a4:ed:83:1d:34:61:7f:29:e3:cd:fd:67:6f:
                    62:6f:14:a0:ad:a8:86:17:c9:70:c5:9f:35:cd:df:
                    fc:a2:c9:c5:99:bc:2a:07:b3:72:12:d1:5a:f7:c1:
                    30:8f:3b:ec:c3:ab:e5:1c:67:ae:26:a4:41:c5:55:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:67:CD:96:79:6B:9E:B8:1D:2E:BB:58:8C:8C:F2:99:57:E7:30:40
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bd:13:34:d1:69:6a:3c:19:87:19:4e:6d:c5:63:39:01:d3:
         e4:88:3f:63:f9:d2:19:e1:ee:eb:80:1e:d8:c4:96:aa:66:b3:
         4b:ec:1f:c0:47:56:0f:bf:d7:7e:0f:89:60:99:3b:7d:57:86:
         41:4a:38:3f:b0:0e:12:e7:bf:b9:bb:33:db:b7:a3:42:0c:9b:
         68:71:d0:0c:0f:1f:5e:2a:37:27:9f:23:18:15:e8:bd:c5:11:
         0e:9f:9d:13:25:5c:d0:a4:e8:77:f8:e8:f4:ee:f5:65:14:17:
         9b:2b:73:59:e0:72:a1:42:b6:f4:1f:48:be:79:de:a9:7d:95:
         35:ba:c2:c9:9c:66:b2:e5:f3:99:fe:81:f3:f7:33:d5:08:81:
         7e:d0:b2:2f:a3:ce:f6:be:fe:c3:0a:31:68:d4:43:28:92:af:
         29:43:a8:f4:fb:f3:07:62:c1:47:fd:b8:ac:c3:55:f4:4e:d0:
         e0:69:69:ca:45:fc:76:73:c5:42:92:28:2e:86:64:6c:b1:a5:
         77:f5:fc:65:db:6c:78:3c:f1:fe:56:4a:87:2c:d9:38:9d:28:
         db:81:26:c9:43:93:21:03:3e:d3:c4:b6:d9:71:36:e7:49:17:
         cb:90:e5:77:9e:39:f3:48:36:de:d3:e8:9b:e0:71:de:39:aa:
         ea:3c:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:37 2026 by rpki-client