Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          QJG/o8JcJaopCv5odF+vLVG58cZ99O9IbvzyWS3pCdU=
Subject key identifier:   73:FD:D0:CE:D1:28:0D:88:75:96:0A:D2:93:92:0D:42:62:CA:2A:46
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       019D27725C50657661661B13552F932A1B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 00:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:39 +0000
Files and hashes:         1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: 5aMx4XDZRQj6/c2uhE26auRaGAUF5KAvusNw7XMnSn0=)
                          3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
                          4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
                          5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
                          6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:5c:50:65:76:61:66:1b:13:55:2f:93:2a:1b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Mar 26 00:01:39 2026 GMT
            Not After : Mar 27 00:01:39 2026 GMT
        Subject: CN=73fdd0ced1280d8875960ad293920d4262ca2a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:9f:b5:ef:54:34:99:c6:12:f5:c6:b5:2c:
                    06:91:ac:09:aa:11:2b:33:61:63:7a:bf:bc:06:82:
                    4e:c1:3f:8e:c5:e6:45:5e:a8:72:11:7b:38:cc:8e:
                    e7:b8:35:e8:4d:40:86:6d:1e:07:25:09:c5:a0:7e:
                    cd:2f:2a:60:fe:5a:76:68:d2:08:2a:ce:97:af:53:
                    4a:2e:03:92:d2:26:33:58:98:52:29:e9:47:ab:22:
                    ce:8e:1f:55:cd:6c:31:80:8a:8f:e8:18:16:22:27:
                    57:dd:02:9f:a6:78:00:e3:23:42:cf:1b:06:bf:cb:
                    73:18:a0:ee:bd:eb:5e:e7:7b:e0:3c:8d:c2:19:42:
                    85:26:93:ea:e9:1b:be:bb:4c:af:f0:d7:e7:79:17:
                    f4:bf:20:fc:0a:ff:64:ea:11:37:52:e5:98:93:2d:
                    97:aa:17:8d:d8:dd:d2:3e:c1:95:de:90:02:ce:a8:
                    0c:84:ec:3e:7e:a2:ac:c4:cd:33:c9:2c:66:d4:98:
                    3c:f5:12:40:8f:40:6f:de:c3:5f:10:9e:52:9c:37:
                    7e:e5:66:c7:69:d1:13:1e:92:24:a5:c3:fa:f6:ab:
                    44:6f:9d:60:0a:9e:e5:6c:53:57:6b:8a:21:90:40:
                    88:3b:b7:d2:16:ad:c3:0a:83:44:12:f2:fd:9f:39:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:D0:CE:D1:28:0D:88:75:96:0A:D2:93:92:0D:42:62:CA:2A:46
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:80:37:88:3e:8a:f1:69:96:54:02:c7:08:09:55:dc:48:ef:
         d0:87:f4:c5:60:77:6c:1a:0c:bf:a5:e4:fb:0c:14:ea:43:b8:
         4c:fa:ce:b7:75:e3:f2:17:b0:c4:2f:61:03:c6:dd:84:2f:ef:
         7c:9e:55:4b:95:75:82:af:8b:6d:b7:01:6a:3c:03:e6:e7:1e:
         f3:a9:80:fa:cf:e6:0d:0f:6c:c9:34:12:dd:55:85:92:a5:16:
         68:b0:ea:d6:6b:dd:ba:cc:89:37:b5:d6:13:9e:04:30:ee:b8:
         e3:3e:4a:86:fd:3b:77:b0:4c:b2:60:4f:75:85:66:5b:5c:d2:
         74:8e:67:99:b3:ed:dd:9d:f6:a7:ca:bf:f9:b5:8d:5f:e7:d8:
         82:da:c9:5e:c7:02:3e:09:f9:18:d9:6a:a9:36:4f:47:3b:9c:
         2c:26:aa:6a:fe:41:73:c9:60:e0:9c:4a:fe:81:6d:65:e2:fe:
         e2:e8:f7:09:28:f4:0f:99:2b:67:13:fc:cf:5a:92:32:7c:a4:
         d3:45:88:d5:20:90:9d:4c:00:b5:17:39:d0:d3:f2:e8:e4:ec:
         9c:7d:4f:6d:d2:02:ff:c6:b0:13:13:f9:b7:ef:86:bd:68:43:
         bd:55:6e:37:84:51:f3:c6:72:37:b8:7f:86:51:1c:c9:e7:02:
         48:38:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:47 2026 by rpki-client