Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File:                     xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier:          e37kPyPMZrskcVlvZQ5T8TwigFJHBCk5UinWBfwTuOY=
Subject key identifier:   99:C6:18:CD:C0:52:49:82:12:2A:DD:B9:7A:8E:28:A1:DA:7D:03:40
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer:       /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial:       019D25BAD5215E558F6C5F7F77A93A006ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number:          1481
Signing time:             Wed 25 Mar 2026 16:01:34 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:34 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:34 +0000
Files and hashes:         1: k6Kk-SSfPt5X64syTmG4cY1i-K0.roa (hash: CudYTrmTazmdAPM102kIxAqGfFrQWQy3gnFrCAxwveE=)
                          2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: 6BYN6fuaJAw/NzOjEDScZsoHIdNeal4BkS4rvTSqprA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:d5:21:5e:55:8f:6c:5f:7f:77:a9:3a:00:6e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
        Validity
            Not Before: Mar 25 16:01:34 2026 GMT
            Not After : Mar 26 16:01:34 2026 GMT
        Subject: CN=99c618cdc0524982122addb97a8e28a1da7d0340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:40:5a:9d:13:02:5a:2b:e7:53:70:93:b2:
                    59:f1:92:23:b1:8c:35:aa:6d:79:a8:67:8a:da:5d:
                    ab:8d:c9:cb:df:67:a5:4f:57:3c:c5:d6:d7:86:3b:
                    59:1a:04:a2:c0:bb:83:20:d1:db:a1:77:96:ee:30:
                    80:e5:d1:45:70:67:6b:51:84:4c:07:fd:bc:f3:e7:
                    da:ed:6e:8b:a8:18:3b:01:cb:f2:8f:d2:03:74:0d:
                    7a:8e:ba:d4:c7:6f:95:72:13:12:9c:1f:94:8d:96:
                    05:7e:da:46:4a:f9:2d:a7:b6:2e:fa:ab:c9:98:4d:
                    9c:c3:a2:71:6a:05:9d:39:4f:10:51:3d:f0:3f:b2:
                    bc:92:0c:1a:00:10:1a:8f:41:c1:66:91:3f:d8:02:
                    7f:31:39:ee:ad:16:1d:67:03:3f:46:ca:c5:60:c7:
                    91:b5:86:31:70:42:15:91:08:82:a0:bf:6d:60:be:
                    31:af:37:c3:11:89:d8:3f:7b:bc:0f:db:55:8b:73:
                    52:40:6d:ac:68:f2:c7:b1:e7:c4:4d:7e:4c:df:c9:
                    79:60:75:41:b9:f8:9d:bf:b1:34:49:91:87:de:78:
                    00:f9:e9:e7:2e:a9:91:90:66:75:aa:e1:79:7c:97:
                    2c:5c:b3:4c:28:10:eb:f5:e6:99:a9:70:b1:4b:59:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:18:CD:C0:52:49:82:12:2A:DD:B9:7A:8E:28:A1:DA:7D:03:40
            X509v3 Authority Key Identifier:
                keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:15:c0:0b:01:00:d1:6b:d5:46:e2:8b:07:87:22:f1:40:30:
         60:47:81:1e:0c:b9:67:ff:48:35:72:4e:f6:cb:cc:16:96:14:
         ee:17:1e:6c:f9:f4:2b:5d:87:55:25:58:2a:34:54:d4:ab:04:
         a8:60:f8:e6:c0:99:b9:9d:12:17:02:ea:10:b6:e6:32:6f:6c:
         ee:69:71:11:8a:25:09:1d:ff:74:de:a5:c9:8c:0c:65:fa:32:
         ea:f5:26:2e:f2:43:2a:96:f2:9c:b9:7e:4c:32:b5:5d:87:84:
         46:f4:f8:80:c1:94:0e:20:4b:45:67:79:e4:c0:5e:86:36:1f:
         5e:f9:9a:23:5f:78:76:29:17:d5:96:48:0c:21:ed:a4:20:73:
         c0:80:f6:65:bf:99:34:fc:34:35:12:7a:d3:7b:6c:76:c4:87:
         15:42:f6:45:28:1f:d2:a2:9a:ac:b1:6f:1e:33:53:50:03:0d:
         61:95:ad:3e:04:66:d7:ce:a8:06:0d:87:65:68:e8:f4:b4:57:
         7d:0f:f5:bb:3a:81:e9:19:68:67:ac:6d:4e:ee:87:15:a8:b9:
         fd:e0:aa:95:50:71:66:b2:96:66:80:9b:48:86:06:0e:03:34:
         71:97:6a:13:26:d0:2b:2a:bb:78:a3:a1:de:16:85:31:33:bc:
         9a:44:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:55 2026 by rpki-client