Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          oFJHpMavcQ44w2hCXqsq9XL81aC9UxPkw2oJX+9NK9k=
Subject key identifier:   DC:DC:B8:3F:70:0C:6D:4A:51:D9:F7:E0:EA:AB:F7:AC:F3:52:C9:88
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       019D2816A487BEC33DCA814E72B42CD4894B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 03:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:05 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: ja2DE/M84xGLu2nClpUyltExyfvYK3BxYltA7y1pBIc=)
                          2: SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa (hash: qBOkD1BZLnNRkElqmAEiwmS3WVpC4bigU1naLXiimqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:a4:87:be:c3:3d:ca:81:4e:72:b4:2c:d4:89:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: Mar 26 03:01:05 2026 GMT
            Not After : Mar 27 03:01:05 2026 GMT
        Subject: CN=dcdcb83f700c6d4a51d9f7e0eaabf7acf352c988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:f0:f3:c3:1a:3a:02:7f:bd:df:43:28:61:
                    48:57:52:e5:37:f5:da:f8:06:a4:55:3c:ce:a4:bd:
                    72:e1:e4:f9:b8:3e:8e:97:6e:5b:02:a5:50:88:7c:
                    a6:97:62:c9:ed:f2:4d:eb:13:ce:f4:d5:b1:48:72:
                    73:ec:a5:49:6d:a8:cf:11:5b:3d:cb:ec:33:1d:91:
                    46:8a:5b:fe:28:d3:8f:73:40:a0:9a:f2:aa:b0:d3:
                    3d:c5:0e:00:4a:03:fa:4d:9d:5e:ae:5e:22:e7:8a:
                    97:c3:c6:51:66:3d:f9:fd:ab:9c:bd:cc:77:d1:a2:
                    39:ba:c8:72:4b:81:46:1d:11:81:7e:a0:fc:44:23:
                    ac:4e:ab:33:5c:b3:51:c9:f4:13:16:31:a7:a7:fe:
                    30:97:32:27:93:d6:6a:9d:74:d2:44:89:03:47:23:
                    e6:32:ec:cb:aa:d1:63:bd:e5:f3:4b:2e:52:3a:93:
                    89:ad:de:49:19:f7:a0:ea:de:0f:dc:7e:1e:aa:9c:
                    75:3b:87:d0:b6:92:13:8d:6d:bb:86:8a:74:30:f6:
                    d2:77:45:22:ae:98:6c:03:e5:e7:4d:51:f3:74:01:
                    3d:68:fb:32:31:99:a3:01:3a:f3:47:3a:f2:40:0f:
                    f4:d8:f1:48:46:fd:6a:5e:20:d1:ef:a2:64:be:35:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DC:B8:3F:70:0C:6D:4A:51:D9:F7:E0:EA:AB:F7:AC:F3:52:C9:88
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6a:74:25:f0:14:eb:c4:4c:af:f2:3e:62:ae:de:31:03:4d:
         3a:eb:8e:01:30:c8:a7:46:e6:3a:97:f7:5d:1e:9d:17:bc:33:
         c0:14:d8:b3:1c:93:c8:c9:55:9c:1c:ec:90:5d:3c:d8:e0:8c:
         2a:14:92:4c:20:8b:ce:5c:81:02:30:a2:13:93:14:32:f6:dc:
         fe:5c:b6:6a:6d:ab:84:e3:3b:5e:c2:33:81:89:65:95:9f:c1:
         bd:f8:30:f6:e3:6f:ad:e0:f0:ed:3b:37:ad:bc:6f:e2:23:f9:
         f1:6e:ad:8f:f1:a1:f9:9f:b7:35:d1:1a:46:34:40:2d:bc:9d:
         73:2d:4d:63:1f:05:01:e5:28:d3:a6:a1:54:9c:39:53:3f:30:
         24:d3:b3:b3:01:5a:3c:2f:97:3d:6b:e8:05:0a:cd:ea:19:ad:
         ea:34:8d:53:8e:ca:26:b7:01:ec:c4:7b:ff:a7:fa:dd:8b:0a:
         b5:61:40:d4:63:ff:69:c3:3e:80:9d:23:77:bd:b4:b1:c1:1b:
         79:bc:37:55:91:c1:e7:19:64:2d:fb:d9:d8:18:8e:e8:e6:a4:
         51:bf:42:11:22:51:9b:96:06:4e:9f:da:3c:34:58:db:c9:89:
         47:50:80:a2:bb:02:d5:2e:6a:a1:2d:76:b3:22:2d:0a:80:9f:
         85:dc:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:15 2026 by rpki-client