Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
File:                     79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json)
Hash identifier:          CCa4rsuoOIFdZ/a9PjebxsP3HhVAVSVkAJlxd/ktKOg=
Subject key identifier:   48:B1:47:E3:97:13:9F:6A:EF:A6:24:72:24:12:06:57:93:DE:60:42
Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69
Certificate issuer:       /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
Certificate serial:       019D31F5994BC8D65D37F1E7AEC8377592B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
Manifest number:          188D
Signing time:             Sat 28 Mar 2026 01:01:12 +0000
Manifest this update:     Sat 28 Mar 2026 01:01:12 +0000
Manifest next update:     Sun 29 Mar 2026 01:01:12 +0000
Files and hashes:         1: 5q8b-mFBKEi7KxA-qotiTf_Ngcs.roa (hash: UP1Aef3+F12caRUYXmTS+aJsJJVlKeAHOy7RJvD6MyQ=)
                          2: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: HTDXTIF26EwNtSXIRXaRBAKTckDvSoCeqY2TAEr8Z3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:f5:99:4b:c8:d6:5d:37:f1:e7:ae:c8:37:75:92:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
        Validity
            Not Before: Mar 28 01:01:12 2026 GMT
            Not After : Mar 29 01:01:12 2026 GMT
        Subject: CN=48b147e397139f6aefa624722412065793de6042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:59:e5:4a:f2:e0:5a:9d:b8:cd:41:d2:18:
                    61:44:ae:ce:06:c8:f4:1b:c8:f4:55:29:0b:b1:d0:
                    be:c8:63:89:aa:0a:51:7c:6a:79:21:97:ea:c5:ea:
                    9c:0f:e2:3b:fc:c7:1d:12:0c:cb:75:51:c2:ee:45:
                    d0:60:90:26:49:70:8b:60:a5:3e:81:01:fd:d5:eb:
                    80:ef:d6:e4:75:08:1c:08:aa:52:56:8c:b5:29:5a:
                    67:75:03:f4:be:76:df:1c:b3:27:e1:9c:89:6a:77:
                    0c:ad:bd:1f:56:e9:07:8e:d3:cd:fe:4c:30:2f:ec:
                    07:35:7f:e6:c3:f1:d7:6e:8e:4b:de:aa:f0:0b:0d:
                    8b:ad:c1:94:f4:e9:71:bd:96:7c:d7:f8:0a:bd:ae:
                    1d:91:8e:64:81:00:dc:dd:28:06:69:18:56:51:ac:
                    4c:ef:00:b2:5b:71:f7:27:d7:f0:57:cf:f4:bf:3c:
                    ee:22:6f:1b:f2:e9:5e:a7:b9:a3:93:7b:46:5d:1b:
                    c8:0f:cf:f2:33:d1:b7:da:f9:84:97:3a:2f:c2:a9:
                    3e:bf:b1:3c:03:80:3f:6d:53:ec:e0:48:db:0e:fb:
                    a2:f8:d0:5d:c9:4a:68:eb:88:99:dd:c9:b8:7c:da:
                    31:55:dd:1f:b9:a5:47:b8:15:3f:81:cf:9d:72:27:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B1:47:E3:97:13:9F:6A:EF:A6:24:72:24:12:06:57:93:DE:60:42
            X509v3 Authority Key Identifier:
                keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:1f:4d:a5:e4:27:80:12:6a:f7:81:48:9c:96:ff:5b:a7:
         32:69:dd:18:87:bc:fd:7e:d1:8e:f9:88:b5:bf:fe:b5:a6:f5:
         4f:af:49:28:36:56:7f:f5:ac:21:22:3c:1f:c8:c0:32:81:ec:
         46:6e:46:30:7f:a3:a8:a2:4a:04:49:67:c7:f6:3b:86:5a:6c:
         aa:fd:74:77:30:1a:e4:5f:20:dd:0f:d4:21:97:11:76:b3:16:
         1a:63:9f:db:d5:56:0b:3a:da:b8:65:1b:ab:74:c1:d0:78:9d:
         f9:46:4b:c4:9a:2d:be:e4:9a:1a:01:07:77:cc:03:7e:4a:eb:
         c0:bd:ce:30:cb:f2:ce:c9:d1:ca:2f:ba:90:cd:64:ba:f7:cb:
         fb:36:94:d7:06:df:3c:75:d1:d4:c6:08:a2:0b:35:2f:b5:72:
         23:50:34:3f:17:87:44:9a:15:b3:ed:9d:a8:d4:60:75:7d:9d:
         84:c3:16:c4:68:f4:50:8d:b8:56:5e:5c:06:0f:ed:ce:47:19:
         64:10:b2:8e:4e:4c:ec:c7:0e:fe:66:46:67:bb:99:5f:83:79:
         a9:a6:d7:7e:10:a4:72:65:fe:5a:55:63:18:64:9a:9b:ca:c0:
         22:97:b9:13:48:5a:cc:60:54:07:5f:24:21:a1:f5:f3:7d:63:
         ac:b5:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:58 2026 by rpki-client