Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          cRicOuaR/90qyWC+iXHMEixa4YmjQ/TsuheheQsc4Qs=
Subject key identifier:   38:81:07:49:B7:5E:CC:C4:32:D0:6A:75:D3:51:1B:A6:36:79:F2:AD
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       019D2884AE3403009B68AB8F4C05E7F92CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 05:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:17 +0000
Files and hashes:         1: OwPnXef8wjjPeRu0JL3nBkCM2bI.roa (hash: aVplhHufSEGNMhwKZj/hpZrwjk8V5+AyOwyihQOJg38=)
                          2: fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa (hash: OXn/GJfiGWG/hkB4epjpbpxfqCnDFVPW115sflUVJ1Y=)
                          3: gDn8yWnPB47froobLzWoZSwRoP8.roa (hash: KD1OPiqAq19vYiaSOt3v4Kj3NGUkJ6hVO149U1CJOgI=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: PYqsap2QxZEh++a/R2qE/3tO/O4isXx4n82Ae6HdmK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:ae:34:03:00:9b:68:ab:8f:4c:05:e7:f9:2c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Mar 26 05:01:17 2026 GMT
            Not After : Mar 27 05:01:17 2026 GMT
        Subject: CN=38810749b75eccc432d06a75d3511ba63679f2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:70:6c:8f:69:10:ad:50:f5:56:d2:cc:1b:
                    7f:b8:b3:b4:37:4a:57:d2:65:53:22:9d:86:36:05:
                    e7:9a:0b:bb:49:1c:db:63:f0:cb:a7:4e:12:0d:f2:
                    64:c0:d3:3e:b4:14:0c:2f:dc:f5:3d:f2:73:56:54:
                    79:a3:37:42:22:91:83:f5:4a:7d:61:9d:f2:ee:4f:
                    80:f5:ce:97:2f:3f:3a:2f:5c:a0:b4:17:a8:e1:06:
                    46:83:2b:c3:21:ac:e4:71:43:7f:86:a2:7f:00:87:
                    28:82:23:2c:c6:b8:86:97:95:06:ae:e7:7c:9c:2a:
                    e3:08:45:01:b5:e1:4b:26:7a:ce:35:f6:d5:a6:6e:
                    3c:1b:89:a2:ff:e4:86:47:6c:47:44:b3:5e:bb:68:
                    ad:e1:ab:7e:bb:a1:7d:e6:88:0f:50:10:79:3b:7f:
                    1c:1f:59:37:6d:86:5b:8c:d6:69:ff:86:e6:56:53:
                    2b:1e:3d:e1:0b:e9:56:4c:0e:12:9f:9a:d2:ff:ae:
                    31:05:d4:94:5d:9f:70:af:f4:a9:c1:4c:0b:e9:c5:
                    10:e4:09:21:10:96:41:47:4d:05:89:54:95:6a:4f:
                    89:1e:0d:32:fc:92:c1:b7:c5:dc:90:7c:d5:eb:46:
                    82:43:0b:16:2f:80:50:d4:0c:8a:c2:89:39:0a:83:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:81:07:49:B7:5E:CC:C4:32:D0:6A:75:D3:51:1B:A6:36:79:F2:AD
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:19:4c:ff:96:8d:f1:f9:f8:c4:b5:15:3b:f3:f7:a9:7f:a6:
         08:f0:a5:ce:5f:69:42:50:c7:b0:63:9b:f4:50:75:98:76:3e:
         48:81:96:6f:ed:9e:d7:5b:d3:4b:b5:21:d0:69:69:36:ed:4a:
         5e:07:67:fb:2e:d9:a3:5f:16:2d:3c:5b:f2:35:a8:0d:17:18:
         17:f9:85:1a:dd:bc:0f:bb:97:85:dc:21:b5:7f:33:aa:1a:5a:
         f9:29:7a:a8:24:74:4d:29:34:82:e3:f8:45:93:d4:51:aa:28:
         fd:a3:a1:fa:5f:5a:0e:58:da:a1:90:d5:86:41:cc:1f:06:a8:
         2c:6f:d2:94:40:cf:73:e8:f8:03:f0:ae:73:c6:ec:1d:c9:fe:
         ae:ff:32:b2:49:b9:c0:1b:21:2f:5c:d5:20:d5:6d:ca:0e:a9:
         d5:16:5e:3c:29:13:15:69:fc:f7:61:cb:01:50:c7:bc:59:63:
         e4:b1:b9:7c:72:9e:c9:7a:9a:85:4a:64:e4:33:c4:66:65:d1:
         4d:a4:14:bf:88:4f:eb:2a:0b:dc:71:b7:1b:b5:db:d5:16:c0:
         1f:87:83:bc:c7:83:84:1f:11:b9:88:fd:40:e3:fb:63:c6:ee:
         3a:c0:f0:6e:b7:70:f4:9c:e2:a7:9f:90:c1:27:80:12:1f:d8:
         21:f9:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:29 2026 by rpki-client