Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          STJPF6GJOtjNGj8W9xRUN95J/+D1pECYcAyZmzNXAz8=
Subject key identifier:   BF:ED:2B:CD:EA:52:6E:2D:75:14:E3:B9:F1:EA:4B:92:E6:FE:AD:26
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       019D26CD13D2C07055E4672E15E42CF206E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          17EE
Signing time:             Wed 25 Mar 2026 21:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:07 +0000
Files and hashes:         1: 4dIwW5at7FQWoB7Bcz_6uYRfLtw.roa (hash: mQop19T4ncECxQq+Z6Yf4kaQ7YiJVsFd1/CEXYQ60hs=)
                          2: Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa (hash: Aqw8lxJKzRJWghSFPMzx3T1KZ7+I/RcC+00vjuoBl7w=)
                          3: apMckl_x5LcdR_beZIyAo4rk0Dk.roa (hash: I5Qds8uqRDqOxfiCNxdxJVvfewu9+/A3Y6nbRWgkwZ4=)
                          4: f1RIf1-ORLkFjvrKjvkMFA0HFj8.roa (hash: m0ZpTDHe0Lt8sTEhFdoAdXrigthPb+OHnjraE5/ATto=)
                          5: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: tpSHv8dTrwEOOH1Nop2iGakMSqD+QTic4ivD2/fsL/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:13:d2:c0:70:55:e4:67:2e:15:e4:2c:f2:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Mar 25 21:01:07 2026 GMT
            Not After : Mar 26 21:01:07 2026 GMT
        Subject: CN=bfed2bcdea526e2d7514e3b9f1ea4b92e6fead26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:c5:1e:c6:84:87:f1:84:c3:0a:59:b3:46:
                    e0:3e:ac:99:46:19:69:cf:71:b2:b3:62:fb:aa:bf:
                    15:e7:87:8e:1a:c1:25:f6:22:0b:2f:f8:0e:16:36:
                    e9:2b:28:26:ee:82:86:c9:39:99:35:b5:90:90:39:
                    55:c7:9e:8b:f6:3e:b5:3f:27:b4:b6:13:81:9e:03:
                    2a:72:d6:5a:7d:58:3b:e0:83:44:1c:c3:11:f1:73:
                    de:24:5a:d1:6a:61:db:1c:4a:d2:0f:d6:ff:84:56:
                    ce:7f:06:5f:48:a8:ca:6b:f3:18:b2:40:ef:58:a8:
                    dd:2a:80:c3:03:d1:45:b2:90:db:35:85:ee:ea:a0:
                    31:3f:14:89:81:70:aa:e1:2d:84:04:84:10:72:5e:
                    e4:cc:1a:c3:d3:7d:e0:1a:74:1d:af:b4:3d:40:f8:
                    ee:8e:14:db:ef:e6:1e:f3:e1:36:8f:ca:30:59:af:
                    82:74:fb:54:9b:cc:6e:6e:31:5a:60:8c:d8:72:51:
                    ca:dd:1d:a8:c6:81:35:16:c0:b3:e5:8a:58:fc:1d:
                    56:4a:e6:97:5a:1a:b6:ce:5c:59:b1:6c:ab:ac:50:
                    61:f9:73:7c:87:b5:8a:56:08:3e:13:df:47:db:e5:
                    27:04:ca:d8:1c:fb:8e:a2:19:06:bb:b5:4b:49:0c:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:2B:CD:EA:52:6E:2D:75:14:E3:B9:F1:EA:4B:92:E6:FE:AD:26
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:35:2d:99:1d:e1:95:df:98:bd:bf:7d:1c:09:93:1c:d6:bc:
         2a:24:6d:b4:44:ec:89:ef:84:c3:ec:28:d3:01:f2:e5:53:80:
         fd:75:f2:c8:2d:57:06:a5:65:c4:57:54:36:50:27:4a:b3:73:
         89:a2:f6:48:e0:45:a7:3d:cb:a3:7f:2e:bc:05:cf:c4:cc:47:
         57:5d:bb:92:71:70:6e:6f:be:6c:ed:32:f1:e1:23:55:22:1d:
         18:15:8e:fc:e2:8f:db:64:34:63:86:fc:cd:78:42:95:dd:28:
         a4:65:97:d8:88:49:74:11:d3:0a:20:60:91:d7:94:c5:8a:97:
         cf:e5:33:63:dc:7b:03:f0:ec:22:a8:cb:0a:3e:c8:62:82:b0:
         b9:7e:e6:75:aa:7f:1a:c9:eb:bb:21:81:b3:c1:bc:8f:9f:35:
         47:db:0f:47:7b:24:94:ca:59:1a:b7:0a:89:7b:a7:50:a3:0b:
         f1:0e:4c:c4:b3:ab:6f:22:87:de:24:47:05:95:d3:49:60:91:
         78:03:57:5b:7d:61:a1:b3:d6:2d:be:70:41:68:8a:28:40:c7:
         84:db:d7:e4:31:9d:02:dd:4f:46:84:9c:f3:9b:e1:2e:c7:a0:
         90:29:e9:22:b9:97:f0:0d:75:9f:81:cb:a3:fa:e3:33:5d:6b:
         c1:ac:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:12 2026 by rpki-client