Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          N1wKxwqN502d+FZJw3CEA1InGwGsxiAhm6CZN5qU10U=
Subject key identifier:   FD:F5:CE:A1:8D:0E:29:A0:CF:56:F8:C3:F9:7B:CD:F3:B9:BE:31:0E
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       019D281686368B4D5CF0EFA709E58D3E034D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:57 +0000
Files and hashes:         1: 5vpEBDoytppmUG_e9rj_C25Xyl8.roa (hash: WBDmOCdQ0a30XWFeqB9R0DXCUU5WmVW9tSy74+sYoEQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: NB1wfpcBKI3N4w+tig5zyED2QG4YCUX8foqLLcu+Jdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:86:36:8b:4d:5c:f0:ef:a7:09:e5:8d:3e:03:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: Mar 26 03:00:57 2026 GMT
            Not After : Mar 27 03:00:57 2026 GMT
        Subject: CN=fdf5cea18d0e29a0cf56f8c3f97bcdf3b9be310e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:de:e0:d2:f3:bc:98:bb:32:b2:57:27:0a:5e:
                    ca:ec:a9:51:58:d1:22:a4:aa:52:27:0a:91:86:01:
                    17:b9:69:97:d9:69:50:ee:c1:f4:55:45:bf:05:70:
                    59:dc:8a:3c:60:65:ed:d9:4a:71:76:a3:c5:56:ba:
                    dc:db:4d:ba:e2:53:39:dc:b8:3e:85:26:30:d0:47:
                    19:e1:19:78:aa:c9:06:5f:3f:85:36:f8:30:fc:9c:
                    36:2d:b6:ba:42:ac:08:54:e0:3e:91:40:af:e3:96:
                    ec:b3:5c:ba:0d:e9:55:a6:f7:60:0b:09:68:2b:bc:
                    2d:2b:eb:fd:58:5e:30:0d:78:4a:5c:67:33:a7:91:
                    27:b5:61:1a:b6:eb:42:39:9a:cd:86:f5:64:31:a8:
                    ba:a5:53:fa:fc:0c:0c:ff:51:c7:8a:d4:bd:22:e6:
                    cb:70:8c:84:31:b5:e0:78:09:33:aa:5a:ad:81:f6:
                    ac:2c:12:c3:27:ce:e1:71:a0:d6:78:0f:5d:4e:f1:
                    f7:94:a8:4c:d7:24:a3:b0:a5:d0:ba:c9:83:f8:66:
                    89:07:f0:65:21:f7:fc:46:82:5e:63:3e:1d:e7:c1:
                    8b:11:40:98:88:36:76:d4:c0:61:6d:89:dd:9f:c3:
                    ba:70:b3:ac:4d:8b:49:34:49:b8:a3:73:59:25:ff:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:CE:A1:8D:0E:29:A0:CF:56:F8:C3:F9:7B:CD:F3:B9:BE:31:0E
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:d3:85:12:0a:71:9c:a7:4b:bf:23:85:86:4b:2e:39:11:
         9b:11:bf:86:23:c7:bf:4d:2c:cd:ef:e3:61:41:5c:75:86:ab:
         7e:96:a8:2d:d8:78:ae:c4:34:ba:36:5a:fe:34:5a:de:6e:95:
         5f:50:cf:ab:ec:84:c0:f3:c7:1d:64:d2:8b:a3:07:78:37:26:
         50:db:ca:41:13:5e:58:ab:ac:95:dd:c9:c4:df:e5:34:d0:93:
         88:c9:1e:f1:ea:fc:47:06:4c:4e:51:37:5f:9a:72:d1:9e:aa:
         a3:d6:37:5a:49:6c:58:71:0b:7e:fa:43:5e:36:43:da:18:a6:
         9a:07:17:c0:85:5d:a0:7b:ec:20:0c:bf:fa:ba:17:b1:f0:26:
         10:08:c7:95:ee:fd:0b:7d:f5:18:bf:bf:d2:57:55:25:31:d0:
         7b:39:0f:f8:22:fd:a0:ad:7d:ef:2e:3c:32:a7:2a:94:c6:85:
         72:a7:89:d6:ed:a4:59:a0:39:6e:c9:83:56:2f:e3:2b:d3:f2:
         9f:98:19:75:d4:e8:e6:7e:65:10:aa:e5:6a:64:2d:96:26:2c:
         12:fa:a7:f9:23:9a:7d:c8:ff:f9:f1:52:98:75:99:82:d8:97:
         37:70:bd:02:48:20:bb:9a:65:fd:b6:f5:f6:49:60:ce:d5:39:
         6d:4a:ce:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:16 2026 by rpki-client