Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File:                     aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier:          bXmV0CxpjhJKpIDLUiBQYei/mMH6nqHp/ScWivgvK8o=
Subject key identifier:   B8:45:F4:69:21:5E:7A:58:29:D0:AF:9A:BF:F8:3F:DC:D6:2A:40:66
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer:       /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial:       019D26CCD354A495D4DE9514F6B9C5F2B82A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 21:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:50 +0000
Files and hashes:         1: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: oQ+ZJh10ZqNm3DntyzY86Gus8MEtcRKQ2wD/Fiy5Gkc=)
                          2: hpJdcso_n4malOGRsLM9jlcq2PA.roa (hash: fdvBY/m75V1oPyWW90Ox8zMppAT8R3oNsWGUpS0XZeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:d3:54:a4:95:d4:de:95:14:f6:b9:c5:f2:b8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
        Validity
            Not Before: Mar 25 21:00:50 2026 GMT
            Not After : Mar 26 21:00:50 2026 GMT
        Subject: CN=b845f469215e7a5829d0af9abff83fdcd62a4066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:36:56:61:e3:fa:0d:26:09:40:65:01:65:
                    78:8d:2d:04:09:25:b5:e6:16:43:b7:a0:b8:eb:6d:
                    72:a1:0b:bd:b4:00:3b:39:db:4e:6d:d9:75:9f:55:
                    22:6d:77:e9:c4:4b:3b:74:a4:2f:ea:43:04:20:db:
                    ba:6b:ac:3a:ac:3c:23:8f:b8:45:04:84:e9:88:a9:
                    49:09:37:62:06:87:50:20:e4:cb:a3:05:44:3a:da:
                    f3:6b:85:68:62:4c:39:4f:88:0f:e9:b4:21:0d:35:
                    d5:7f:b1:55:5b:48:76:24:60:30:40:60:58:06:8f:
                    61:07:6e:b4:ae:cc:46:30:45:37:cf:fd:d4:3b:80:
                    7a:06:82:1c:95:45:94:19:ab:e4:e0:b5:9e:4c:3d:
                    10:e1:7d:d5:e5:ff:96:c8:da:76:d9:58:fc:dc:97:
                    21:9b:b5:6b:9b:30:29:58:6f:cf:cc:00:5f:b4:d8:
                    f1:ef:7f:3d:0f:a7:aa:7e:d9:6a:74:00:72:78:ee:
                    d8:78:c6:2c:2a:66:fd:9f:67:a1:9c:6f:1b:a5:4f:
                    60:45:55:6f:b6:d5:b3:0e:82:12:84:48:95:35:79:
                    96:2d:c8:94:ca:c9:08:be:ed:2f:29:10:bc:cf:c5:
                    f6:6b:f1:7e:fa:bc:55:42:c2:6c:b7:8e:ed:f1:d1:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:45:F4:69:21:5E:7A:58:29:D0:AF:9A:BF:F8:3F:DC:D6:2A:40:66
            X509v3 Authority Key Identifier:
                keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:51:ee:03:e6:91:3a:4b:59:fa:8a:49:d2:24:95:68:37:
         6f:da:0e:ee:c8:17:34:70:7e:06:b5:54:c0:7e:de:ee:bd:77:
         76:21:c8:76:bd:12:70:11:90:2b:12:c4:fd:65:64:a7:f4:60:
         e0:38:f1:0f:12:e3:36:2a:8a:ff:38:05:08:b9:4f:c8:c2:af:
         3f:06:33:9f:80:f0:54:f7:16:5a:64:71:ce:6e:5c:78:0a:61:
         30:15:1e:93:92:0c:b2:83:34:03:47:b3:28:8f:60:83:ef:f8:
         9a:a6:59:24:dd:2b:75:a4:8e:67:b3:9f:4b:62:3e:98:0d:62:
         6b:50:be:4e:66:d1:af:f3:1e:2d:e8:b1:4e:73:53:0b:cd:62:
         b9:84:eb:98:f3:c3:65:49:e5:98:71:ab:66:23:69:4e:96:05:
         01:f2:09:a9:cb:47:d8:42:08:64:0c:56:5c:ac:93:c6:fd:79:
         b9:78:d6:71:cc:09:8f:14:f3:9e:c9:16:01:93:be:73:83:e4:
         27:d6:ea:23:6d:02:eb:da:3d:bc:d5:78:2a:eb:bc:e1:50:0a:
         24:26:fb:3f:9e:1f:c1:5c:34:70:39:09:88:9e:d2:e0:eb:fd:
         32:4d:04:89:10:81:63:cc:3a:87:8d:0e:d5:75:80:57:24:7f:
         e6:a4:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:30 2026 by rpki-client