Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File:                     ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier:          ocMESnZ7YZzrhNsY3eh2XUo4bpEDBxMMK20BE1jsxVY=
Subject key identifier:   86:71:CF:63:06:CA:FF:1A:B9:97:6A:CF:8A:EB:9B:9E:09:7E:C7:C8
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer:       /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial:       019D284DAF528DABDC1B7A5F4A3613287409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number:          18A0
Signing time:             Thu 26 Mar 2026 04:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:12 +0000
Files and hashes:         1: 1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa (hash: ZjDRguZyQdRbgGDx2inGal0RnrWBMwUNKvj3z1ggLfA=)
                          2: aExTrMzuwD_92S4WvXaACfUy-2A.roa (hash: G/mzrbIittyoI/yZqBrJ24DX4CddzRkegsmmk8tsnyA=)
                          3: mgLJqvtZLvw_zMXsaHVw0CxdvyY.roa (hash: /FNWqx6kPhlir6gMp94kBBwTzAj5/7NkW+tcAQ/fNbo=)
                          4: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: xK3xmbnNoyFR5LaYDCh2zm4CGehKT1EgzQ7fwzU5m5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:af:52:8d:ab:dc:1b:7a:5f:4a:36:13:28:74:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
        Validity
            Not Before: Mar 26 04:01:12 2026 GMT
            Not After : Mar 27 04:01:12 2026 GMT
        Subject: CN=8671cf6306caff1ab9976acf8aeb9b9e097ec7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:17:9c:a3:b3:ef:01:78:14:49:20:c9:83:
                    66:3f:a0:4b:11:c9:a8:9f:eb:a4:77:ce:60:8e:78:
                    18:87:9d:97:5f:05:94:9b:4f:74:ba:94:41:d3:d2:
                    d4:06:37:80:09:a4:1b:ac:1e:72:f4:e0:d6:37:2b:
                    ea:5d:6e:f9:07:ca:dd:44:f1:45:17:fc:8c:a3:fd:
                    1d:f4:2c:2a:5e:44:fd:50:9c:cf:47:7c:d2:0f:28:
                    dc:28:5a:1c:bb:b8:f6:1f:f7:92:8f:e6:3e:65:35:
                    50:33:51:b5:2c:ba:78:9d:9a:81:d7:db:6d:3e:c5:
                    aa:a9:4a:0b:8e:54:41:25:b2:df:ce:39:2f:b0:82:
                    dc:38:0a:e9:54:3a:94:12:82:32:cb:71:72:fd:dd:
                    c1:33:b4:1f:43:37:f0:5f:8b:58:57:ae:d8:8a:06:
                    03:8b:fa:c2:1b:8d:7f:41:19:f9:2c:03:4c:54:38:
                    6b:47:6f:67:0a:7f:14:7f:fe:45:34:12:71:7f:47:
                    fb:f2:52:50:c7:ee:36:cf:ed:1e:2c:ad:97:fb:81:
                    13:78:0f:ac:7e:fc:16:76:ce:93:ee:69:92:dc:c8:
                    6b:08:07:de:38:47:b1:a9:48:cd:b2:21:45:3e:53:
                    fc:c6:a8:d8:18:02:91:b1:7c:1d:14:13:fe:18:b0:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:71:CF:63:06:CA:FF:1A:B9:97:6A:CF:8A:EB:9B:9E:09:7E:C7:C8
            X509v3 Authority Key Identifier:
                keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:d0:62:fd:50:17:2e:7c:f5:64:5e:0b:5d:8d:1d:74:35:
         11:95:d0:93:25:4e:d5:c9:b6:c7:f2:1d:14:8d:8c:7b:a6:96:
         d9:7c:4b:f3:b7:a5:79:63:59:c6:45:f7:d2:c7:f5:40:3b:58:
         9c:91:e4:b5:db:7d:28:8c:5e:fd:41:7e:90:81:8a:03:94:c8:
         b7:40:60:b2:65:69:64:5d:13:dc:74:b0:42:d7:10:17:1f:2a:
         f4:cb:29:d5:d0:b4:93:ed:a9:14:71:4a:15:45:1e:92:9e:54:
         f1:ed:e9:31:6b:8c:17:c8:e7:a3:88:6d:40:2f:97:21:fd:34:
         b9:82:45:09:92:73:57:f1:69:42:95:48:0b:73:67:be:79:98:
         7a:8b:67:bc:8a:1e:bc:39:f7:f6:8d:a9:c7:20:63:b1:c8:c9:
         e3:cb:6e:73:c7:06:76:28:bc:1d:05:33:b9:d2:3b:c0:1e:08:
         85:a0:5f:43:70:7e:49:21:4b:a8:50:d9:ee:be:f5:59:e4:ab:
         7d:d4:b7:be:47:2f:96:94:71:af:4a:cd:f1:d7:1a:7b:bf:d5:
         46:83:c1:96:77:1a:89:18:6b:a2:2c:3c:51:3d:ff:2a:15:8c:
         b8:f0:a6:8a:d6:7e:dc:c4:29:65:70:09:ab:96:7b:65:d5:c1:
         64:f6:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:01 2026 by rpki-client