Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File:                     1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier:          kQBqSP56dkJbpFouH5yI/Gvx9Q28OB5WB2YKfwf8JuM=
Subject key identifier:   96:53:E0:2C:F5:9F:94:E7:C3:F7:A7:0E:B9:FC:05:BE:51:E4:F6:18
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer:       /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial:       019D2AE0104E4441D6A2A71783DBDF3E8EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number:          16F8
Signing time:             Thu 26 Mar 2026 16:00:20 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:20 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:20 +0000
Files and hashes:         1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: W6kF2Ng+8nstW9mMSZ0r9sCpA3b8MtwrsUavvQsjGVg=)
                          2: DiLQ3eZ63QejRg20eifdk93Yy6U.roa (hash: qnHrUbQPvPuYp+ZX7v/G+y+XPviRkjsxd6v5SyH+MSU=)
                          3: XAe1D-UfnccOxjr0BZ8NMJhUIRY.roa (hash: J/R1zb6aQ5p1OEoahc9Oc76aJRSMz4QrbKyCD2+fCrk=)
                          4: jTGcRo3hhX-PWVq5dJVjc2uQbr4.roa (hash: E6oHGy8IhhcshyaYtATT6go1WUadzT652DZ7kyPwmPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:10:4e:44:41:d6:a2:a7:17:83:db:df:3e:8e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
        Validity
            Not Before: Mar 26 16:00:20 2026 GMT
            Not After : Mar 27 16:00:20 2026 GMT
        Subject: CN=9653e02cf59f94e7c3f7a70eb9fc05be51e4f618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:4c:3d:24:cf:4e:1b:af:97:3f:8a:a7:4e:
                    1d:80:7e:1b:aa:65:a7:22:1e:23:0b:42:f4:d8:87:
                    01:ae:25:98:8b:7d:d2:4d:8a:1e:77:bc:9b:97:6d:
                    73:9a:3f:f3:29:28:5e:d6:a8:6a:98:f2:02:41:36:
                    28:ad:ce:33:c4:e1:81:d6:46:9c:f9:31:b5:3b:1a:
                    c4:ce:c3:f3:93:35:d6:fb:1e:d2:d0:10:83:ef:ff:
                    47:85:cd:92:85:ba:7a:5d:8e:93:55:cd:6d:bd:50:
                    01:6f:50:ed:b1:62:ea:ac:ca:4f:2a:ce:f3:dd:0b:
                    4a:b6:06:09:7a:d5:8c:8a:b6:dc:e6:98:fd:b4:01:
                    55:76:ed:22:75:6a:20:cb:8e:b4:56:0e:68:56:98:
                    37:3f:5c:fb:07:e5:37:3d:28:a6:49:35:e9:50:5d:
                    4e:32:87:43:93:a1:ce:a8:b8:91:1e:52:cf:b7:5a:
                    d3:b7:18:5b:8b:5c:44:75:df:a5:9f:b5:9a:cc:42:
                    f5:89:df:13:fc:b6:c9:d7:c5:e6:11:ac:a7:f4:06:
                    cb:4c:98:a2:e7:fc:09:9e:2f:41:a2:55:60:50:5b:
                    eb:cb:1b:0a:dc:55:d3:63:f5:83:68:9c:f8:3a:40:
                    1f:36:9b:67:70:35:77:24:b0:c4:82:12:0a:59:43:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:E0:2C:F5:9F:94:E7:C3:F7:A7:0E:B9:FC:05:BE:51:E4:F6:18
            X509v3 Authority Key Identifier:
                keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:17:b9:a7:24:e5:16:82:49:88:44:30:2d:d5:d7:81:23:
         31:4c:24:b2:36:6e:64:13:87:cc:c2:5e:4a:a9:cd:32:81:70:
         21:04:28:60:88:f3:05:9b:fc:97:9a:9a:70:bf:63:75:4a:8b:
         3b:9b:c5:44:4d:2a:28:5b:35:7f:d6:9e:6f:d3:76:c5:d7:46:
         ed:ad:78:8b:cc:01:1d:84:09:cb:52:03:8e:84:f4:9a:3e:8f:
         71:34:f4:2e:83:c9:26:3a:f8:f0:5e:88:76:52:45:b4:15:84:
         f2:ee:8c:a7:09:9a:b8:08:0b:6f:0f:c0:ea:48:e8:a1:de:9d:
         a5:98:18:c1:00:f3:c6:84:76:31:84:d5:64:28:bc:ee:1e:22:
         47:b8:a1:7d:8a:d7:9a:36:aa:69:96:9a:45:46:22:a8:1f:45:
         78:13:6d:d7:85:34:3d:3d:d1:8b:dc:32:c7:2a:f9:80:1d:bf:
         e0:47:f7:b7:52:48:8e:41:ba:6b:04:ef:0e:72:b5:29:54:fc:
         3d:0a:95:ae:2a:33:8b:a8:3e:29:49:dd:5a:a4:fb:f6:b4:b6:
         1a:ac:5f:45:01:83:e2:7c:63:16:d2:3e:5f:c5:21:28:64:ed:
         5d:15:da:37:a6:69:fb:a0:c0:72:39:a1:9f:d7:bc:59:64:29:
         24:cf:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:28 2026 by rpki-client