Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          iPY/4FF14F8hu1DaCmyD3FzZstIZab+mldKBTx62wsM=
Subject key identifier:   17:EC:19:80:BE:94:58:8D:5C:22:A0:84:C3:76:05:5D:DC:F1:18:46
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       019D265FBC816C6221BBC8B35187D1DF3B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 19:01:41 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:41 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:41 +0000
Files and hashes:         1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: pUBlJ++2Ow/d/a2fWXFbj7NaIWWdC7+qCp3Kz+fcOgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:bc:81:6c:62:21:bb:c8:b3:51:87:d1:df:3b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: Mar 25 19:01:41 2026 GMT
            Not After : Mar 26 19:01:41 2026 GMT
        Subject: CN=17ec1980be94588d5c22a084c376055ddcf11846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:87:f6:d4:67:60:54:e3:47:10:af:23:de:
                    26:12:af:66:c2:36:68:5d:1e:c9:f7:f9:4d:f2:80:
                    b5:99:45:b0:25:8b:0d:13:05:35:c9:a8:db:ed:2a:
                    0c:e2:78:0c:24:d1:56:a3:e5:3b:0c:04:93:e7:83:
                    5b:fc:10:7c:c1:26:35:ad:b8:06:eb:59:08:27:c1:
                    a9:3a:dc:c5:35:1a:d4:25:df:87:51:ad:1f:cf:63:
                    85:3b:7f:a8:49:41:be:60:59:9c:06:34:8b:36:e9:
                    db:96:d7:6b:05:de:2f:cb:30:54:a8:83:55:36:ef:
                    b2:12:ca:0f:a4:52:3a:97:af:a5:87:f9:5e:48:b7:
                    cf:11:fb:09:41:15:08:58:13:0e:f7:f9:7b:c5:53:
                    13:bd:4f:e3:28:5e:23:af:cb:18:6f:4e:f1:f6:e3:
                    5c:be:5f:5d:9a:00:15:7f:c0:7a:40:f5:ac:a0:fc:
                    31:bc:74:2b:03:28:25:77:19:fa:fc:bd:51:91:2a:
                    6d:56:c0:a2:37:b1:df:9f:4d:a8:af:7a:cd:f1:71:
                    f4:31:93:99:db:fb:a3:88:0c:5e:f7:5d:94:c7:3a:
                    06:fe:f5:1a:d6:b1:15:61:80:2c:bc:25:6d:0e:ad:
                    14:1b:35:ec:64:40:02:88:30:df:32:84:6c:f0:df:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:19:80:BE:94:58:8D:5C:22:A0:84:C3:76:05:5D:DC:F1:18:46
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:72:9c:d3:7f:c7:d7:97:9e:b2:0c:59:d1:1e:03:82:94:
         92:ab:b2:d9:e5:2c:4e:3e:33:6f:60:b1:28:94:8d:d4:48:ae:
         27:d3:a5:9a:7e:fd:0b:82:57:f0:c7:44:12:fb:76:89:90:46:
         2a:94:d6:18:3b:e1:59:ea:7d:ea:1a:62:7a:4a:7e:d8:b7:94:
         51:24:3a:15:f5:8b:89:c1:6f:d9:4b:9b:b9:a9:7d:ba:66:b2:
         ed:d5:fa:c5:d1:c7:d7:c3:6c:ff:d2:42:47:bb:6f:94:bc:8f:
         2f:81:8a:d3:92:14:b5:13:39:e6:4d:55:0e:a3:98:1d:ce:e7:
         fe:47:11:49:6b:13:56:1c:aa:5c:17:25:cf:c1:2d:9d:6f:0b:
         6f:71:90:4e:1c:d6:0b:f9:cd:89:13:58:95:e1:5c:61:86:d8:
         c3:38:92:53:7e:36:27:26:ed:9f:ed:12:b7:ba:86:7f:b9:4f:
         9f:87:49:c2:a4:e2:c4:90:61:31:4d:fe:7b:d3:1a:92:e4:fb:
         58:81:11:a7:ab:86:37:c3:ad:c8:55:3e:56:1d:38:b6:1d:21:
         0c:35:cb:85:f4:22:b3:78:fa:ec:d6:fd:90:db:2c:77:ca:e4:
         5c:05:e4:6b:83:f7:0b:3c:4c:c2:92:34:9d:20:e2:cc:ba:df:
         b3:de:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:45 2026 by rpki-client