Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          aWBFKKUr527uk1lodSUE4Abxv1K+ily+HviRBv24rbM=
Subject key identifier:   59:B3:41:00:52:33:60:D4:07:5F:FB:D0:CD:7D:14:3C:32:EC:2E:01
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       019D28BB41FF0B87CEC9901F18AC6984D45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 06:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:53 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: 5YKrXzypUFgFF/rCJtUC5K7sYkQEoRvx/cZD0xwgrT4=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:41:ff:0b:87:ce:c9:90:1f:18:ac:69:84:d4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Mar 26 06:00:53 2026 GMT
            Not After : Mar 27 06:00:53 2026 GMT
        Subject: CN=59b34100523360d4075ffbd0cd7d143c32ec2e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:34:eb:4f:3d:48:7f:eb:9b:20:55:e3:e2:
                    d4:8a:02:f9:29:26:42:fc:cb:17:b9:3f:4c:c7:e7:
                    18:36:f4:ef:ed:c4:5a:fd:01:b9:a6:82:1d:2c:2a:
                    4e:b2:9e:a8:cd:8b:1c:ab:ce:97:f3:ab:a3:48:ee:
                    01:4c:67:99:45:67:16:0e:5f:38:a0:f1:9c:0d:3e:
                    a9:b7:25:a8:05:4f:24:a9:09:8f:bd:ae:8d:2e:ca:
                    98:74:84:50:1d:29:13:d8:63:bb:d6:d2:29:bd:64:
                    1f:eb:5b:f3:4e:c3:6a:bb:cb:5e:a5:09:c1:b9:2e:
                    2c:ca:ee:84:42:d9:40:60:80:f2:ab:fe:3b:36:0f:
                    92:67:6f:c8:b8:86:9c:f8:3b:b3:7b:28:f1:ff:48:
                    ca:db:11:b2:ae:e9:33:5f:86:6a:93:4c:71:84:b6:
                    fc:e5:9d:20:8c:ff:01:02:52:6e:ef:2f:be:f3:e5:
                    48:f4:41:c3:3d:ba:5e:4e:74:b6:3c:f5:8b:32:40:
                    17:0d:bc:7d:1b:a6:32:f4:b0:fe:83:65:e1:b6:b0:
                    d5:1b:d6:84:6f:77:3d:ba:4d:d8:84:5c:9e:27:4b:
                    e1:bd:67:62:68:d7:98:ba:ef:5e:87:1f:c9:bf:7a:
                    b4:4d:e2:1d:d9:d2:41:f7:f8:a2:8a:c2:36:e9:2b:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B3:41:00:52:33:60:D4:07:5F:FB:D0:CD:7D:14:3C:32:EC:2E:01
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:c6:6b:b9:ab:76:8b:54:8b:46:af:dc:03:7b:89:88:1a:
         4c:2a:f7:84:db:37:ec:fc:32:8b:11:c8:05:4a:20:1b:41:64:
         c0:0e:3b:5d:fb:5b:72:64:68:f6:a8:c6:eb:58:5c:ff:38:d9:
         34:56:f4:f9:89:80:6d:68:96:8e:d5:a0:73:d8:5d:e0:87:50:
         56:85:03:5d:f1:91:25:75:9a:1d:96:71:28:2d:d6:0b:1f:8e:
         61:20:8d:c3:cc:f2:e1:4f:21:86:ac:aa:f8:a2:48:55:1d:91:
         9e:26:ba:4b:8d:f9:b1:f5:18:4c:f3:e4:4f:e1:e7:78:c5:bd:
         e2:23:60:6a:f0:44:b0:0b:76:29:69:ea:00:2e:91:7b:6b:79:
         e1:ad:50:5d:fd:d1:e2:33:49:85:b0:7e:12:50:90:9a:80:f9:
         a7:e1:a6:61:e5:73:a5:24:d6:0c:37:a2:7d:a7:0c:04:4e:54:
         3b:8f:c9:fa:d2:ff:04:ad:88:09:4b:3a:9c:cf:a1:c7:d5:c3:
         31:8c:6d:aa:c4:70:42:7b:de:9a:7e:e4:7d:fa:e4:52:7a:44:
         51:cc:a6:f9:32:9a:ce:9a:15:2d:8d:64:c1:54:ca:57:9f:8b:
         20:73:ba:57:fa:12:df:ad:e1:6b:bf:52:f5:dc:99:2a:9c:e4:
         c3:5b:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:38 2026 by rpki-client