Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          HI7GpkS1snwJCsQAVBltubRyYqEJgG/c3ne7/WUMAyY=
Subject key identifier:   8C:75:93:19:51:E9:ED:80:D5:65:E4:63:A1:D6:5F:2E:EA:A2:AA:B6
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019D27049CC69D8821C6A44E45A5F46810B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          12C3
Signing time:             Wed 25 Mar 2026 22:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:46 +0000
Files and hashes:         1: MpwIY7Ebi8bx833CV_5moln-CB0.roa (hash: IcPeEwSEZRPBHIQ02cGM6FjSpHotFVeRsIkfWF3fy2s=)
                          2: dwAqRvLPaFJvT81jjmY8z6OAffc.roa (hash: U+GbR8Ko/UO/PdAN8+pRGxNFE5XM37ujAKQFqPLbxQ4=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: 9loZu+uZ4dFr7Ah0fz9v5ZfygO0DyY5M8s/PecF6GHQ=)
                          4: mstzb26BC_IbEF1cblkahySAWUo.roa (hash: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU=)
                          5: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (hash: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:9c:c6:9d:88:21:c6:a4:4e:45:a5:f4:68:10:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Mar 25 22:01:46 2026 GMT
            Not After : Mar 26 22:01:46 2026 GMT
        Subject: CN=8c75931951e9ed80d565e463a1d65f2eeaa2aab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:9c:9f:91:77:4b:cc:3a:30:33:e0:79:ff:
                    e1:10:ad:54:78:d0:36:16:91:fe:ed:d5:7f:5e:a4:
                    45:7f:7b:56:ca:db:ca:9e:11:f8:26:ca:be:80:15:
                    88:46:ba:dc:ca:78:2f:4e:3c:a8:21:a0:4e:31:49:
                    6e:11:9a:ff:1f:c8:c3:ba:04:4b:3c:d8:51:0b:de:
                    c3:a0:62:b9:ff:bc:3a:b5:0b:40:e9:2e:6d:cc:f6:
                    74:7b:f2:41:2c:b1:f1:b9:91:6c:b9:52:07:39:21:
                    8d:f5:0c:cb:75:52:8f:2a:1c:6a:6f:e9:2d:6c:77:
                    a2:6e:c3:61:e6:03:61:3a:d7:47:d4:5a:e2:22:48:
                    97:15:ed:65:54:e1:f2:0c:7b:fe:7b:be:18:0a:95:
                    67:4c:1c:2b:1a:b5:b2:93:3d:8c:08:57:9f:81:27:
                    b7:b7:73:fa:a4:bb:7c:b2:40:4e:b3:f5:71:a2:1a:
                    e3:08:13:52:65:ee:0f:db:95:4e:83:eb:de:6c:c3:
                    13:79:f9:01:bb:64:d4:94:a2:8f:20:7c:52:e4:c3:
                    d9:0e:81:ff:a9:8f:60:86:b9:15:60:65:f5:e4:dc:
                    0d:09:f4:d2:62:d8:c9:ee:73:48:7c:25:a3:63:42:
                    61:49:5d:2b:6d:89:bd:ea:f6:9c:c4:e5:e0:7a:a1:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:93:19:51:E9:ED:80:D5:65:E4:63:A1:D6:5F:2E:EA:A2:AA:B6
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:8e:80:ad:99:65:8d:c8:56:00:0f:ce:dd:39:20:57:69:
         be:59:ad:40:bd:35:38:23:67:5e:68:9b:13:d5:57:9a:16:23:
         b0:f3:b3:2b:d3:a5:55:86:4f:4a:ef:54:5d:c5:78:fa:79:69:
         d0:c2:40:f9:47:5e:54:d8:bf:01:99:6f:a9:80:8f:7e:5a:79:
         3e:c6:5f:7b:2c:2e:e2:8f:09:23:cf:13:c3:2b:6b:6c:60:cd:
         ef:63:a0:e2:dc:f1:95:1e:8f:d2:e4:32:75:7b:78:b6:e6:8f:
         2d:50:fc:07:c5:e4:0f:99:cf:bf:29:06:38:4b:68:b1:f3:55:
         0e:e1:0a:df:af:35:f2:e5:7c:04:33:11:ed:03:fa:ba:d8:8f:
         98:92:cb:4a:0e:48:e2:b8:47:11:1d:a5:7b:06:9c:a8:fe:14:
         ac:13:65:6d:b9:1a:62:f7:5c:4a:0b:d3:54:1b:24:c2:69:b0:
         b4:a2:0f:d6:1f:bb:35:74:c0:f0:4e:a7:1e:4c:9e:b2:f7:f5:
         19:1c:cc:3b:9d:1f:1f:1a:94:35:4e:d9:d1:97:73:c9:c2:c8:
         38:db:22:2b:34:49:68:3e:75:9a:67:67:40:8a:d3:00:6d:2d:
         d7:4f:3b:6c:36:1f:d8:e7:38:3f:5a:1d:f5:95:06:a7:8d:d0:
         54:d8:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:32 2026 by rpki-client