Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File:                     BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier:          X8lU6Pde2mz/lIZ/CaIHuOSV6LF7vl+M656ZpOCxmhE=
Subject key identifier:   86:62:58:39:CB:C3:3C:A7:6B:23:94:15:8C:34:C7:1A:E2:D9:18:97
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer:       /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial:       019D2960C4C02CF7DF054651EF08155696F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 09:01:40 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:40 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:40 +0000
Files and hashes:         1: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: V+1MPxU/SabI8KdP0gX/LNDty7gqcuHR5ptqKKt8vyM=)
                          2: Nb75t2HmIANRhLGNXjt11cqlJUE.roa (hash: yEAQI/Ds6SqiJnioeA/4ztbYLQANaelVg2ffNspRA+U=)
                          3: OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa (hash: lJRBkYeL9Nu/5ib2lExKbBVlayfZpUDinxzFBIQeINk=)
                          4: sE95hNuQAFs2bwnjWh5tS1eDbyo.roa (hash: lJLEBwFDxhpPzZc0IOmOMH9nwksk79qXsIs7n/ttFwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:c4:c0:2c:f7:df:05:46:51:ef:08:15:56:96:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
        Validity
            Not Before: Mar 26 09:01:40 2026 GMT
            Not After : Mar 27 09:01:40 2026 GMT
        Subject: CN=86625839cbc33ca76b2394158c34c71ae2d91897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:2f:f9:1a:98:76:e5:f8:df:de:2a:a9:35:
                    ce:78:5b:48:e1:cd:9c:2b:19:ab:23:d6:e8:dc:cc:
                    c1:59:aa:da:30:4a:be:86:3d:51:dd:ac:b9:1e:80:
                    bb:e3:e3:96:a9:0e:1a:44:01:6d:13:da:3f:05:d8:
                    8d:e1:52:c6:a3:51:02:85:df:e3:8c:eb:c8:dc:ee:
                    3a:8b:73:f5:33:d2:f9:fb:a4:e4:5c:de:32:cc:92:
                    16:2c:f2:34:a6:99:20:f3:8f:b8:ef:2e:fa:4c:f3:
                    c4:7c:a3:76:7b:66:cf:ae:a9:d1:eb:3e:0b:38:43:
                    7a:77:41:72:96:de:18:47:27:86:84:ef:07:bc:1b:
                    bc:39:c5:2e:e5:88:37:98:1f:4d:60:4e:29:44:7a:
                    90:6e:0b:3c:e2:7f:52:57:12:95:69:29:36:9a:4d:
                    2c:89:89:47:af:48:fd:41:10:0d:e9:af:eb:2a:61:
                    3a:cf:cc:bc:7a:2e:22:b0:c4:7b:48:89:af:d4:bd:
                    d1:bb:15:7c:29:43:14:7f:5d:ea:cc:3a:81:5f:55:
                    10:16:26:14:1f:2d:08:8d:85:65:db:63:e8:22:32:
                    73:c7:74:1f:d1:ae:6e:99:e4:4d:18:84:2d:19:88:
                    ea:2a:07:a7:e0:b2:9d:f0:a4:e5:49:5a:81:2e:af:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:62:58:39:CB:C3:3C:A7:6B:23:94:15:8C:34:C7:1A:E2:D9:18:97
            X509v3 Authority Key Identifier:
                keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:a4:05:0a:97:6f:59:c6:da:3b:49:3d:93:d2:9f:54:59:
         24:ac:16:58:a5:2e:56:ed:e6:e6:09:81:ea:a8:04:ff:28:b2:
         d3:b3:b5:41:51:df:ca:ef:87:f4:1c:1d:a9:9d:3c:9e:64:75:
         11:85:5c:a6:87:36:18:6b:bc:69:89:74:f6:59:01:a6:e6:d4:
         65:f7:f1:bb:b6:6b:00:65:2c:ed:1d:1c:9f:0d:58:32:da:91:
         cc:78:18:6e:fa:5d:a8:3c:57:e9:8c:ac:0d:19:50:08:14:7a:
         5a:66:62:6e:dc:0b:52:e8:5c:52:ad:1a:e4:55:fe:83:8a:c9:
         ea:fa:c6:7c:f1:97:74:8a:a5:67:13:b7:7e:a6:41:cd:83:63:
         53:bd:cb:8f:38:d4:dc:2c:17:b1:a8:ff:a4:a6:ed:98:1c:60:
         43:42:1c:8d:6f:0f:f8:85:27:a9:4e:c4:74:f2:10:d2:87:f3:
         1e:28:b3:5b:47:97:4b:3d:52:87:bb:52:ae:43:0f:40:dc:c7:
         87:b8:b9:cc:11:b8:3f:43:56:5d:ec:99:91:26:81:91:1f:f8:
         a1:02:c0:fd:a2:ec:b7:76:85:31:d2:89:ce:82:2b:de:8f:09:
         67:06:53:e8:ee:4a:29:69:75:75:11:ca:31:47:ee:74:66:81:
         83:be:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:03 2026 by rpki-client