Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File:                     iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier:          AU2GDjIKOggNPkZIh2GzdI5hoc/qzxpJsjkaM5EzM7Y=
Subject key identifier:   18:D2:05:A5:32:26:87:90:C6:0F:A7:63:9E:2A:F4:66:17:BD:9D:7A
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer:       /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial:       019D25F12317585656CEF653394566364F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number:          62
Signing time:             Wed 25 Mar 2026 17:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:53 +0000
Files and hashes:         1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
                          2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: Akz+ou4VGRQVzmh1FRA5W8pE+E7bO3jEJW8gsoKHyrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:23:17:58:56:56:ce:f6:53:39:45:66:36:4f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
        Validity
            Not Before: Mar 25 17:00:53 2026 GMT
            Not After : Mar 26 17:00:53 2026 GMT
        Subject: CN=18d205a532268790c60fa7639e2af46617bd9d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7d:9d:ff:49:b8:79:8c:ff:59:dc:b8:88:f6:
                    10:76:0e:f1:43:30:27:8e:4e:9d:20:ee:a7:b2:c5:
                    47:b8:a7:a2:22:61:06:55:37:cd:14:c6:13:ce:0a:
                    e1:c0:01:41:2b:5d:40:e2:3e:35:3e:6e:4c:5f:c3:
                    fe:08:fc:6c:20:66:57:d5:39:ab:99:38:0a:91:b8:
                    5b:44:9e:44:e8:0d:96:4e:b8:c0:c0:2f:14:26:5c:
                    bb:fd:37:97:90:64:59:9e:c5:1f:a6:5e:fe:27:32:
                    39:0d:84:27:78:7e:92:23:ad:a3:4e:4a:0c:97:3e:
                    84:df:10:9b:2a:00:17:5b:cc:ec:6b:73:17:80:35:
                    77:51:96:e7:38:ce:8c:82:30:80:3d:58:4c:a4:6b:
                    f2:12:19:75:c0:89:6c:ad:1f:ff:74:ac:bc:12:d2:
                    74:cb:da:73:05:a7:40:73:3b:ea:7d:d3:d5:dc:c3:
                    ae:f0:32:9a:77:d3:b6:e3:9c:40:89:df:55:3a:26:
                    53:37:81:05:3c:9a:bb:db:27:ae:60:12:c6:15:ba:
                    38:d4:d8:5f:5f:4c:8b:81:4c:66:bf:a9:a1:06:0c:
                    c4:3f:db:99:63:24:e4:7d:0c:01:77:2b:9c:08:7f:
                    78:85:7e:03:8b:b9:b9:e3:c8:db:ef:55:36:8f:9f:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D2:05:A5:32:26:87:90:C6:0F:A7:63:9E:2A:F4:66:17:BD:9D:7A
            X509v3 Authority Key Identifier:
                keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a0:7c:74:1b:04:cb:da:0b:b8:3c:ee:fa:cd:c3:c1:39:b6:
         8d:51:c2:5d:5a:b3:3b:71:ab:54:ce:6c:2a:40:78:87:78:6c:
         c7:a6:1c:4e:37:85:f6:42:18:e8:66:51:e4:55:9e:4f:7d:05:
         61:61:02:11:92:f6:cb:ee:b3:2d:dc:ef:33:48:a4:01:8b:29:
         dd:0d:ef:05:9c:ca:f4:a6:74:08:67:6d:a1:f2:93:02:a2:ab:
         18:8d:62:a4:44:06:af:e0:07:ae:c7:a1:e1:3d:da:72:4d:50:
         c6:7a:cc:d1:d2:46:e5:5c:6e:70:f7:6a:c5:25:d0:2c:52:b4:
         a5:42:08:7c:e3:7a:1b:17:71:20:59:3b:27:8f:8b:55:8d:80:
         c5:bd:d8:ac:1b:45:ed:71:4f:ef:57:d0:cd:36:a9:65:94:b4:
         f6:8a:e2:a2:53:55:48:e1:9c:7f:79:0e:02:15:41:5a:00:fc:
         61:da:b5:b3:e1:5c:24:65:89:52:03:6a:b2:7f:29:91:7a:81:
         89:cb:31:0c:ea:f0:ac:c5:df:b9:0b:34:da:ed:0d:9f:41:f2:
         97:15:a3:92:fc:55:0e:b7:ea:5f:7a:65:0a:56:51:1a:3b:ab:
         28:2a:42:9b:3d:41:c5:18:9c:99:b1:2b:17:25:b7:cc:8b:f5:
         1a:4e:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:33 2026 by rpki-client