Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          Tl+uregcuDImmkvGtcPIc0VU72mn31W7ltexAi7b6wo=
Subject key identifier:   5A:26:EF:C3:A2:27:34:89:71:DA:45:F5:84:7E:69:E6:47:88:7A:5E
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       019D28843569D25D6472AC6375F839690078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          130C
Signing time:             Thu 26 Mar 2026 05:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:46 +0000
Files and hashes:         1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
                          2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: fwDh99icn7T1vv8C/Hjy2I/IFlzTJ7wdpbELg+5xttY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:35:69:d2:5d:64:72:ac:63:75:f8:39:69:00:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Mar 26 05:00:46 2026 GMT
            Not After : Mar 27 05:00:46 2026 GMT
        Subject: CN=5a26efc3a227348971da45f5847e69e647887a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:aa:f5:d0:6f:c1:f7:3a:d4:17:ca:c9:1a:
                    ae:a5:35:a7:72:83:ee:ea:af:8e:f2:cf:ba:89:c1:
                    d9:12:59:97:7c:5d:38:92:46:29:76:29:7c:80:12:
                    8b:ee:19:c8:3c:de:b7:8e:2a:f6:b4:ee:ff:52:01:
                    82:99:d5:30:24:73:eb:70:d8:a0:a4:0e:c8:f6:f8:
                    81:f5:a6:8c:1f:e4:a3:b9:7b:7d:df:1c:77:ee:1c:
                    88:97:ef:8b:82:07:6f:d8:cf:df:dc:ea:73:f8:63:
                    e6:1c:32:5d:16:bd:11:84:eb:35:87:e4:31:67:c4:
                    ca:62:aa:3d:4b:df:7e:61:90:90:cf:8a:3d:68:99:
                    0f:a3:e5:dc:76:f2:a3:2f:ec:88:fb:b3:c3:b5:ff:
                    86:f2:41:95:28:77:cc:88:2d:4c:84:11:7e:5b:55:
                    17:ce:d2:10:b4:5b:fe:25:d4:33:6d:f9:f8:03:bb:
                    b0:88:71:ba:07:17:45:b2:74:5e:cc:31:2e:e9:03:
                    89:de:b4:fd:98:d4:24:26:24:dc:1f:28:7e:d1:bb:
                    23:4b:7d:9c:a8:57:f2:dd:42:8f:2c:1a:ae:c4:12:
                    c1:b8:2f:37:ae:fc:8d:a2:bf:b3:b8:fe:1d:8c:f1:
                    49:60:75:2c:a3:f2:f3:6d:5a:8a:53:0e:eb:77:dd:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:26:EF:C3:A2:27:34:89:71:DA:45:F5:84:7E:69:E6:47:88:7A:5E
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:fe:a9:0f:c6:dc:f2:d0:4f:e2:84:a0:be:42:45:a8:37:
         36:98:dc:72:fa:b6:00:30:66:7a:94:30:d2:86:24:2a:c6:ef:
         30:91:d4:89:02:91:fb:83:e7:75:c9:14:24:17:3e:3f:72:b2:
         22:fc:c0:2c:41:f7:11:39:3f:e3:69:69:16:ba:fd:1a:03:f1:
         9d:f8:0d:fe:30:8c:48:3b:f0:a9:3a:2b:c6:1f:be:38:05:94:
         f2:0d:dc:42:9e:31:78:cd:f3:fb:91:22:4e:a0:e5:a0:ae:87:
         37:64:da:f1:6b:9b:22:41:2f:1c:0b:ca:23:da:2c:dd:0a:6a:
         e4:6e:44:c1:17:04:be:bb:d4:4d:d3:c6:ba:fb:4d:6e:23:4e:
         32:33:dc:68:55:b1:76:45:b4:cc:d0:94:c8:96:5f:48:da:8e:
         c0:2d:c3:b3:a8:2c:0b:97:3b:d6:78:ab:48:ea:7d:60:3a:95:
         d7:33:84:22:3a:95:b6:53:e9:01:49:90:9d:11:53:a9:7f:bd:
         44:44:82:ad:c6:de:5e:8b:a0:9d:ee:d8:1e:6b:7a:9f:a9:f9:
         9a:28:9e:01:6b:6b:45:16:00:cf:07:7c:54:9a:fe:fa:e3:bb:
         3c:71:b2:bb:a4:09:37:1e:c1:1c:e6:7b:4c:35:fb:9f:9c:b5:
         7c:2c:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:00 2026 by rpki-client