Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File:                     1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier:          oqP1Wq9MgCVW2quk/yI8qXB61lkMkcjccqNRlAVW2J4=
Subject key identifier:   ED:DA:6E:FE:73:22:07:63:01:9C:6A:EE:BC:2E:C9:4D:E4:B0:9C:89
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer:       /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial:       019D265F45F5673A478C44A2BFED3DC8E7BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 19:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:11 +0000
Files and hashes:         1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: PEuJBsEtC9kggF+8hMv801rAsIr49J8DiLXnfPr33qs=)
                          2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
                          3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:45:f5:67:3a:47:8c:44:a2:bf:ed:3d:c8:e7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
        Validity
            Not Before: Mar 25 19:01:11 2026 GMT
            Not After : Mar 26 19:01:11 2026 GMT
        Subject: CN=edda6efe73220763019c6aeebc2ec94de4b09c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:8c:e7:b1:9c:23:f0:e3:ae:0a:d5:14:96:
                    d7:97:00:3b:2f:01:57:51:f4:09:8b:d1:23:ed:72:
                    eb:0c:e3:62:d0:22:6c:0a:ff:87:09:4b:35:03:49:
                    37:2a:d6:58:ea:fc:16:04:4d:dc:6b:50:85:bf:d0:
                    7d:6a:11:76:ce:8a:4a:49:c7:a3:50:8f:86:b9:3e:
                    73:0a:5a:cf:d2:1f:79:ab:78:9f:47:ec:2c:d8:e9:
                    94:38:3a:6e:e2:34:a9:57:9c:45:d3:8c:57:d3:2a:
                    13:3c:6c:83:33:56:aa:a5:7d:be:e6:ec:ba:ac:77:
                    86:9e:4a:41:14:bb:b7:22:a2:e4:d4:36:72:a1:91:
                    44:8e:c5:0c:53:7a:00:cd:3d:b3:33:77:ec:8a:0a:
                    9f:40:f0:9c:72:db:ea:52:7e:54:1d:3f:a9:92:a8:
                    7c:c3:a1:2e:00:d5:28:a7:8b:01:1a:17:eb:24:9a:
                    8f:17:de:79:cc:94:c3:d3:63:1e:a0:68:2e:f6:c6:
                    02:d3:6c:32:25:b7:54:1f:7c:a3:2d:eb:0b:a4:16:
                    fc:f2:22:db:a5:7d:b2:63:44:8a:d2:a9:7f:22:9c:
                    4b:ab:42:9b:4f:00:73:5d:9a:56:20:16:8d:3b:6d:
                    ee:81:92:b4:54:2b:5c:86:f3:57:30:43:e1:b0:94:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DA:6E:FE:73:22:07:63:01:9C:6A:EE:BC:2E:C9:4D:E4:B0:9C:89
            X509v3 Authority Key Identifier:
                keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:76:52:93:98:77:63:91:81:c7:f4:99:6f:26:90:46:9c:c5:
         2d:92:70:bf:14:ef:eb:35:f3:33:51:63:64:dc:59:4e:ab:19:
         3a:9f:c1:38:ad:3f:f1:eb:ee:e4:cb:08:42:56:6b:08:a5:2b:
         9e:c6:32:64:43:ce:83:e7:57:0a:6c:86:f2:e3:05:75:99:b1:
         2f:52:61:3d:06:bb:91:e9:ad:e3:01:2a:b8:13:c9:f8:73:87:
         f1:b9:ad:7e:7e:9a:f8:34:53:d5:0d:b5:1c:5a:0f:9b:c8:30:
         0c:1e:9c:54:30:3c:57:00:25:a0:3e:6f:8b:74:ec:5f:f6:db:
         f0:85:1f:0f:62:a3:6b:4a:22:65:6f:bf:fe:d7:5e:74:c0:33:
         d1:6c:84:1c:35:b2:73:96:d9:fb:9c:22:65:51:80:11:d8:e8:
         61:05:4b:d4:c3:ce:a9:ee:7c:74:32:d2:33:25:a3:18:9f:02:
         ba:1c:a9:38:30:01:20:51:b2:77:af:db:6d:ea:67:e1:66:c1:
         46:ed:db:68:59:33:5f:ec:1d:23:ca:9c:dc:cc:d0:b8:61:24:
         38:1c:ba:06:b4:c8:76:d1:65:54:7c:d1:cd:38:43:92:fe:c3:
         79:e2:69:6c:38:6d:6a:ed:83:df:bf:83:0a:a8:71:16:f4:89:
         46:b5:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:20 2026 by rpki-client