Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File:                     exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier:          iGEzccaKkFp1CR8m4tth7loZDrelbU9oZbKArTAAGf4=
Subject key identifier:   AE:58:60:E6:35:D7:B2:64:CA:38:C1:D4:45:E7:6D:02:50:AF:0F:69
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer:       /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial:       019D28F2A44865E7E030F624E4684F17434B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 07:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:23 +0000
Files and hashes:         1: JVyJapkubi6hwpawUDVyCMGChmk.roa (hash: 9+Xk8J65pvF3WM1GTEgD30u0QtmBjUESAobq/ZpU38Y=)
                          2: dHzF4P3tNtzyJNFvhC01ek08kYc.roa (hash: bUI0+2xFTsseXiv/I8zBJZyi3U6hUXamNCOgX/NaEog=)
                          3: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: vj5O/eZduoeXqgCJYDhcV6nQ7CO1CBksGil/mD4sbUQ=)
                          4: qPSlTWuBwEhYZesqn2vIMokA97I.roa (hash: +VxHS7EmR7QvgmKrejlLV1ZOVtujydoNhAoPrqYBYks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:a4:48:65:e7:e0:30:f6:24:e4:68:4f:17:43:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
        Validity
            Not Before: Mar 26 07:01:23 2026 GMT
            Not After : Mar 27 07:01:23 2026 GMT
        Subject: CN=ae5860e635d7b264ca38c1d445e76d0250af0f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:b5:62:2f:82:ad:c3:6f:c0:51:4a:a7:54:
                    ab:35:b5:d2:78:03:c2:7f:ad:95:cc:90:1b:94:a8:
                    1c:b0:e9:d5:ac:cb:f4:b1:f2:87:0c:5c:0d:ae:09:
                    c4:51:94:7b:1d:da:df:1f:d0:c9:00:24:70:1d:09:
                    af:42:ae:66:d2:74:9e:4c:9d:cd:8a:fe:dd:d8:06:
                    8e:c8:13:b9:23:9b:be:f1:3b:48:19:9b:ad:a5:ec:
                    11:e2:a7:bd:47:ab:72:60:82:e4:44:4d:7c:d6:ef:
                    84:2b:db:18:cb:fe:a1:cf:b4:97:96:02:b5:ee:eb:
                    24:37:a9:03:a6:e7:a4:93:25:16:ef:6e:26:56:fb:
                    f5:d5:7d:6c:a8:23:7e:c7:c0:d5:e9:50:89:be:80:
                    67:db:15:90:05:0e:93:47:f5:c5:53:2e:ec:3f:76:
                    97:4d:39:d0:7d:62:d2:9d:a3:72:87:e8:a9:19:8d:
                    0d:09:be:99:3b:60:4e:89:bc:31:2d:dd:53:62:89:
                    83:e0:7c:7e:34:8f:1a:10:7d:04:04:6c:80:53:cf:
                    3d:fa:a8:f8:0b:89:94:bd:47:e5:f2:cb:6e:1d:39:
                    7f:d9:8f:28:84:d1:22:3c:ec:46:80:c7:bc:59:e6:
                    01:b4:67:ba:d0:8a:de:3d:4c:63:f1:db:33:02:a9:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:58:60:E6:35:D7:B2:64:CA:38:C1:D4:45:E7:6D:02:50:AF:0F:69
            X509v3 Authority Key Identifier:
                keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:00:fa:ed:ed:51:ad:a8:ca:52:35:2d:38:37:e7:ef:5b:
         68:1c:33:34:ae:53:6e:0e:1d:4e:91:f7:77:af:f3:94:18:6d:
         0f:1a:e5:dc:94:ba:f6:55:1e:96:9c:9e:47:ee:3f:79:b7:d5:
         f3:a1:5b:15:d4:d1:4e:b0:75:68:83:46:80:02:60:b6:f7:ed:
         d5:84:f0:13:3f:58:50:04:91:76:a5:85:42:2f:41:68:97:87:
         25:2f:7e:38:13:0c:89:fb:dd:d4:3c:83:6b:0e:60:54:79:86:
         88:08:cc:6a:dc:8b:c7:d6:2b:87:fa:8a:54:9f:e0:67:1c:be:
         05:8f:cb:00:af:19:f0:4d:82:97:b5:4c:64:08:d9:68:c6:dc:
         1c:d5:5a:ba:78:4d:58:66:c2:48:7a:c7:1f:fc:5e:ea:4a:4a:
         22:79:af:be:3c:06:5b:dc:1a:e0:87:21:54:8a:48:dd:98:70:
         80:7d:67:70:aa:13:f3:68:bc:97:53:21:de:ea:cc:e1:34:b6:
         f4:87:55:89:95:23:0d:51:aa:e5:46:eb:39:5c:0f:e4:29:40:
         11:45:a7:81:68:46:ff:44:df:4e:29:60:66:1a:14:87:99:18:
         88:4c:6e:5b:d3:0a:c2:ec:52:c7:e1:75:24:2a:2d:39:dc:10:
         d4:08:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:45 2026 by rpki-client