Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File:                     fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier:          C2N56vcHq0AWSBcyQJwuoIteTDHcw7BL68DdGI2dPWY=
Subject key identifier:   AD:8F:4A:40:01:93:E6:29:FF:BA:E8:ED:3E:4C:14:4B:92:BF:00:A8
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer:       /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial:       019D265F8AC481B8697C25FA1E9CCA927D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:28 +0000
Files and hashes:         1: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: OAiWKM9pBY7a0K6KqsbAX6ggK7wvjLNyspXZ9G4S76Q=)
                          2: sxm22_6W7Ex3PLe8eO3R-ye3APU.roa (hash: GsyS1+P6O5X7lOJscZO4UAmyFbPtGTQroSIFlXKFsu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:8a:c4:81:b8:69:7c:25:fa:1e:9c:ca:92:7d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
        Validity
            Not Before: Mar 25 19:01:28 2026 GMT
            Not After : Mar 26 19:01:28 2026 GMT
        Subject: CN=ad8f4a400193e629ffbae8ed3e4c144b92bf00a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:fe:0c:b8:3d:86:69:72:3e:7c:09:b7:93:
                    22:e0:8f:63:8b:ff:75:33:08:a7:c8:85:6b:ea:ce:
                    3f:10:11:c3:cb:ed:61:3b:a6:b2:80:b7:a5:a4:db:
                    4a:4b:91:b3:2f:d3:55:07:4a:aa:de:58:20:8a:32:
                    b2:85:d3:c0:bd:79:f4:49:e1:06:8b:97:0f:49:13:
                    47:55:6b:ba:68:86:a4:df:ce:c4:a3:f8:75:58:6e:
                    8b:b2:28:8a:00:ba:f3:5c:04:6a:f8:9f:94:bb:ed:
                    18:03:5f:65:3a:03:d4:f3:40:ee:c3:c8:81:6d:83:
                    71:d5:ff:3a:27:b9:18:46:a7:25:25:75:d9:a7:04:
                    62:ad:4c:41:f0:33:e6:b1:0e:56:0c:b8:99:ab:82:
                    71:fc:c7:8f:27:7e:11:32:4a:19:14:28:83:ad:2e:
                    eb:28:cf:eb:35:5c:35:4d:82:d5:f0:5c:7b:d0:38:
                    f9:77:63:db:37:28:9f:7d:43:5f:88:f1:03:cd:83:
                    ae:2a:80:19:80:7c:70:8a:f6:09:59:09:a9:47:80:
                    32:c4:89:de:73:b6:0e:65:39:23:34:f9:f6:22:7d:
                    a0:f7:1f:0a:39:fc:4b:d7:8f:ce:c1:51:e6:ba:03:
                    c6:9e:ce:69:5b:8a:38:f9:6c:89:8a:f2:96:bc:d5:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:4A:40:01:93:E6:29:FF:BA:E8:ED:3E:4C:14:4B:92:BF:00:A8
            X509v3 Authority Key Identifier:
                keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:50:b6:ff:14:0d:65:59:1a:1f:37:77:6b:9f:bb:c5:ae:e2:
         99:5b:d6:80:1e:26:4a:64:f8:16:01:ae:04:c5:93:a5:a4:91:
         7b:6d:90:ad:79:b6:a7:e0:70:92:fb:d7:53:7d:19:3a:5a:78:
         1e:99:5c:a1:5b:63:71:bc:16:88:4e:b7:82:54:42:7a:77:83:
         93:90:85:82:fc:eb:a9:3a:09:01:45:77:96:d7:11:e6:9b:8d:
         14:13:3f:90:6c:32:57:34:bb:16:e1:39:8c:01:58:39:eb:44:
         a9:23:f6:14:64:0e:6b:6c:a4:25:10:63:05:a5:b0:91:52:4a:
         15:16:ed:91:3c:cd:b6:e0:ba:4d:81:9d:e3:54:63:71:88:2b:
         f1:e0:89:0e:93:05:2a:6f:51:41:45:ed:15:f3:cb:61:22:f8:
         d3:56:f6:9c:ca:22:d3:cf:c4:2b:7b:9f:59:6e:66:61:ce:9a:
         0c:34:b5:e5:9b:23:3c:34:99:ec:09:b1:a6:2d:85:f2:eb:94:
         87:1b:5c:d5:ec:aa:8c:77:c5:79:e6:8c:90:a4:78:53:99:05:
         b2:d7:db:57:8c:21:f6:e1:e8:bd:11:62:d5:ff:ef:a1:e2:1e:
         19:c7:b1:03:2f:c6:84:bc:5e:d2:f9:73:ac:64:20:df:e5:3e:
         6e:42:80:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX4rEgbhpfCX6HpzKkn0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGMxMzcxZGQ2YWZkNWZkNzllYTk4NGRhM2ZiZGExYjk0
YWZlMjMwHhcNMjYwMzI1MTkwMTI4WhcNMjYwMzI2MTkwMTI4WjAzMTEwLwYDVQQD
EyhhZDhmNGE0MDAxOTNlNjI5ZmZiYWU4ZWQzZTRjMTQ0YjkyYmYwMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAD+DLg9hmlyPnwJt5Mi4I9ji/91
MwinyIVr6s4/EBHDy+1hO6aygLelpNtKS5GzL9NVB0qq3lggijKyhdPAvXn0SeEG
i5cPSRNHVWu6aIak387Eo/h1WG6LsiiKALrzXARq+J+Uu+0YA19lOgPU80Duw8iB
bYNx1f86J7kYRqclJXXZpwRirUxB8DPmsQ5WDLiZq4Jx/MePJ34RMkoZFCiDrS7r
KM/rNVw1TYLV8Fx70Dj5d2PbNyiffUNfiPEDzYOuKoAZgHxwivYJWQmpR4AyxIne
c7YOZTkjNPn2In2g9x8KOfxL14/OwVHmugPGns5pW4o4+WyJivKWvNVcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2PSkABk+Yp/7ro7T5MFEuSvwCoMB8GA1UdIwQY
MBaAFHyME3Hdav1f156phNo/vaG5Sv4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgt
MWFjNWQ4ODYzMDgyLzEvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgtMWFjNWQ4ODYzMDgy
LzEvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFC2/xQN
ZVkaHzd3a5+7xa7imVvWgB4mSmT4FgGuBMWTpaSRe22QrXm2p+BwkvvXU30ZOlp4
HplcoVtjcbwWiE63glRCeneDk5CFgvzrqToJAUV3ltcR5puNFBM/kGwyVzS7FuE5
jAFYOetEqSP2FGQOa2ykJRBjBaWwkVJKFRbtkTzNtuC6TYGd41RjcYgr8eCJDpMF
Km9RQUXtFfPLYSL401b2nMoi08/EK3ufWW5mYc6aDDS15ZsjPDSZ7Amxpi2F8uuU
hxtc1eyqjHfFeeaMkKR4U5kFstfbV4wh9uHovRFi1f/voeIeGcexAy/GhLxe0vlz
rGQg3+U+bkKAzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:26 2026 by rpki-client